
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft
File: 6EhjdESa3lWB63jDmC8d4SpKYAM.mft (raw, json)
Hash identifier: Io1bfoWeY/ZRHT2zYkMxPN9gWkRfujFuFYRLxgf7hyI=
Subject key identifier: 6C:DA:4A:8D:E7:F9:B4:63:2B:0D:09:B5:32:F8:FC:CB:CD:69:0A:7C
Authority key identifier: E8:48:63:74:44:9A:DE:55:81:EB:78:C3:98:2F:1D:E1:2A:4A:60:03
Certificate issuer: /CN=A919D2AF/serialNumber=E8486374449ADE5581EB78C3982F1DE12A4A6003
Certificate serial: AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft
Manifest number: 0309
Signing time: Mon 11 May 2026 02:17:15 +0000
Manifest this update: Mon 11 May 2026 02:17:14 +0000
Manifest next update: Mon 18 May 2026 02:17:14 +0000
Files and hashes: 1: 6EhjdESa3lWB63jDmC8d4SpKYAM.crl (hash: mE96PpB+1PhZCy4FV2+1iyleMUF0ZXsPBZtARt7CBJo=)
2: AA13A4AC58BA11F08C19015DC4F9AE02.roa (hash: TFmcQAcfne/kujXnOSIqvHGLVj2LAWcXYB93wCfwF/c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.crl
rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:17:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D2AF, serialNumber=E8486374449ADE5581EB78C3982F1DE12A4A6003
Validity
Not Before: May 11 02:17:14 2026 GMT
Not After : May 18 02:17:14 2026 GMT
Subject: CN=6a013c2a-4b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f4:bb:f1:66:2d:4f:bc:8a:91:78:a5:86:2c:
37:85:a3:23:29:76:b2:63:e2:d6:b4:b7:a6:27:96:
35:e4:21:a3:d3:43:3d:7b:b1:02:ad:46:36:8c:f8:
eb:5f:82:08:59:71:a8:33:88:4b:e5:bc:ea:ce:8b:
7a:62:23:d9:1e:5c:7e:21:24:e4:39:d3:c3:c2:d8:
0a:c6:6b:d5:28:bf:97:cc:e9:2b:73:31:ae:88:03:
9f:21:c1:a7:12:63:d8:e7:0a:ce:d2:ab:13:e3:20:
33:42:a2:53:59:a3:f1:8e:4f:8f:0e:eb:fa:da:9f:
37:f6:6d:0e:4e:d1:e7:af:06:66:90:58:91:42:2b:
57:fa:0e:61:f2:0a:6f:8e:1b:8d:e6:7a:7f:b7:69:
c0:7c:e7:35:ec:60:5d:a2:30:78:13:33:18:cd:ab:
3a:04:bd:80:bb:4d:a5:45:f8:a6:1c:ff:61:77:d6:
d5:51:15:15:b5:10:1a:03:bb:08:54:54:ac:56:50:
2a:fc:e9:7b:31:9f:a9:cd:bf:4c:7c:a7:00:72:ab:
04:94:22:f5:ea:57:eb:d8:3d:02:cb:7c:38:e0:05:
7d:7e:69:41:19:bc:29:0d:36:43:3c:01:65:29:78:
c7:af:c8:4c:35:92:2c:ea:cb:10:15:3c:0e:fa:a4:
ad:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DA:4A:8D:E7:F9:B4:63:2B:0D:09:B5:32:F8:FC:CB:CD:69:0A:7C
X509v3 Authority Key Identifier:
keyid:E8:48:63:74:44:9A:DE:55:81:EB:78:C3:98:2F:1D:E1:2A:4A:60:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:32:03:39:00:27:e1:66:5c:40:24:ef:e3:a9:c8:75:fc:38:
85:56:15:3f:99:bc:5c:93:c0:a0:fe:aa:d0:ad:9f:27:0f:fc:
f8:68:27:89:08:56:30:ee:ba:c2:92:ce:1c:42:77:9f:e9:28:
72:20:e1:c2:95:c7:f1:36:66:64:b0:73:87:cc:5b:25:4a:04:
f4:43:9a:0d:ab:68:93:e0:12:c8:56:a3:ef:12:f0:a6:5d:e5:
08:a7:10:62:e7:b2:71:22:d6:b0:5e:c9:bd:c8:a6:e6:b0:93:
b5:c3:d6:e7:0a:5c:f9:ef:aa:b2:44:d2:7b:6f:78:71:5f:8b:
78:4c:75:de:97:30:7b:4e:a1:ce:62:7a:fb:4c:c5:00:e5:d3:
dc:d3:5b:c1:ac:2f:9b:b6:02:ff:6e:f3:f2:e8:d3:c4:5a:bb:
3e:c4:50:fa:eb:88:84:e6:71:38:38:15:f5:3d:5c:29:36:b3:
65:bb:39:57:d0:cc:4d:10:8f:0e:45:90:1c:d5:6c:54:5c:1f:
c9:aa:ed:9c:7e:40:f1:87:2a:30:2f:17:40:9a:2f:50:d1:f0:
71:bc:43:fc:e4:d5:d3:58:77:49:8d:b2:a9:be:12:19:7d:f2:
4e:f3:29:87:97:4b:b3:73:4d:5c:f0:06:97:f4:91:19:f9:49:
e9:fb:6b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:44:11 2026 by rpki-client