
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft
File: 6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft (raw, json)
Hash identifier: IXNE1eCIzOs69Og4dK+xEOpdSvRkkF7PR4jeXDaK1qg=
Subject key identifier: 67:8A:5A:89:9B:DD:23:45:5F:DB:B8:31:38:A8:16:9A:24:4C:B1:CA
Authority key identifier: E8:B5:EC:24:8D:CB:13:49:0B:C2:BD:EB:D6:4B:39:0D:D1:CB:A5:09
Certificate issuer: /CN=A91BF2DB/serialNumber=E8B5EC248DCB13490BC2BDEBD64B390DD1CBA509
Certificate serial: 46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LXsJI3LE0kLwr3r1ks5DdHLpQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft
Manifest number: 46
Signing time: Fri 27 Mar 2026 07:53:04 +0000
Manifest this update: Fri 27 Mar 2026 07:53:04 +0000
Manifest next update: Fri 03 Apr 2026 07:53:04 +0000
Files and hashes: 1: 6LXsJI3LE0kLwr3r1ks5DdHLpQk.crl (hash: LS2pQQqi8WCDgR75Zpyw6B542pVehJaLlxB1nwLTOII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.crl
rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LXsJI3LE0kLwr3r1ks5DdHLpQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 07:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF2DB, serialNumber=E8B5EC248DCB13490BC2BDEBD64B390DD1CBA509
Validity
Not Before: Mar 27 07:53:04 2026 GMT
Not After : Apr 3 07:53:04 2026 GMT
Subject: CN=69c63760-7b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b4:af:bc:9e:53:ac:7e:50:64:fc:d8:88:9d:
34:d4:7e:b1:9e:a1:d4:b4:eb:98:be:11:0b:08:ea:
c6:8f:f8:5a:35:e3:dd:4a:cf:99:7f:68:67:62:d3:
95:ec:58:4e:b2:23:29:8b:59:4a:17:de:d4:e4:4c:
09:8b:81:a2:e0:f0:44:60:4b:46:21:09:cd:71:e9:
88:79:08:6c:17:35:59:4f:c1:cc:62:47:74:1c:d7:
0e:b7:5c:26:10:1a:14:94:2a:ac:bf:87:32:ab:92:
6c:3b:b9:bd:dc:e8:68:5b:76:70:94:40:9c:d3:9d:
04:0a:05:1f:8b:2c:ff:f4:49:3a:93:e6:eb:83:e8:
c1:11:39:c5:ad:df:5d:04:51:4c:ea:7a:13:f0:cb:
a0:9d:ae:23:a6:4b:00:b5:ff:fe:90:83:85:59:43:
bc:81:c9:ff:5b:55:d0:c6:14:63:aa:ef:88:9a:20:
4b:36:13:b6:b4:2b:d2:b2:b4:0f:03:b9:1d:67:08:
9b:11:3d:1e:33:cf:cd:89:d8:4d:b7:c3:08:45:64:
50:60:c4:b5:96:f3:c9:c5:b9:ad:f9:2d:cb:66:d0:
76:4f:83:9a:0f:55:e8:9e:af:19:67:d2:3c:23:ce:
b9:c1:f5:d8:02:96:01:1e:40:d9:de:89:73:7a:7e:
4f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8A:5A:89:9B:DD:23:45:5F:DB:B8:31:38:A8:16:9A:24:4C:B1:CA
X509v3 Authority Key Identifier:
keyid:E8:B5:EC:24:8D:CB:13:49:0B:C2:BD:EB:D6:4B:39:0D:D1:CB:A5:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LXsJI3LE0kLwr3r1ks5DdHLpQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:69:ea:1e:cd:87:f5:27:ef:93:62:4a:72:0d:f0:c4:4c:14:
c9:86:f1:b8:d7:5a:62:6a:21:69:13:b6:9a:38:6f:23:6a:8a:
0c:1c:4c:07:70:a0:75:35:cc:1b:53:e1:48:d7:7d:aa:aa:db:
7d:c8:cc:e2:a2:c5:49:84:6d:18:b5:3a:70:84:a8:1c:9f:c9:
48:e0:27:b7:57:d3:1a:d2:57:1d:d2:df:67:cb:d7:8c:3a:fb:
61:57:e9:64:e5:d6:cc:dd:3c:0b:a0:d7:42:16:ac:0a:4a:d1:
a9:6e:61:89:c9:01:b3:a5:29:b4:51:e8:d5:67:d7:4a:70:4c:
7f:07:a1:af:ae:a2:e9:55:2d:ef:c9:0c:d6:c7:f0:fd:bf:15:
f8:c6:7d:81:fb:c1:b5:be:89:92:61:f5:0b:5b:5d:9a:ae:77:
bb:53:82:b6:d3:25:93:fd:be:21:0e:e6:07:d0:89:5e:9e:e4:
8a:a4:5a:85:58:73:f8:0b:88:f8:d5:d1:36:1a:94:b8:ff:42:
69:41:46:95:be:35:29:f5:f4:ca:42:5f:20:d0:67:0f:f4:28:
0d:7e:2b:a5:2d:c5:56:e6:1b:18:db:11:32:3e:a2:e0:5f:f3:
41:74:ae:d7:80:21:ca:47:dc:48:3a:94:e6:05:a8:85:6a:14:
ea:89:1a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:23:48 2026 by rpki-client