
$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
File: 6Ihh_0pFOAJnqBtY-pnkia0AG70.mft (raw, json)
Hash identifier: 6Pe5nThdWFugafjGbcFrkWJT20YLc9c+X9ZMMdaPIWA=
Subject key identifier: E3:A1:ED:82:A2:BB:6C:C2:19:1E:54:54:4F:5A:F9:8A:08:F2:0A:17
Authority key identifier: E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD
Certificate issuer: /CN=A918ACB2/serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD
Certificate serial: 01CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
Manifest number: 01BC
Signing time: Wed 13 May 2026 04:04:02 +0000
Manifest this update: Wed 13 May 2026 04:04:02 +0000
Manifest next update: Wed 20 May 2026 04:04:02 +0000
Files and hashes: 1: 6Ihh_0pFOAJnqBtY-pnkia0AG70.crl (hash: sg2O7hlb0t7uAUY9/zDKbbCiERu1PUhfCOQwPKKQ0VI=)
2: BD1A38D4984B11EFB342C220C4F9AE02.roa (hash: ENHhkrk8BCTpwWr4aooyXoOdIvkQ+fMj1H+Xu4jYjcE=)
3: B66B434EBCE011EE98AEB646C4F9AE02.roa (hash: GFImaBIJDxKMIRAiFX2CXsx2x2WQvz0QE3N7btck8OU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl
rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 461 (0x1cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918ACB2, serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD
Validity
Not Before: May 13 04:04:02 2026 GMT
Not After : May 20 04:04:02 2026 GMT
Subject: CN=6a03f832-d650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:48:79:08:ac:05:8e:f9:aa:a7:12:10:f2:57:
5d:3d:11:8d:96:57:04:dd:04:f7:32:e4:f4:d2:06:
3a:60:b4:b2:13:e8:7d:9c:4c:03:9f:d2:e0:08:97:
90:ee:b8:9c:cd:fb:91:ce:de:ac:d8:f6:af:33:ee:
9f:e6:3c:d9:d7:d1:73:04:f2:e9:7b:49:e4:58:29:
03:e7:fb:78:61:c8:4c:33:67:56:21:18:97:12:62:
cd:ec:bb:d5:5a:8b:08:b4:45:b0:36:9e:a1:c2:31:
63:75:32:00:22:b2:13:52:38:4f:69:b3:df:4e:7b:
24:c5:ca:9d:c8:14:64:75:95:7f:6d:be:23:a7:56:
8c:d3:49:41:cd:21:f5:63:d0:fb:15:bb:7e:c0:27:
77:b6:98:14:ea:92:75:c1:89:fa:41:b0:b5:04:54:
ee:bd:cd:b9:2d:f8:b7:80:e0:3c:6c:da:16:d3:46:
61:56:3b:e6:ac:76:79:4c:8d:55:63:80:41:5c:a7:
55:5b:d2:3a:93:03:09:fd:59:e1:b5:63:a5:3a:7d:
44:ec:0d:7d:c0:1f:5e:ec:67:21:af:0d:68:85:0b:
55:34:d8:04:8a:5c:db:74:16:43:c5:46:9a:04:c8:
25:55:45:3b:fc:dc:0d:05:6e:4e:ce:44:40:c0:ff:
7e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A1:ED:82:A2:BB:6C:C2:19:1E:54:54:4F:5A:F9:8A:08:F2:0A:17
X509v3 Authority Key Identifier:
keyid:E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:92:be:ba:45:e3:1a:06:91:42:55:6e:5d:11:63:f9:8d:ca:
0c:c0:e1:b5:40:37:54:86:5a:fb:32:49:44:b3:06:bf:7d:9e:
7b:e3:de:00:35:37:5c:ac:88:32:86:6c:ab:b0:cf:cf:f3:fc:
83:ad:72:55:c7:f3:7e:2d:a2:9f:9d:01:3e:ca:56:f0:5e:1f:
7d:26:3e:9a:9b:38:b3:84:9d:22:69:ec:21:4d:78:2f:42:10:
54:51:f2:f8:88:43:db:a0:5f:60:17:88:74:09:28:1c:5b:42:
5f:19:83:b6:e6:9d:64:be:79:ea:65:f9:f6:8c:48:df:de:8d:
9b:c8:1b:07:fe:8e:1a:5a:53:f5:39:8f:c8:1d:32:97:66:a6:
c8:78:39:03:db:d7:47:0c:14:aa:aa:6c:c3:8c:7c:bb:64:52:
a1:c5:ad:9e:20:f2:19:f4:f9:4b:b3:6e:09:34:67:81:26:9a:
53:10:5c:3f:9f:18:87:87:dd:00:06:20:d6:c0:dd:d4:c1:6f:
6e:11:0e:b5:f5:86:60:78:8a:1e:55:9e:0c:3d:3b:24:ad:2e:
06:17:cb:18:a5:36:59:e2:69:84:b2:3c:ec:1f:57:8f:0f:47:
84:a1:8a:01:44:45:f2:9e:30:e5:64:fa:03:78:d4:ca:9f:b5:
6d:68:44:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:39:26 2026 by rpki-client