
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
File: 6kGaeWKZYloHSmW3ys7_GLgGbIs.mft (raw, json)
Hash identifier: Ytc2AmVXb6yQpf91fh/UFwK+6B/tGhLbWa1cHo3tvNk=
Subject key identifier: 92:0E:BA:8E:A1:B1:4F:E8:A0:F9:20:43:7A:9A:96:10:CF:17:20:4D
Authority key identifier: EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B
Certificate issuer: /CN=A91BEBB1/serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B
Certificate serial: 028E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
Manifest number: 0283
Signing time: Wed 25 Mar 2026 01:15:53 +0000
Manifest this update: Wed 25 Mar 2026 01:15:53 +0000
Manifest next update: Wed 01 Apr 2026 01:15:53 +0000
Files and hashes: 1: 6kGaeWKZYloHSmW3ys7_GLgGbIs.crl (hash: basMYg/O4mcac2m5Rxk56wT4j6WtbQeTJpolNGq0TaI=)
2: 8CD5FC2253A011EDAC40531BC4F9AE02.roa (hash: 0TEewgELmV5zVXvWVafqWeimsKRDC+bmdch2A5FjSG8=)
3: FEDE61B6ED2C11EEBF8F3E49C4F9AE02.roa (hash: ufXIWT3ybJ8GsLB+9LFHnYVpVRoxtUOEddi9vIDDRZ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl
rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:15:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 654 (0x28e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEBB1, serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B
Validity
Not Before: Mar 25 01:15:53 2026 GMT
Not After : Apr 1 01:15:53 2026 GMT
Subject: CN=69c33749-d8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:da:c1:fd:36:34:6c:b9:e0:08:db:25:30:7d:
ba:3c:6c:77:89:66:73:9d:e1:0f:36:78:c2:bb:1b:
f9:56:45:aa:b4:f7:ab:3c:ce:e5:48:52:d5:56:19:
3b:07:3c:76:85:99:1c:3c:5a:34:f6:29:44:1b:11:
79:d3:27:b7:65:9a:68:aa:ba:f1:4b:53:a7:7e:8f:
6d:c6:c3:ca:14:ab:ea:ca:a1:76:80:bc:24:d0:36:
be:bb:a1:b1:d5:a5:71:be:a8:4a:9a:a8:46:0e:bc:
0e:2a:70:ff:b5:94:54:ed:30:e6:34:c3:85:64:fa:
8c:ae:7f:de:cc:ff:8b:ad:15:39:7b:04:6a:14:3a:
84:e1:97:99:86:3f:3e:0a:47:28:14:80:3e:cf:bc:
68:52:58:78:dd:14:9b:e9:57:65:ce:e8:12:56:0f:
97:e3:96:f9:d5:24:c1:ff:ee:68:2d:54:58:80:53:
ca:60:ea:78:11:6c:c1:34:6b:e5:8a:b9:4a:17:d0:
83:b8:77:65:91:da:08:fb:80:22:e2:70:7b:dc:70:
59:14:ed:c9:cd:f0:14:29:0b:d0:1b:07:72:ec:59:
8b:b3:16:60:06:2e:cc:fc:cd:a2:cb:5e:ba:4f:53:
15:73:6d:10:c0:4d:21:3f:f4:fa:d1:75:34:7d:00:
38:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0E:BA:8E:A1:B1:4F:E8:A0:F9:20:43:7A:9A:96:10:CF:17:20:4D
X509v3 Authority Key Identifier:
keyid:EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:5b:61:c1:0e:72:95:ac:98:a2:18:77:ac:de:57:d2:64:09:
6d:4b:a5:1d:46:70:1c:9e:ae:6a:f4:ff:89:78:be:2f:3f:c9:
0a:74:3e:ff:82:8e:3e:ea:19:f0:98:58:ab:f2:ce:97:00:f5:
7a:92:14:d9:f5:a5:bc:71:2b:0a:1a:4b:96:e4:0f:9d:ce:43:
52:7b:d0:ef:d4:02:a4:16:8e:99:b4:fa:df:fa:9c:0d:cb:66:
06:1e:5c:73:c8:2b:98:2b:84:46:75:86:94:d8:34:58:93:85:
6e:96:11:39:aa:7e:bf:4b:0f:32:ea:a7:85:36:ff:41:e7:c7:
d5:87:98:2b:e2:cb:af:c7:6f:4d:59:54:e0:a2:01:ae:5c:da:
d3:62:bf:b6:24:87:25:ea:e8:33:5f:7d:2d:7d:69:3c:08:08:
2d:2c:92:c8:a9:15:9c:a0:10:ab:fa:7a:1d:c5:88:4a:c0:95:
3d:d1:c3:01:32:36:25:92:cf:60:d1:e8:84:dd:4a:e9:c7:23:
f3:99:d2:17:ed:02:b0:90:f5:a7:9d:6b:6e:35:87:59:42:10:
68:c0:e9:4f:e4:26:6b:30:3b:ea:a4:34:ad:1c:5a:19:04:ae:
80:d2:63:d3:95:e2:c5:8a:8a:b8:17:46:1f:ae:6b:ed:50:b2:
ad:98:d3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:35 2026 by rpki-client