
$ rpki-client -vvf rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft
File: 6tNqfTCwZhVrgDAlqqpf-SetdcI.mft (raw, json)
Hash identifier: gI9Pk6VTDHfEHSSqDuDuWpewZzsDqiNit45bbB30V9g=
Subject key identifier: BA:66:8A:8D:FB:D8:7E:86:AA:AC:EF:A8:B1:6E:65:ED:B3:14:5A:F4
Authority key identifier: EA:D3:6A:7D:30:B0:66:15:6B:80:30:25:AA:AA:5F:F9:27:AD:75:C2
Certificate issuer: /CN=A91722C3/serialNumber=EAD36A7D30B066156B803025AAAA5FF927AD75C2
Certificate serial: 1717
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft
Manifest number: 1709
Signing time: Tue 24 Mar 2026 16:32:40 +0000
Manifest this update: Tue 24 Mar 2026 16:32:39 +0000
Manifest next update: Tue 31 Mar 2026 16:32:39 +0000
Files and hashes: 1: 6tNqfTCwZhVrgDAlqqpf-SetdcI.crl (hash: shWRahbhBwGFEwqQBcbGiVLvSW/Wx5n7dX6U6jtb4us=)
2: 3B7EBA5C7D7411EBAEFB906AC4F9AE02.roa (hash: FKDhz83TnCJYR/MYFdEL/GGWg2KY5LKvFM7QwXLSjcI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.crl
rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:32:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5911 (0x1717)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91722C3, serialNumber=EAD36A7D30B066156B803025AAAA5FF927AD75C2
Validity
Not Before: Mar 24 16:32:39 2026 GMT
Not After : Mar 31 16:32:39 2026 GMT
Subject: CN=69c2bca8-ad06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:df:83:32:f0:ce:9b:43:75:c5:0e:bb:42:
b5:1c:57:9d:e9:86:c6:1e:29:27:f9:38:68:00:8f:
53:b0:2d:97:d4:07:c7:8c:50:d4:8f:f7:5a:2c:5b:
d1:1f:72:79:ff:3d:45:62:e6:0a:45:d2:d7:59:bc:
99:7a:ea:33:69:95:31:26:1d:bd:39:5d:fb:8c:d5:
31:58:b3:13:76:52:db:a4:ce:72:fd:5d:16:5f:25:
31:c5:6b:7e:ba:f0:97:4b:d9:e8:73:06:a5:c8:d6:
8a:c2:25:a8:c2:3e:da:ff:a1:4a:76:d5:92:c4:a7:
72:5e:d0:c3:aa:cf:d2:1e:9c:34:67:2f:2c:aa:18:
74:43:1c:8e:0c:c6:8a:0e:7b:ad:62:9e:b4:5d:67:
af:73:48:2c:4d:bf:47:d6:dc:b2:31:60:01:3d:ad:
5f:23:f0:f2:e6:45:16:39:60:c4:c4:e9:68:9e:a5:
35:10:f9:08:5f:05:ee:8d:59:bd:68:4e:c2:0c:52:
2b:6e:9c:fb:79:a2:36:11:fd:dc:6d:85:44:05:85:
1c:9a:49:cc:74:38:30:d1:7f:8b:79:4c:8b:1b:1a:
c7:b0:4d:7e:e3:a1:78:16:0b:b2:f9:70:47:03:0a:
55:c7:d3:6c:d0:15:55:26:d4:61:6c:0c:91:99:4f:
c7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:66:8A:8D:FB:D8:7E:86:AA:AC:EF:A8:B1:6E:65:ED:B3:14:5A:F4
X509v3 Authority Key Identifier:
keyid:EA:D3:6A:7D:30:B0:66:15:6B:80:30:25:AA:AA:5F:F9:27:AD:75:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:99:05:e7:35:cf:4f:0b:ed:58:25:58:7d:dc:f6:9f:ab:47:
