
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
File: 6VdtMs2hm7hvPBYuyf020_0lucE.mft (raw, json)
Hash identifier: u3dLxyISWoktZu3IyrGssM/8WFo1wPfNy2XoJgQZKXA=
Subject key identifier: F0:D4:75:6A:6B:CF:27:31:96:D5:2F:C5:C4:35:67:9D:76:42:0F:84
Authority key identifier: E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1
Certificate issuer: /CN=A9131359/serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1
Certificate serial: 0279
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
Manifest number: 0272
Signing time: Wed 25 Mar 2026 01:22:14 +0000
Manifest this update: Wed 25 Mar 2026 01:22:13 +0000
Manifest next update: Wed 01 Apr 2026 01:22:13 +0000
Files and hashes: 1: 6VdtMs2hm7hvPBYuyf020_0lucE.crl (hash: hYRPiIUzsfGhqMfqEIVj6NXZkBRVSS4WB7qqOKmVQUg=)
2: 01C299E0662611ED94A8DA42C4F9AE02.roa (hash: oC6miXWdaPojqcpO8i3+8D+CMDRbnsGghAkCPd5g198=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl
rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:22:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 633 (0x279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131359, serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1
Validity
Not Before: Mar 25 01:22:13 2026 GMT
Not After : Apr 1 01:22:13 2026 GMT
Subject: CN=69c338c5-baf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bb:60:f2:e0:c3:45:84:42:9a:79:58:c2:80:
53:6e:e5:7e:54:3d:15:01:05:2c:36:12:4e:ca:a3:
86:b8:80:79:e9:60:bd:39:31:de:cd:ee:94:4a:90:
37:63:bc:87:55:7f:99:9b:11:3f:58:a8:05:fe:58:
d7:5c:bc:f0:68:21:c0:13:ad:3b:a9:52:af:1d:a4:
a7:52:d9:51:b7:97:04:0f:35:f8:18:dc:9a:9f:75:
64:51:cc:16:5b:c7:e4:be:99:5f:d9:af:f6:f8:8a:
76:34:ee:4f:5f:85:25:b6:71:13:8a:f9:c6:38:90:
15:0a:4f:24:75:ad:1d:4b:39:4c:58:e4:a6:fa:58:
70:62:7d:40:84:9a:ce:18:25:27:41:0e:0f:46:c6:
dd:41:4d:09:ed:2c:04:0c:01:d3:f5:b0:86:87:c5:
be:e7:ea:38:0e:10:a1:c3:b3:f1:6f:e2:a5:c7:59:
b4:47:d7:1b:96:43:15:d5:0e:a1:15:96:40:ca:a8:
56:82:3b:55:03:86:12:7a:33:9f:51:f6:ec:88:cf:
4a:b8:7b:49:55:1e:74:9f:a4:d8:43:83:6b:5e:d7:
0e:40:70:c7:aa:8c:99:0a:a6:16:20:a6:09:c5:32:
12:5c:a9:d3:10:56:9d:5a:6a:01:02:67:ea:46:6c:
88:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D4:75:6A:6B:CF:27:31:96:D5:2F:C5:C4:35:67:9D:76:42:0F:84
X509v3 Authority Key Identifier:
keyid:E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:80:de:bc:fc:6c:c1:56:d1:0d:07:d4:50:63:9e:0c:de:3a:
63:79:bd:7f:38:81:e6:ba:da:67:fe:ce:cb:ec:06:19:a1:a2:
7e:54:f3:0a:df:c5:3d:37:c5:97:27:1e:cf:fd:16:05:ab:63:
d4:8f:65:d8:c5:00:90:21:a3:17:92:4a:28:f4:92:18:1b:a8:
5f:80:3a:f1:8a:44:95:b7:bc:73:5c:a8:dc:c2:cc:62:56:ee:
62:c8:df:c5:60:40:14:25:3b:5f:ad:e6:22:a1:91:29:1c:e8:
9b:4b:d5:b5:27:b7:d3:76:a3:62:1a:06:05:dc:16:33:bd:c5:
ec:d3:f1:84:8d:44:47:00:c2:e6:42:07:c7:65:63:1f:e8:4b:
3b:c0:d2:d1:28:b6:f1:06:34:aa:da:3b:c5:d3:61:4e:36:44:
7f:64:67:41:58:81:10:68:8d:64:90:64:c1:4c:8d:67:57:30:
70:8a:bc:5c:c4:8c:36:6f:40:c5:28:2f:8b:43:0e:d0:54:2a:
aa:cb:ff:72:db:b4:01:65:b7:e2:67:6b:ed:a8:3e:b4:ce:ec:
44:cd:df:f1:1b:43:0f:76:9f:9a:21:05:ce:2b:4a:da:d4:04:
6c:c1:1a:ac:73:76:11:91:22:ac:c5:9d:c9:35:a7:66:34:a3:
dc:e6:6b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:50:28 2026 by rpki-client