
$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
File: 6zyPJLutyUE0hx1uX9C3xYtJ08k.mft (raw, json)
Hash identifier: zurN10gcRUbKEiyuM5HiPadn09SzaG0NMTJN7S6VtvY=
Subject key identifier: 5C:84:14:22:29:A3:99:DB:95:9B:A5:24:C2:EE:DE:04:A6:85:2E:79
Authority key identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
Certificate issuer: /CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Certificate serial: 014C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
Manifest number: 0138
Signing time: Wed 25 Mar 2026 04:46:53 +0000
Manifest this update: Wed 25 Mar 2026 04:46:53 +0000
Manifest next update: Wed 01 Apr 2026 04:46:53 +0000
Files and hashes: 1: 6zyPJLutyUE0hx1uX9C3xYtJ08k.crl (hash: wczmLiE7PVzuzeoyGj/ydJbRoTLWsv91Fq5DFOA2v3A=)
2: 78C65D926B0B11EFBFE25881C4F9AE02.roa (hash: 0oj6DB6AcAI80O6cWTUs9uNP0wv1u3q24kvlcmDmd+0=)
3: 7ECAB97A5F3711EFA2A15F6DC4F9AE02.roa (hash: cwdVnCmvvqxvWzMgTGL5Jud7cZIF7lHoUd7q8Ic9ySU=)
4: 866314EE5FCC11EF8416052EC4F9AE02.roa (hash: GLcX1wFp7o9QRrChsXnCvjX1Ko/I4of/iC0AV3GlULs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:46:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 332 (0x14c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91883D3, serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Validity
Not Before: Mar 25 04:46:53 2026 GMT
Not After : Apr 1 04:46:53 2026 GMT
Subject: CN=69c368bd-50bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a8:91:26:27:2d:15:6a:23:c5:21:2f:cc:13:
50:8c:50:40:10:bb:84:e2:6a:b0:6a:2e:78:64:51:
67:46:06:fe:31:7b:a3:56:92:f9:3d:d1:15:4b:8f:
4d:64:e9:64:9b:6f:ba:35:99:9c:74:c0:eb:3d:34:
66:66:7b:d6:ce:91:70:ad:93:ab:66:fd:7a:8c:74:
b5:b0:89:07:99:5f:fc:a8:6f:bb:a6:a2:47:b4:2a:
81:59:0a:dd:1a:d9:1a:6f:9e:f1:55:cf:9e:cd:7b:
f8:04:f1:ca:39:48:82:4b:ac:36:21:b3:aa:e5:95:
50:34:26:37:fa:89:1d:31:63:55:df:65:e0:1a:42:
42:9e:3b:f4:dd:e6:3b:78:96:3c:0f:da:27:17:71:
fb:a6:67:2e:43:d6:e6:43:9a:de:bb:ac:7c:44:fd:
f4:d4:14:e6:fd:3f:22:cd:be:6f:ac:ff:89:88:c3:
55:00:45:1c:d5:35:7e:27:b2:b6:86:d4:64:fb:a4:
78:38:56:d5:7f:1e:79:10:ee:e5:cb:ca:a4:64:c0:
a0:aa:4b:39:9c:a5:2e:88:4b:03:a8:df:45:86:7d:
6b:39:43:fb:40:40:14:c3:b3:23:bb:30:17:b6:0a:
9d:3d:10:57:93:64:95:ed:32:6c:8e:2f:84:ee:5e:
48:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:84:14:22:29:A3:99:DB:95:9B:A5:24:C2:EE:DE:04:A6:85:2E:79
X509v3 Authority Key Identifier:
