
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft
File: 6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft (raw, json)
Hash identifier: C9i2WPiqVuC8Da5raUtI5uNiqVb+Ec3bTtbgLxllPQA=
Subject key identifier: ED:96:8F:42:0A:CD:BB:74:92:08:F6:06:69:AA:A4:0E:C9:CE:0A:11
Authority key identifier: E8:06:40:31:34:52:D0:53:47:AE:B9:EA:AB:60:DB:8E:00:C2:19:0B
Certificate issuer: /CN=A91AA85A/serialNumber=E80640313452D05347AEB9EAAB60DB8E00C2190B
Certificate serial: 1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AZAMTRS0FNHrrnqq2DbjgDCGQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft
Manifest number: 16
Signing time: Wed 25 Mar 2026 08:12:39 +0000
Manifest this update: Wed 25 Mar 2026 08:12:39 +0000
Manifest next update: Wed 01 Apr 2026 08:12:39 +0000
Files and hashes: 1: 6AZAMTRS0FNHrrnqq2DbjgDCGQs.crl (hash: r/pFBos60CPmYL87ie22poE32bgxK/NiHTbjXeUqlxo=)
2: D7C18BB20DFF11F1BA7C27AF053D8C67.roa (hash: JtqpsK1zEhQI4Q3ZNk2C/Okx8P5fJVjn+3yBatmBfgU=)
3: 9ABBE50C0DFD11F18537B598053D8C67.roa (hash: bJXY+5x0hiKoQpK1YPXKODMEYgAeCsvLGddvfcuAKL4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.crl
rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AZAMTRS0FNHrrnqq2DbjgDCGQs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:12:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA85A, serialNumber=E80640313452D05347AEB9EAAB60DB8E00C2190B
Validity
Not Before: Mar 25 08:12:39 2026 GMT
Not After : Apr 1 08:12:39 2026 GMT
Subject: CN=69c398f7-6706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2b:7a:a5:cb:dc:36:1e:94:64:d6:dd:42:64:
31:61:80:0c:3f:bb:dc:bd:a1:b5:0d:a9:5f:35:ad:
a6:7a:7b:34:ea:d4:d0:20:96:95:fc:fc:58:01:6a:
2c:db:4c:fe:59:cb:79:35:3b:6e:e3:d4:5a:a9:ac:
c0:a7:c3:25:71:d9:95:b5:e8:52:16:06:f3:d4:cd:
90:06:fa:fc:a7:d5:4e:20:65:ea:0f:91:b8:a0:2d:
1d:a9:4a:3c:69:03:48:99:77:46:ab:c4:bd:9e:73:
20:ec:a9:23:e4:22:d7:c1:f3:46:19:b1:f8:a3:2b:
5d:96:9b:46:e5:95:a8:61:97:be:1a:4d:83:e3:5b:
45:54:4a:f1:e4:a2:62:1f:f2:29:42:02:62:0e:5e:
31:f6:46:da:53:b2:d1:7f:21:72:6b:83:11:4a:1a:
1b:4f:97:82:1d:02:e9:65:71:31:4f:f2:20:db:59:
d6:49:bb:d3:d4:db:30:83:83:6d:cb:c6:7b:bf:58:
58:01:13:72:0f:49:be:cf:76:d8:90:af:b3:9c:ab:
c6:dc:39:6c:39:2c:b1:1e:cb:1d:e2:d4:a9:e7:1f:
e1:b4:eb:2d:d9:16:3f:ae:c3:0d:64:a7:47:66:ae:
cd:25:e4:d1:f8:12:33:80:78:77:22:a9:0a:f2:ca:
a2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:96:8F:42:0A:CD:BB:74:92:08:F6:06:69:AA:A4:0E:C9:CE:0A:11
X509v3 Authority Key Identifier:
