
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft
File: 6osEPoaPdVc7zEVArUlUEC3JIrg.mft (raw, json)
Hash identifier: CYNDDctvclQsMoKejnm3ezTGcA1ZA9ARwwKUumwl5Sg=
Subject key identifier: 61:BB:33:70:2B:45:28:AD:77:78:D8:7F:B2:8B:E2:4D:4A:7E:00:8D
Authority key identifier: EA:8B:04:3E:86:8F:75:57:3B:CC:45:40:AD:49:54:10:2D:C9:22:B8
Certificate issuer: /CN=A9165772/serialNumber=EA8B043E868F75573BCC4540AD4954102DC922B8
Certificate serial: 0178
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft
Manifest number: 0166
Signing time: Wed 25 Mar 2026 04:08:18 +0000
Manifest this update: Wed 25 Mar 2026 04:08:17 +0000
Manifest next update: Wed 01 Apr 2026 04:08:17 +0000
Files and hashes: 1: 6osEPoaPdVc7zEVArUlUEC3JIrg.crl (hash: dVI4/PmAU/1mN89xkB9GT5FwJL1OYKiM31dnokSxlEI=)
2: 4F038F1007C511EFB3AD2E14C4F9AE02.roa (hash: mFAmKqQMHnaEa7oOMEM+iEc0u908fb6eF/TL+UUY7jc=)
3: 6EF22D0A07C411EF8A38A486C4F9AE02.roa (hash: 4Fa1sf+qimJbjQOgQPIn1jlun6T1P/IngBC7M6XYKmw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.crl
rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:08:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165772, serialNumber=EA8B043E868F75573BCC4540AD4954102DC922B8
Validity
Not Before: Mar 25 04:08:17 2026 GMT
Not After : Apr 1 04:08:17 2026 GMT
Subject: CN=69c35fb2-2b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:1d:88:e9:36:d4:19:d7:42:f1:ed:35:15:
a1:4f:81:93:f9:c4:7b:b1:3a:59:e3:70:ef:fd:1c:
5b:3f:a7:c1:d5:fe:ea:06:a1:43:a2:02:05:22:cb:
92:86:11:cc:17:21:45:aa:c5:b0:c0:0a:8d:b0:21:
d4:2c:a6:9d:77:08:cb:1b:8d:41:8b:94:4c:0a:10:
84:8c:76:03:b8:32:d3:2e:d5:69:26:50:4e:7a:0e:
c5:4e:63:b8:09:fb:8b:c1:88:3d:24:51:f3:78:77:
dc:7a:68:0f:bd:3a:90:5a:be:b2:0d:86:6b:77:ca:
3d:f2:00:37:fd:64:c3:eb:fb:7b:e6:b2:1d:67:f4:
54:b2:de:bc:46:fd:10:2a:d5:aa:1e:c4:03:84:39:
4b:a9:83:e6:3c:0d:e1:16:79:0f:d4:ca:c1:61:95:
9d:70:15:35:7e:f5:ff:80:51:26:6f:5d:31:ac:83:
17:d4:cb:6a:64:58:ce:1f:70:94:3b:ed:f9:37:b0:
11:19:aa:66:73:ed:44:40:88:1a:80:29:98:b3:d3:
f4:90:e7:28:09:3e:60:b1:81:d9:65:5f:c0:aa:95:
fb:4e:47:21:81:d9:d8:ae:d2:f7:a3:35:1a:af:bf:
55:15:e3:02:e1:18:31:45:df:47:c6:81:59:67:63:
73:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BB:33:70:2B:45:28:AD:77:78:D8:7F:B2:8B:E2:4D:4A:7E:00:8D
X509v3 Authority Key Identifier:
keyid:EA:8B:04:3E:86:8F:75:57:3B:CC:45:40:AD:49:54:10:2D:C9:22:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:0a:b4:6d:a0:31:bd:6e:24:39:17:4d:e5:c9:ef:7a:ad:d1:
66:d4:98:38:dc:1c:9c:a1:40:cd:68:2b:5e:1f:fe:17:d3:ce:
6e:3f:37:93:90:6e:5d:26:b4:8e:58:51:a2:d2:27:70:f6:8f:
82:7e:d3:e5:5a:64:3e:5b:1c:57:0c:eb:9b:e7:98:d9:0c:60:
ab:7a:ba:25:47:ed:c5:5f:37:b9:24:7d:cc:2f:35:84:bf:74:
3d:ce:dc:34:d4:99:73:b0:29:ff:16:e5:76:76:e5:81:33:4e:
d1:ed:9e:c6:68:b6:7d:5a:0d:ed:14:c1:e5:a7:8b:20:c3:f5:
1c:bb:d4:ed:89:43:9c:a0:50:ee:47:13:5b:7a:55:b5:e7:e8:
7e:9c:55:38:62:f5:ef:98:12:d7:ba:7c:94:6c:6f:4d:a1:e9:
ee:41:d7:1a:97:d3:ad:de:d7:14:08:70:fe:11:50:fd:61:30:
98:ca:55:2b:c0:cb:dd:97:63:71:34:e6:2c:e9:c9:69:24:a7:
0d:e6:90:0b:9a:c1:ee:45:74:3a:bc:07:ed:2d:71:d9:03:49:
9b:63:3e:a8:e5:73:10:01:b8:d4:bf:20:04:45:2b:05:ca:32:
e0:f8:29:0c:89:17:6e:1f:2d:16:ae:11:a5:80:f7:b9:74:f6:
8b:8d:56:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:27:41 2026 by rpki-client