keyid:EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:04:8d:64:8c:f2:2a:92:8a:8e:83:37:76:f0:21:af:79:1c:
a9:df:e1:1a:e2:bd:b8:84:c3:f2:81:5d:22:16:8b:89:56:6b:
44:66:27:be:f5:39:88:88:ee:e5:35:66:5b:91:00:d4:3f:4b:
57:77:20:4c:bb:b4:76:d8:02:d1:ff:07:e4:32:b0:02:95:1e:
1d:c2:e5:9b:a6:20:8c:8d:d4:19:9a:56:70:b3:8c:bb:c6:b0:
2e:10:f7:5e:c4:ec:fd:45:bf:a1:72:14:b6:f2:3d:48:cf:48:
15:1a:4f:8b:1c:c3:26:df:0d:f9:70:22:f5:5b:c6:ad:41:20:
c2:c2:35:40:57:20:99:2f:78:27:b1:fd:0c:de:b5:ff:95:3f:
70:d4:28:82:cf:d5:35:76:26:db:61:be:6d:f8:ec:06:c0:03:
f2:07:2d:a8:b0:26:93:16:46:76:3f:74:f5:b6:9d:c8:e8:d8:
37:3f:42:a5:8b:e7:95:2d:1a:33:16:2c:4d:ab:4d:49:fd:9a:
35:83:ec:c3:1c:c5:76:6f:8e:b7:06:b3:24:0a:ae:68:b8:56:
f8:2c:23:9b:ca:7b:1d:86:e0:23:e8:ac:b6:aa:85:64:f9:c7:
1f:50:6c:0b:3b:ab:f2:3e:62:b8:51:4f:b9:d3:c9:9e:ab:17:
5c:55:06:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODgzRDMxMTAvBgNVBAUTKEVCM0M4RjI0QkJBREM5NDEzNDg3MUQ2RTVGRDBCN0M1
OEI0OUQzQzkwHhcNMjYwMzI1MDQ0NjUzWhcNMjYwNDAxMDQ0NjUzWjAYMRYwFAYD
VQQDEw02OWMzNjhiZC01MGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwqiRJictFWojxSEvzBNQjFBAELuE4mqwai54ZFFnRgb+MXujVpL5PdEVS49N
ZOlkm2+6NZmcdMDrPTRmZnvWzpFwrZOrZv16jHS1sIkHmV/8qG+7pqJHtCqBWQrd
Gtkab57xVc+ezXv4BPHKOUiCS6w2IbOq5ZVQNCY3+okdMWNV32XgGkJCnjv03eY7
eJY8D9onF3H7pmcuQ9bmQ5reu6x8RP301BTm/T8izb5vrP+JiMNVAEUc1TV+J7K2
htRk+6R4OFbVfx55EO7ly8qkZMCgqks5nKUuiEsDqN9Fhn1rOUP7QEAUw7MjuzAX
tgqdPRBXk2SV7TJsji+E7l5ILwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFyEFCIp
o5nblZulJMLu3gSmhS55MB8GA1UdIwQYMBaAFOs8jyS7rclBNIcdbl/Qt8WLSdPJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODNEMy84RDAzRUYzNjVF
MzYxMUVGQUM5MkQzMTRDNEY5QUUwMi82enlQSkx1dHlVRTBoeDF1WDlDM3hZdEow
OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzZ6eVBKTHV0eVVFMGh4MXVYOUMzeFl0SjA4ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
ODNEMy84RDAzRUYzNjVFMzYxMUVGQUM5MkQzMTRDNEY5QUUwMi82enlQSkx1dHlV
RTBoeDF1WDlDM3hZdEowOGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfgSNZIzyKpKKjoM3dvAhr3kcqd/hGuK9uITD8oFdIhaLiVZrRGYnvvU5iIju
5TVmW5EA1D9LV3cgTLu0dtgC0f8H5DKwApUeHcLlm6YgjI3UGZpWcLOMu8awLhD3
XsTs/UW/oXIUtvI9SM9IFRpPixzDJt8N+XAi9VvGrUEgwsI1QFcgmS94J7H9DN61
/5U/cNQogs/VNXYm22G+bfjsBsAD8gctqLAmkxZGdj909badyOjYNz9CpYvnlS0a
MxYsTatNSf2aNYPswxzFdm+OtwazJAquaLhW+Cwjm8p7HYbgI+istqqFZPnHH1Bs
Czur8j5iuFFPudPJnqsXXFUGsQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:47:24 2026 by rpki-client