
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft
File: 6EKSkSMrng-5SFoKrUk9fgfH5NE.mft (raw, json)
Hash identifier: GZDzRf+aIa2wM9ze2FOoyHYIF7D2ibMsdMnDXvcMJeg=
Subject key identifier: FF:0D:CB:4D:04:33:BD:16:4A:39:38:4B:81:26:EA:36:22:4D:8D:5D
Authority key identifier: E8:42:92:91:23:2B:9E:0F:B9:48:5A:0A:AD:49:3D:7E:07:C7:E4:D1
Certificate issuer: /CN=A9199696/serialNumber=E8429291232B9E0FB9485A0AAD493D7E07C7E4D1
Certificate serial: D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft
Manifest number: D0
Signing time: Wed 25 Mar 2026 05:59:56 +0000
Manifest this update: Wed 25 Mar 2026 05:59:55 +0000
Manifest next update: Wed 01 Apr 2026 05:59:55 +0000
Files and hashes: 1: 6EKSkSMrng-5SFoKrUk9fgfH5NE.crl (hash: 4WK31P4MGwBLlxGzxc13osx7yFQegRiRw1w+0sf3ytc=)
2: 1A44E27AF1A711EFA441E72CC4F9AE02.roa (hash: 5JQkOuFH+q+ovXNdOnUHiPBxNL2Wd2PzyB1f8SwCRM4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.crl
rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:59:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199696, serialNumber=E8429291232B9E0FB9485A0AAD493D7E07C7E4D1
Validity
Not Before: Mar 25 05:59:55 2026 GMT
Not After : Apr 1 05:59:55 2026 GMT
Subject: CN=69c379dc-1e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a5:ca:46:51:bf:44:6c:da:6b:c1:72:76:da:
10:97:6e:b6:ef:af:f8:5b:83:32:bf:79:23:d9:82:
60:f6:b2:e4:d0:d9:cc:9c:9c:ae:fd:e4:2a:21:08:
d7:21:6d:15:cc:ef:50:3a:8b:c5:71:64:11:5a:ef:
ee:44:7b:1e:c3:c8:4b:18:15:61:ed:a8:93:10:f3:
94:b3:73:0d:23:82:11:58:a9:c7:c0:b8:e3:03:30:
16:21:7b:ae:f7:1e:42:38:87:b0:4b:e0:e6:bd:5a:
0f:53:fb:67:5d:79:3c:ab:23:a5:a1:a0:5f:4d:eb:
bb:d7:93:9e:8b:74:18:f1:2a:d3:7e:52:f5:03:ad:
10:7d:f0:ec:fb:d5:c6:f6:02:79:79:10:e7:1b:cf:
29:27:64:67:da:80:78:f6:53:9e:55:2e:46:99:5f:
67:6b:4e:af:1a:8b:01:56:d2:0e:0b:d2:2b:b2:8a:
1a:1a:1c:75:e7:17:30:8f:1c:1d:75:51:fc:6f:c6:
4e:be:dc:c8:05:6d:6b:36:77:c7:0b:13:d3:73:c1:
61:48:8c:e2:92:a2:05:c5:9b:f2:c6:03:c8:db:40:
09:04:71:80:70:c7:c4:3c:a4:5e:b2:1f:19:22:b3:
f3:0d:0a:9a:b3:cf:86:11:8e:d2:ee:ff:a0:29:3f:
45:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0D:CB:4D:04:33:BD:16:4A:39:38:4B:81:26:EA:36:22:4D:8D:5D
X509v3 Authority Key Identifier:
keyid:E8:42:92:91:23:2B:9E:0F:B9:48:5A:0A:AD:49:3D:7E:07:C7:E4:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:02:26:54:e0:2f:77:95:61:c6:29:81:96:7b:61:92:23:a3:
c3:60:64:1e:91:c4:1c:2a:68:f3:cd:4c:e6:a0:00:d4:3b:94:
7a:e4:d5:7a:26:69:33:9f:a8:30:69:53:ea:67:64:40:87:71:
20:37:32:0d:1f:8a:a7:ff:30:ff:64:4e:d1:f0:b3:95:93:79:
cf:18:38:a3:0f:16:b0:40:fa:e8:4f:84:35:39:c6:4f:3f:92:
07:f9:ad:73:cf:df:0d:6a:b5:3b:2f:85:5b:5d:e8:a8:e0:ba:
fb:3f:53:45:06:09:47:40:0c:c5:ee:7f:df:1b:19:90:4a:23:
2c:c1:90:2b:a5:4d:fe:6f:6f:96:75:83:50:ac:33:3d:d2:d1:
26:b8:16:70:ee:3f:dd:1c:f0:34:9d:bf:1a:08:60:3b:d1:23:
37:9e:dc:88:cb:17:0b:16:43:8b:f4:d0:05:05:78:d6:f0:95:
9e:5a:e9:3e:db:4a:7e:d7:a6:a1:dd:4f:4f:53:de:db:b8:54:
fe:b2:9a:7f:e8:29:20:a8:d4:99:6e:73:93:b6:ed:f7:7e:5d:
44:2f:64:11:7c:f6:58:9b:ae:6e:aa:3e:fb:97:3c:8a:45:e7:
13:32:23:b3:0b:e2:8f:c0:f9:0f:cc:6d:34:35:2c:e3:9a:bd:
8f:05:6c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:46:39 2026 by rpki-client