
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
File: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft (raw, json)
Hash identifier: d6mdxRFjo+CbOdbILzQVdAFpXuk3WwexKmoEU0DrwEo=
Subject key identifier: B5:81:D8:01:44:72:F8:7A:97:13:84:D1:CC:CE:7F:F3:1D:10:6F:52
Authority key identifier: EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E
Certificate issuer: /CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
Certificate serial: 0B69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
Manifest number: 0B4E
Signing time: Tue 12 May 2026 19:17:43 +0000
Manifest this update: Tue 12 May 2026 19:17:42 +0000
Manifest next update: Tue 19 May 2026 19:17:42 +0000
Files and hashes: 1: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl (hash: fxMZARVN0bpTxqauVPw9ehKRPwE/m2p+uDT3iSHxyw0=)
2: 144D1F865F7F11EBB5C08239C4F9AE02.roa (hash: a98jB4MSjv/smFnJ8Lz82VIPKbQpi9CPszl7PwTNJ3k=)
3: 2996029C591611EA86D2A42DC4F9AE02.roa (hash: YoQLzF1Lm5yCnjPw539aGKaVVb5igGFfhZc6/2536gM=)
4: 45A83CC809EE11EBAD92B66BC4F9AE02.roa (hash: zxbNBeuYEf6c+f0pWWpGgn67zb1hnSTjyBGEz1Av9Hk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl
rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:17:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2921 (0xb69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154B7E, serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
Validity
Not Before: May 12 19:17:42 2026 GMT
Not After : May 19 19:17:42 2026 GMT
Subject: CN=6a037cd6-6e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b1:3e:f9:d4:1b:0c:80:fa:9f:73:fc:da:9d:
c2:0b:b6:b7:08:10:39:03:19:b4:69:a9:40:4e:37:
22:06:b8:ca:28:50:a0:81:95:81:f2:46:5d:0a:05:
f2:87:a0:c7:83:0e:89:f6:c7:73:fa:51:fa:b8:05:
ab:ec:2f:60:25:72:70:e0:06:78:67:2c:04:6e:d8:
7a:8e:33:67:69:ac:4b:e3:3a:ee:87:8e:0d:40:ba:
4d:99:99:41:79:f1:7c:5e:51:7a:74:e3:57:5c:90:
df:32:04:6e:ac:66:e8:f6:4c:17:bd:f2:ba:a9:61:
dd:6a:04:d6:3c:88:e6:d4:58:94:95:87:94:e5:c3:
f0:da:40:4d:cd:fc:67:61:93:d3:00:c8:31:35:8a:
1b:ed:9e:3d:a9:8c:4d:74:06:61:9d:b3:43:de:4b:
5b:0a:1b:ca:85:e1:e9:3b:94:69:dd:f4:81:c2:41:
52:f1:96:3e:14:6f:18:eb:5a:ec:91:db:56:02:97:
e5:9b:6a:a7:58:d3:53:92:17:5d:96:68:17:16:6b:
83:a4:97:e9:ba:2b:36:80:d3:c7:f2:61:8f:2d:67:
16:cd:53:e3:41:8e:2f:88:5e:5c:53:f1:ec:81:f8:
05:0b:3f:0d:3c:c8:ad:e9:10:30:7c:bb:e1:45:08:
3c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:81:D8:01:44:72:F8:7A:97:13:84:D1:CC:CE:7F:F3:1D:10:6F:52
X509v3 Authority Key Identifier:
keyid:EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e6:5d:b8:2b:23:99:28:60:c2:25:2d:7d:0c:20:42:e0:1f:2a:
89:8a:76:07:ae:4e:94:be:b9:fd:3e:35:22:90:f1:b8:08:32:
a2:15:96:51:cd:ff:62:96:62:36:03:b1:26:64:c1:2c:78:41:
4c:af:be:8e:b2:50:9c:4f:28:29:89:67:87:ce:db:0b:26:ef:
2a:26:5b:fa:04:c0:bc:23:c3:d5:4e:13:dc:34:16:0f:0a:24:
6e:cc:02:ed:73:0c:10:b5:ec:af:41:6a:6b:12:87:21:80:01:
e5:0c:bb:26:3c:e1:81:88:75:5b:d4:bc:a0:61:57:59:01:d4:
c8:08:d4:f6:0f:73:b8:23:0d:5c:c4:1b:a7:5c:bf:4c:cc:5a:
dd:a2:93:36:44:81:bb:be:10:11:4f:77:35:8d:7f:44:75:fc:
96:0d:58:c4:af:03:6a:bf:5a:b8:a9:65:d2:ae:84:04:7c:1e:
15:97:d0:4f:41:8e:01:64:3b:8c:1a:31:a4:36:00:ec:25:17:
6a:fb:12:4d:34:ba:f0:2d:7d:a7:d7:b5:c9:f9:ce:30:c7:0b:
0a:62:8e:3d:30:95:fb:5c:23:4c:1d:bf:b5:fb:fc:50:ab:6b:
52:e6:fe:44:bd:64:fd:be:48:53:2c:b0:7b:f2:e3:92:c6:eb:
eb:6b:c4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:04:18 2026 by rpki-client