
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
File: 6qSDu71coOErPsD25wxbqq40VSs.mft (raw, json)
Hash identifier: A67JHeWGowNdtXGj8f58c0dUgNOYLcilV7KviagMoto=
Subject key identifier: 8A:7E:10:0D:36:2F:37:B3:7A:BC:09:22:B9:4C:72:74:5B:4B:18:07
Authority key identifier: EA:A4:83:BB:BD:5C:A0:E1:2B:3E:C0:F6:E7:0C:5B:AA:AE:34:55:2B
Certificate issuer: /CN=A914BAA2/serialNumber=EAA483BBBD5CA0E12B3EC0F6E70C5BAAAE34552B
Certificate serial: F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
Manifest number: ED
Signing time: Mon 11 May 2026 06:45:14 +0000
Manifest this update: Mon 11 May 2026 06:45:13 +0000
Manifest next update: Mon 18 May 2026 06:45:13 +0000
Files and hashes: 1: 6qSDu71coOErPsD25wxbqq40VSs.crl (hash: NktR7dt7fiqW5Ygfa7S3HMCdR37Q88ndSU1g7FYxaC4=)
2: 535D1F52069511F090414823C4F9AE02.roa (hash: fFn43c+yB+C9Km2SsZKRXLmx2giwdUoMyfnmnxY1vo4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.crl
rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:45:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BAA2, serialNumber=EAA483BBBD5CA0E12B3EC0F6E70C5BAAAE34552B
Validity
Not Before: May 11 06:45:13 2026 GMT
Not After : May 18 06:45:13 2026 GMT
Subject: CN=6a017afa-71cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d6:3b:e3:46:61:fa:6c:25:49:34:b5:e2:29:
02:e6:8f:22:09:04:a9:5c:69:82:5c:a4:e4:1e:fa:
d5:08:50:1f:14:20:34:bf:46:5a:c3:8c:a6:3b:65:
35:12:b5:be:6d:c7:47:d5:36:66:99:12:1c:41:31:
c3:ef:44:f1:51:ff:94:70:95:cd:4d:e3:d2:0e:be:
5e:72:83:a8:93:cb:15:98:51:c6:ec:11:7f:85:de:
85:57:15:ff:2e:d0:2b:54:ca:e1:da:a4:f3:fc:3d:
ac:06:13:3b:33:ea:fe:55:f9:d4:03:49:a5:19:0e:
7a:6a:37:33:51:45:a2:16:21:46:74:cf:23:4c:1d:
67:52:5e:24:f6:20:b9:85:20:cd:05:5a:92:64:0c:
1f:12:0a:73:b7:b2:51:94:ca:d7:fd:b7:e0:57:18:
17:c3:7a:83:08:bd:b9:1b:95:46:98:3f:68:b8:31:
45:92:fb:62:19:85:30:7f:5e:1b:a9:67:fc:ea:e1:
c4:6a:17:40:64:72:d7:8c:2b:e9:b8:cf:a5:75:c1:
8a:7e:35:e4:2b:29:ae:61:1f:15:22:a5:6c:e3:5f:
3c:d3:9c:11:da:23:34:bc:d4:b9:fa:f4:8c:9f:2e:
f9:01:a2:88:07:43:96:79:78:eb:b3:ef:a0:91:32:
ac:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7E:10:0D:36:2F:37:B3:7A:BC:09:22:B9:4C:72:74:5B:4B:18:07
X509v3 Authority Key Identifier:
keyid:EA:A4:83:BB:BD:5C:A0:E1:2B:3E:C0:F6:E7:0C:5B:AA:AE:34:55:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:03:16:69:6c:a8:45:39:0e:e8:8d:4a:8e:02:24:71:c5:19:
3e:2e:0c:65:06:8b:3f:1a:33:9a:fd:b9:08:23:b5:96:3d:24:
d2:60:5a:82:45:cf:07:86:62:4e:7d:c7:b3:f0:dc:c0:13:b2:
cf:97:12:7c:dc:45:67:3c:c1:63:41:18:d2:c5:86:cc:e4:a1:
0f:0e:cb:23:e1:5c:b4:56:89:5e:05:99:81:16:44:39:46:0e:
28:06:90:b8:0e:8c:6c:3f:f5:d9:96:1c:82:ab:0f:a9:e5:42:
da:0b:74:46:01:b0:20:ae:1b:38:29:af:01:4c:74:c9:29:90:
f2:24:39:e9:16:03:94:bd:f6:72:83:57:5c:8e:c7:79:8a:bc:
33:49:65:f9:af:ed:66:64:7c:16:d0:7f:f9:17:6b:7c:71:b6:
ac:d0:f1:5e:32:93:15:fe:eb:93:cd:ab:1b:d8:96:60:ec:1e:
46:35:76:ea:dc:e0:a4:9e:7b:3e:bf:39:41:b9:1d:d9:b9:e2:
e5:27:70:ad:58:c4:7d:cf:82:f5:61:85:5e:f6:ad:76:76:0d:
30:88:3c:de:3f:d8:e3:23:36:b7:db:25:3d:0d:90:5e:15:f8:
b7:a4:c3:90:d0:c3:22:ad:e2:23:c5:a0:68:d6:4a:80:2b:91:
d0:ca:af:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:03:39 2026 by rpki-client