
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft
File: -6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft (raw, json)
Hash identifier: DOlmtuWP3F2KhTIGRPrSS4qQk0PN+/56Zudz4yTGi3M=
Subject key identifier: DB:03:88:75:CA:81:8A:6E:54:33:06:15:8D:59:99:4B:E4:0F:6D:FD
Authority key identifier: FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6
Certificate issuer: /CN=A918FD87/serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6
Certificate serial: 08B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft
Manifest number: 08A8
Signing time: Thu 26 Mar 2026 20:23:48 +0000
Manifest this update: Thu 26 Mar 2026 20:23:47 +0000
Manifest next update: Thu 02 Apr 2026 20:23:47 +0000
Files and hashes: 1: -6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl (hash: k/kSN5x6fvwYp4mHzLjKBbG0A6ukzi4p0V2d5UDEzso=)
2: 35167F34DE0911EAA8F7452CC4F9AE02.roa (hash: DoGtO0ioSkETngbYqtxgGr43fZyQW1n/adtL23ovKKA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl
rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2227 (0x8b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FD87, serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6
Validity
Not Before: Mar 26 20:23:47 2026 GMT
Not After : Apr 2 20:23:47 2026 GMT
Subject: CN=69c595d4-b77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c4:24:7e:a7:e8:a6:21:28:1a:51:3a:6a:93:
76:39:aa:56:a4:24:57:62:92:a5:9c:a2:c7:3c:cb:
35:c6:6e:85:1f:a9:ba:df:45:4d:63:39:d6:31:2a:
e7:df:c5:ad:67:8f:89:36:9a:b3:86:ec:3a:bd:09:
03:e9:ff:b5:6e:86:4d:8a:8c:8d:53:08:64:2e:9d:
f5:2f:59:3f:51:ec:d7:26:e9:32:59:53:cd:88:41:
9c:c4:86:23:ac:27:55:3e:b9:c7:b7:7b:dd:bb:66:
3f:43:4f:5d:71:c2:30:da:88:bb:ef:ca:b9:06:d4:
01:6b:16:f0:f1:2f:05:29:93:9f:52:5c:6f:bc:fa:
78:2a:32:c5:88:13:ec:47:84:95:e6:e3:15:3c:7d:
88:68:98:b8:e8:c9:fa:85:57:1a:07:37:7d:f6:58:
3c:01:c6:fd:03:45:86:9f:4e:37:73:f9:f7:99:4f:
10:a3:cb:6a:17:52:30:cb:19:d0:ba:9b:2e:dc:82:
4a:77:99:7b:9c:fd:6c:3a:6d:a5:6b:40:24:45:f7:
d6:d8:69:3d:e2:c8:27:01:22:21:6f:75:69:8a:6e:
81:fb:4f:53:f9:79:e3:5f:0d:a6:ff:eb:03:0f:04:
d3:44:7b:31:f3:4e:06:47:ce:ab:26:e1:05:73:55:
dd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:03:88:75:CA:81:8A:6E:54:33:06:15:8D:59:99:4B:E4:0F:6D:FD
X509v3 Authority Key Identifier:
keyid:FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:a4:53:ee:c7:df:1d:1e:82:23:00:1f:a4:39:d1:48:ae:79:
8f:c6:8a:12:b5:71:ba:45:81:dc:90:3b:f3:ff:a5:5d:ca:5a:
12:42:23:60:e6:04:37:37:9e:34:4c:37:de:01:3e:3f:fd:61:
85:9a:5f:ec:94:00:d7:f9:ac:0a:63:17:e9:9f:fe:9d:0b:a7:
06:e2:96:23:08:50:87:78:27:5c:3b:dd:21:6d:53:9b:4e:db:
a1:1c:6d:01:6f:02:65:6b:a7:24:71:4e:db:a5:aa:0d:7e:cb:
00:35:53:d5:2b:90:c1:e4:12:c2:e0:58:59:e9:00:65:24:07:
92:64:8d:70:0a:50:02:01:d2:d2:b2:2f:29:f8:81:9f:0a:4d:
fe:73:88:f2:d5:6c:d4:e9:94:94:41:30:91:dc:aa:d9:5b:e7:
48:4d:97:c3:b4:d3:fc:37:46:e9:78:9b:c8:ff:73:c5:7f:99:
a7:75:30:71:76:39:06:39:5f:5f:aa:7c:d8:f6:2f:c0:32:a4:
1d:f6:dc:a3:ad:84:23:44:79:7c:67:2c:60:cf:56:1d:0b:36:
f2:ff:f2:b3:fd:ba:e6:12:30:93:d2:1b:87:e5:ea:fb:4f:59:
2f:ca:9b:87:96:4d:0b:1b:c0:01:a5:8b:f6:93:18:ae:06:0e:
fc:b0:df:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:45:40 2026 by rpki-client