
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
File: 6qSDu71coOErPsD25wxbqq40VSs.mft (raw, json)
Hash identifier: WGce0TnaMY5opofJasZj/DxjtWvfrXWY/iCDd2J8fNQ=
Subject key identifier: 8B:C0:AD:B0:49:FD:7D:22:52:D2:97:95:31:D2:FD:C1:27:11:09:83
Authority key identifier: EA:A4:83:BB:BD:5C:A0:E1:2B:3E:C0:F6:E7:0C:5B:AA:AE:34:55:2B
Certificate issuer: /CN=A914BAA2/serialNumber=EAA483BBBD5CA0E12B3EC0F6E70C5BAAAE34552B
Certificate serial: E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
Manifest number: D5
Signing time: Wed 25 Mar 2026 06:07:27 +0000
Manifest this update: Wed 25 Mar 2026 06:07:27 +0000
Manifest next update: Wed 01 Apr 2026 06:07:27 +0000
Files and hashes: 1: 6qSDu71coOErPsD25wxbqq40VSs.crl (hash: LMfV9VJKieweMqW8ildiuRXo/pZfmAai8DxKT4/HiF0=)
2: 535D1F52069511F090414823C4F9AE02.roa (hash: fFn43c+yB+C9Km2SsZKRXLmx2giwdUoMyfnmnxY1vo4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.crl
rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224 (0xe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BAA2, serialNumber=EAA483BBBD5CA0E12B3EC0F6E70C5BAAAE34552B
Validity
Not Before: Mar 25 06:07:27 2026 GMT
Not After : Apr 1 06:07:27 2026 GMT
Subject: CN=69c37b9f-649f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:24:ed:56:b8:23:17:af:81:1c:60:46:e8:0d:
8d:0f:fd:24:d0:ff:19:2d:b3:e3:ea:c1:c7:1a:dc:
d9:e4:f1:ad:0d:82:69:a2:2a:7f:90:3e:7d:36:9e:
27:fc:dc:96:f3:5d:27:53:55:47:b4:0e:79:bd:a9:
5e:93:0c:1c:cf:0b:64:82:87:75:46:bc:19:13:eb:
53:44:c9:a2:af:33:20:e2:38:fc:13:1d:23:88:d7:
c2:03:b0:f1:be:e8:c4:78:89:80:13:b1:8b:44:d6:
ca:a1:cb:4d:22:b1:d2:fa:28:79:0b:17:c4:b3:14:
22:83:2c:67:ea:6f:c9:a4:26:11:52:02:4d:d8:37:
3d:2e:40:ca:51:41:13:83:b0:b8:9e:9a:6f:82:71:
0b:8f:49:5e:31:d6:38:7e:a5:17:21:07:db:4b:06:
9e:e7:f5:ce:69:8e:f8:9b:e8:59:f7:f9:8f:7f:c2:
6e:3a:39:2a:1c:d1:d0:fc:f8:30:e9:ef:a7:4e:58:
d4:78:9d:54:45:f5:05:a5:7e:8c:b2:69:db:95:5d:
18:6d:dd:88:6e:26:b7:d8:00:45:fc:e2:1d:82:e4:
04:e7:9e:0c:9e:9b:86:a8:91:58:b5:38:38:06:43:
b0:68:11:6b:47:82:92:0f:0c:d1:ad:5a:3c:8d:99:
ba:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C0:AD:B0:49:FD:7D:22:52:D2:97:95:31:D2:FD:C1:27:11:09:83
X509v3 Authority Key Identifier:
keyid:EA:A4:83:BB:BD:5C:A0:E1:2B:3E:C0:F6:E7:0C:5B:AA:AE:34:55:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:fb:e7:de:89:66:e9:02:13:f3:83:b0:f7:2a:ac:7b:2a:02:
cd:b1:6d:11:7c:a0:80:60:ce:8e:56:55:ce:b6:b2:ad:60:a6:
0d:37:43:60:57:3f:db:62:85:73:9d:c5:03:28:ad:9c:77:24:
5c:00:89:d9:49:8b:42:53:a5:4e:f0:70:d2:12:41:95:eb:40:
3f:83:40:c3:9c:40:08:2a:45:4e:c4:3f:d3:e5:72:88:df:37:
4c:df:12:c2:fb:02:9c:a3:24:9f:7b:10:70:f1:29:51:7d:f4:
1d:79:ca:06:77:fe:89:dc:4a:73:53:69:cc:e4:b8:80:5e:d7:
3e:64:6b:98:b8:99:d6:0a:23:94:c6:de:e3:e2:06:ea:db:87:
92:b3:8e:1e:0e:6c:61:42:1a:3b:a9:16:38:f8:7d:88:4c:c9:
bc:b6:9f:f1:1f:9b:34:c0:b0:f5:bb:08:f8:c3:5f:66:93:68:
b8:17:8e:28:7d:44:47:c0:5d:29:f0:a6:fc:05:89:11:21:e5:
03:cf:57:68:03:fe:71:41:e7:26:75:07:30:0b:98:68:69:fc:
e7:ab:80:bc:e8:2a:d9:09:d8:f2:4e:22:b4:10:f3:de:6e:36:
26:c8:22:1b:60:77:e8:6a:4f:02:7b:85:c4:0b:9b:c6:6a:e3:
9d:fc:07:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:27:58 2026 by rpki-client