5e:06:05:ea:1c:cf:d0:26:09:02:b7:93:49:e4:db:91:df:7d:
dc:52:21:c6:dc:bb:f5:c9:57:55:4f:ce:0e:24:04:58:9c:f3:
b5:d9:dd:5a:34:83:c0:79:20:87:7f:c9:2b:b4:0d:a3:d8:a7:
d6:53:81:e9:c5:09:e8:cf:dd:06:aa:ac:e7:1b:ec:a7:cd:de:
03:23:b8:62:90:94:53:4b:4f:29:38:23:61:77:99:3c:63:db:
a3:93:04:9f:ae:e5:2f:40:94:11:f8:91:55:44:e5:d2:cd:48:
3a:e1:85:6c:26:e6:3f:4d:a6:24:dc:e1:c0:05:5f:a9:bc:ef:
da:df:cc:a5:e5:33:c8:9b:63:c5:eb:4d:a0:f5:7d:31:22:da:
c0:e6:d1:e4:54:b9:e2:fd:d4:06:99:f5:35:54:6b:a2:e6:c2:
6f:e4:87:32:74:01:05:bc:ca:c6:a6:4b:fa:39:2e:ec:a8:c6:
b6:37:84:3a:24:33:cd:25:c3:b3:17:cc:7b:c9:8a:b6:91:d5:
90:2e:f2:af:15:e9:3f:ff:d1:e7:7b:41:c5:0b:79:ca:47:4f:
32:d1:17:75:df:83:a4:0b:52:f3:6d:87:00:39:8d:b4:7d:42:
8e:2e:ec:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzIyQzMxMTAvBgNVBAUTKEVBRDM2QTdEMzBCMDY2MTU2QjgwMzAyNUFBQUE1RkY5
MjdBRDc1QzIwHhcNMjYwMzI0MTYzMjM5WhcNMjYwMzMxMTYzMjM5WjAYMRYwFAYD
VQQDEw02OWMyYmNhOC1hZDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtCffgzLwzptDdcUOu0K1HFed6YbGHikn+ThoAI9TsC2X1AfHjFDUj/daLFvR
H3J5/z1FYuYKRdLXWbyZeuozaZUxJh29OV37jNUxWLMTdlLbpM5y/V0WXyUxxWt+
uvCXS9nocwalyNaKwiWowj7a/6FKdtWSxKdyXtDDqs/SHpw0Zy8sqhh0QxyODMaK
DnutYp60XWevc0gsTb9H1tyyMWABPa1fI/Dy5kUWOWDExOlonqU1EPkIXwXujVm9
aE7CDFIrbpz7eaI2Ef3cbYVEBYUcmknMdDgw0X+LeUyLGxrHsE1+46F4Fguy+XBH
AwpVx9Ns0BVVJtRhbAyRmU/H/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLpmio37
2H6GqqzvqLFuZe2zFFr0MB8GA1UdIwQYMBaAFOrTan0wsGYVa4AwJaqqX/knrXXC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjJDMy8xNTIzRDJFNDA3
QUIxMUU4QUU1REZFNjRDNEY5QUUwMi82dE5xZlRDd1poVnJnREFscXFwZi1TZXRk
Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ0TnFmVEN3WmhWcmdEQWxxcXBmLVNldGRjSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MjJDMy8xNTIzRDJFNDA3QUIxMUU4QUU1REZFNjRDNEY5QUUwMi82dE5xZlRDd1po
VnJnREFscXFwZi1TZXRkY0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAJkF5zXPTwvtWCVYfdz2n6tHXgYF6hzP0CYJAreTSeTbkd993FIhxty79clX
VU/ODiQEWJzztdndWjSDwHkgh3/JK7QNo9in1lOB6cUJ6M/dBqqs5xvsp83eAyO4
YpCUU0tPKTgjYXeZPGPbo5MEn67lL0CUEfiRVUTl0s1IOuGFbCbmP02mJNzhwAVf
qbzv2t/MpeUzyJtjxetNoPV9MSLawObR5FS54v3UBpn1NVRroubCb+SHMnQBBbzK
xqZL+jku7KjGtjeEOiQzzSXDsxfMe8mKtpHVkC7yrxXpP//R53tBxQt5ykdPMtEX
dd+DpAtS822HADmNtH1Cji7sQA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:26:49 2026 by rpki-client