
$ rpki-client -vvf rpki.apnic.net/member_repository/A91410E7/4C74EAB824ED11F18CD5B3FEB1833773/r6IHkiKKwgHGVu35hNctIIAYQFc.mft
File: r6IHkiKKwgHGVu35hNctIIAYQFc.mft (raw, json)
Hash identifier: QzKIlAkpySDCtIId+EAHVkG8/W6vDrqKCqn0jvqmwHQ=
Subject key identifier: 75:32:A7:7C:31:A0:F0:D5:FA:9C:05:2A:E8:59:19:32:7E:9F:95:59
Authority key identifier: AF:A2:07:92:22:8A:C2:01:C6:56:ED:F9:84:D7:2D:20:80:18:40:57
Certificate issuer: /CN=A91410E7/serialNumber=AFA20792228AC201C656EDF984D72D2080184057
Certificate serial: 04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6IHkiKKwgHGVu35hNctIIAYQFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91410E7/4C74EAB824ED11F18CD5B3FEB1833773/r6IHkiKKwgHGVu35hNctIIAYQFc.mft
Manifest number: 04
Signing time: Wed 25 Mar 2026 08:25:43 +0000
Manifest this update: Wed 25 Mar 2026 08:25:43 +0000
Manifest next update: Wed 01 Apr 2026 08:25:43 +0000
Files and hashes: 1: r6IHkiKKwgHGVu35hNctIIAYQFc.crl (hash: xtc2g7dIq1fQxK3ENuZvCQh7bzRw16L+jtbkVr9UoMQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91410E7/4C74EAB824ED11F18CD5B3FEB1833773/r6IHkiKKwgHGVu35hNctIIAYQFc.crl
rsync://rpki.apnic.net/member_repository/A91410E7/4C74EAB824ED11F18CD5B3FEB1833773/r6IHkiKKwgHGVu35hNctIIAYQFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6IHkiKKwgHGVu35hNctIIAYQFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91410E7, serialNumber=AFA20792228AC201C656EDF984D72D2080184057
Validity
Not Before: Mar 25 08:25:43 2026 GMT
Not After : Apr 1 08:25:43 2026 GMT
Subject: CN=69c39c07-4eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:83:32:7f:41:c6:dd:5f:2f:cc:03:7e:99:
00:90:f3:09:34:ec:d5:66:7e:0a:01:b7:0c:c4:50:
45:ad:b6:84:49:12:e3:b8:d5:11:fc:9a:0a:ad:de:
d6:1a:97:31:68:e1:7f:6a:dc:74:77:f8:b8:5e:6b:
b2:af:ea:04:9c:71:2c:dc:f8:a5:bb:47:e6:5f:c1:
ee:16:5c:a2:5a:ab:d4:96:f8:83:fc:b9:25:4f:52:
b1:d3:e0:ed:36:45:8d:34:51:9c:ce:80:36:58:66:
d0:2d:70:41:37:6d:15:e4:83:c0:03:a2:3c:4d:2d:
04:39:1c:51:e2:34:9a:db:3e:f0:8e:5c:50:65:db:
fb:04:94:91:3f:f3:fc:ec:c9:92:44:86:df:91:97:
02:3a:33:50:bf:80:e9:38:2e:50:4b:56:43:b2:92:
5a:e3:7f:cf:94:1c:6a:61:5a:28:f9:fe:25:3e:70:
b2:89:13:72:2f:30:a3:72:19:2d:86:de:a3:25:3b:
9d:d6:63:eb:18:bc:cf:14:ed:20:9a:bc:23:ef:f2:
bc:32:c6:c1:dd:cd:e3:d4:3d:3e:15:b3:19:f4:82:
f6:82:21:52:98:ee:20:4d:fb:19:71:04:27:99:3d:
ce:e6:ef:1f:aa:7c:8d:89:86:4d:77:e6:1a:43:f3:
e8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:32:A7:7C:31:A0:F0:D5:FA:9C:05:2A:E8:59:19:32:7E:9F:95:59
X509v3 Authority Key Identifier:
keyid:AF:A2:07:92:22:8A:C2:01:C6:56:ED:F9:84:D7:2D:20:80:18:40:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91410E7/4C74EAB824ED11F18CD5B3FEB1833773/r6IHkiKKwgHGVu35hNctIIAYQFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6IHkiKKwgHGVu35hNctIIAYQFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410E7/4C74EAB824ED11F18CD5B3FEB1833773/r6IHkiKKwgHGVu35hNctIIAYQFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:16:5f:98:bf:3d:0e:fb:6b:07:a9:8d:ad:6a:04:4b:fb:97:
e7:af:61:fd:1f:40:6d:7f:8e:9d:88:b0:0b:01:70:e3:44:5a:
01:fa:d0:49:a9:24:4a:dc:e7:b1:b3:be:7c:ff:c4:8c:97:89:
2e:25:d0:b9:b7:80:77:32:92:45:c7:c9:44:7b:fa:75:c5:85:
2d:d8:b3:1e:d4:5c:7e:6c:f7:7a:84:2d:0e:34:da:a2:e5:68:
05:0d:88:5d:15:23:5c:10:4b:f1:b1:78:45:b5:fc:de:88:be:
9d:eb:18:5f:4b:e8:05:85:7b:87:db:16:4c:43:86:38:da:3c:
b7:12:ad:c4:a5:5d:50:be:82:0b:d2:1c:fc:1c:9b:a6:cf:3f:
3f:d6:ba:ad:55:36:79:75:e4:42:40:28:1a:e3:07:3a:5c:19:
2e:d1:92:d1:6e:d9:5c:b9:50:c8:9a:ef:eb:9e:6f:fc:35:0a:
fb:e5:8b:cc:20:56:54:89:08:4b:92:4f:91:bc:00:f6:33:c9:
9b:70:9a:a2:b2:96:aa:2f:0a:1c:63:0e:86:2b:2b:86:37:ce:
c9:34:cb:1b:d3:0b:98:5a:32:d5:f6:27:f9:60:58:94:08:5a:
a0:ec:83:79:bc:9a:3e:74:03:b6:08:b1:6e:6c:47:fc:61:64:
7c:49:80:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:02:07 2026 by rpki-client