
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft
File: -6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft (raw, json)
Hash identifier: LfO9Dw1L3sk0BlPjzrwNPpE1rZ7qmLLnCjCXesLvzCw=
Subject key identifier: 06:D5:78:9B:79:D5:F5:90:EB:CB:B0:7E:C2:04:E9:F8:BE:41:E4:8D
Authority key identifier: FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6
Certificate issuer: /CN=A918FD87/serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6
Certificate serial: 08B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft
Manifest number: 08A7
Signing time: Tue 24 Mar 2026 20:16:48 +0000
Manifest this update: Tue 24 Mar 2026 20:16:48 +0000
Manifest next update: Tue 31 Mar 2026 20:16:48 +0000
Files and hashes: 1: -6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl (hash: kfo2+o3yGga+DFjpkjFz8xOEdRyXhKvDolxKIAWC3oo=)
2: 35167F34DE0911EAA8F7452CC4F9AE02.roa (hash: DoGtO0ioSkETngbYqtxgGr43fZyQW1n/adtL23ovKKA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl
rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:16:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2226 (0x8b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FD87, serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6
Validity
Not Before: Mar 24 20:16:48 2026 GMT
Not After : Mar 31 20:16:48 2026 GMT
Subject: CN=69c2f130-81d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ce:37:91:fa:f4:1e:01:5a:62:80:b9:0d:46:
6d:e4:d8:db:9d:d7:be:3e:07:ca:84:06:34:c2:46:
90:80:cf:f3:8e:26:37:26:1c:7b:59:65:d8:90:5a:
c0:47:5c:1d:b5:37:46:2e:c9:ce:86:44:3c:a7:b1:
ad:ca:c4:ae:1b:5d:ff:16:a5:0d:21:e0:c5:27:37:
cb:10:87:90:02:65:38:1a:0e:46:be:cd:1c:3d:18:
ce:f5:8a:92:83:26:fb:e7:53:d6:a6:c2:8d:01:27:
11:33:a5:49:00:4c:b4:06:f7:44:3c:35:6d:1d:bb:
9a:3d:ca:04:07:97:cd:57:ff:6e:5c:5a:8d:9d:4b:
c5:c3:d6:6f:f9:e7:6c:0b:c1:d2:0e:0d:eb:73:d5:
3f:2e:76:89:70:d6:4d:48:58:46:ad:77:5f:a9:6a:
0a:4c:9a:eb:99:40:82:76:a3:cd:97:ca:39:6f:b5:
8d:30:66:64:19:43:5a:70:9d:7a:4a:b7:fd:19:d5:
f0:d4:45:ea:51:36:44:db:ac:a7:0c:bf:9f:2e:7e:
d8:e2:d9:f9:b6:8b:28:c1:d3:1f:17:a6:aa:09:f2:
18:3b:f0:fb:61:08:b2:48:84:a3:d1:e2:07:1a:7d:
5e:47:5d:ba:c7:73:2d:55:b6:cf:d2:33:b9:15:4c:
e5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D5:78:9B:79:D5:F5:90:EB:CB:B0:7E:C2:04:E9:F8:BE:41:E4:8D
X509v3 Authority Key Identifier:
keyid:FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:db:3d:b3:85:f7:77:1b:bc:39:8e:fa:58:09:a9:0a:1a:2a:
73:ea:bd:c5:e8:d7:b7:51:80:96:b2:97:73:58:40:87:b5:f5:
de:3d:3e:33:e2:72:80:9d:69:d8:2c:34:5a:81:db:f6:9e:ec:
d8:c6:d6:62:61:83:fe:46:37:08:fc:43:06:93:22:51:3b:7b:
61:66:11:a9:04:58:71:eb:fe:6a:05:2b:95:ae:a1:4d:93:be:
02:4c:a6:7f:d6:03:93:e4:47:a2:90:68:d0:b4:93:3d:37:e7:
ce:0a:9b:4c:b3:59:47:36:07:d0:35:d1:bc:38:0d:31:6b:21:
fb:5a:70:ab:29:ee:4a:34:08:5a:69:d0:ea:b2:fe:20:72:5c:
c5:56:c3:4f:ae:89:66:50:3e:5c:3d:98:ba:8d:43:5d:4e:95:
ac:b2:ae:60:44:54:f2:04:cf:0c:81:8c:c7:51:15:67:96:10:
4c:69:c3:60:e6:68:ab:13:84:cc:50:be:bc:55:56:43:de:de:
fc:2d:67:e7:2d:4b:0e:7a:a0:d0:56:0d:e1:b4:30:fc:75:a0:
5d:e5:3b:fc:2d:c1:50:3d:68:53:31:b2:35:e6:47:51:a2:70:
26:63:e0:63:b4:9b:90:a9:e0:55:8a:29:98:37:62:ec:09:ad:
2e:2f:39:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:40:26 2026 by rpki-client