keyid:E8:06:40:31:34:52:D0:53:47:AE:B9:EA:AB:60:DB:8E:00:C2:19:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AZAMTRS0FNHrrnqq2DbjgDCGQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:74:4c:6f:82:39:22:1e:00:95:66:df:a6:26:b8:4d:60:53:
63:4f:74:e0:cc:34:69:39:34:37:1f:b7:33:8f:1b:8b:49:91:
ce:d0:92:7c:c1:fe:ed:d9:f9:44:ed:3b:96:57:c6:70:05:1a:
a6:fe:e8:39:f1:37:d0:5b:34:d6:b9:f5:5a:d8:82:84:e2:f2:
35:eb:a6:58:33:d8:b7:08:f5:24:a9:d0:7c:a9:43:e6:8e:a8:
8b:24:2d:ef:7d:09:11:d7:23:19:46:ca:26:9f:98:6e:c2:0c:
f9:68:4c:c4:8f:8b:e8:b6:c3:de:c3:1b:b3:25:1f:65:9a:39:
ad:ba:5e:0e:6b:5b:a5:b8:25:37:a3:45:63:c6:19:07:64:bf:
48:99:03:a4:41:3d:f0:8d:ef:45:31:fa:b6:27:7b:1e:d0:4c:
0b:fb:c4:65:94:25:3c:3c:57:46:6b:7f:29:c6:75:11:a2:2b:
2f:b1:c9:bf:02:0a:d3:e2:b6:5b:50:b0:f0:4c:1c:35:48:8e:
a6:77:cc:4c:de:46:60:0d:83:57:b4:99:80:6c:c0:25:be:49:
8e:23:b7:49:8e:99:70:97:80:7e:07:e4:c7:fd:09:52:73:a3:
24:7c:63:79:c5:f5:70:1e:aa:6e:2b:d3:d8:dc:00:8d:a6:30:
dc:18:57:07
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
QTg1QTExMC8GA1UEBRMoRTgwNjQwMzEzNDUyRDA1MzQ3QUVCOUVBQUI2MERCOEUw
MEMyMTkwQjAeFw0yNjAzMjUwODEyMzlaFw0yNjA0MDEwODEyMzlaMBgxFjAUBgNV
BAMTDTY5YzM5OGY3LTY3MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDNK3qly9w2HpRk1t1CZDFhgAw/u9y9obUNqV81raZ6ezTq1NAglpX8/FgBaizb
TP5Zy3k1O27j1FqprMCnwyVx2ZW16FIWBvPUzZAG+vyn1U4gZeoPkbigLR2pSjxp
A0iZd0arxL2ecyDsqSPkItfB80YZsfijK12Wm0bllahhl74aTYPjW0VUSvHkomIf
8ilCAmIOXjH2RtpTstF/IXJrgxFKGhtPl4IdAullcTFP8iDbWdZJu9PU2zCDg23L
xnu/WFgBE3IPSb7PdtiQr7Ocq8bcOWw5LLEeyx3i1KnnH+G06y3ZFj+uww1kp0dm
rs0l5NH4EjOAeHciqQryyqIfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU7ZaPQgrN
u3SSCPYGaaqkDsnOChEwHwYDVR0jBBgwFoAU6AZAMTRS0FNHrrnqq2DbjgDCGQsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBODVBL0FCQkM2NzlFMERG
QTExRjE5MjhDNEI1QTA1M0Q4QzY3LzZBWkFNVFJTMEZOSHJybnFxMkRiamdEQ0dR
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNkFaQU1UUlMwRk5IcnJucXEyRGJqZ0RDR1FzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB
ODVBL0FCQkM2NzlFMERGQTExRjE5MjhDNEI1QTA1M0Q4QzY3LzZBWkFNVFJTMEZO
SHJybnFxMkRiamdEQ0dRcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBKdExvgjkiHgCVZt+mJrhNYFNjT3TgzDRpOTQ3H7czjxuLSZHO0JJ8wf7t2flE
7TuWV8ZwBRqm/ug58TfQWzTWufVa2IKE4vI166ZYM9i3CPUkqdB8qUPmjqiLJC3v
fQkR1yMZRsomn5huwgz5aEzEj4votsPewxuzJR9lmjmtul4Oa1uluCU3o0VjxhkH
ZL9ImQOkQT3wje9FMfq2J3se0EwL+8RllCU8PFdGa38pxnURoisvscm/AgrT4rZb
ULDwTBw1SI6md8xM3kZgDYNXtJmAbMAlvkmOI7dJjplwl4B+B+TH/QlSc6MkfGN5
xfVwHqpuK9PY3ACNpjDcGFcH
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:27:54 2026 by rpki-client