
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
File: R6cRTih-sdyDXQfpgEXvRvU-fFc.mft (raw, json)
Hash identifier: vH0DN6bvzHgwT7Onw6BDxUsJaFdcw4vOGc1njVKi6og=
Subject key identifier: 2B:EC:E6:9B:38:20:72:CB:E6:72:74:AD:13:0A:41:A0:DB:E2:FF:61
Authority key identifier: 47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57
Certificate issuer: /CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
Certificate serial: 1E16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
Manifest number: 1E00
Signing time: Tue 24 Mar 2026 16:00:51 +0000
Manifest this update: Tue 24 Mar 2026 16:00:51 +0000
Manifest next update: Tue 31 Mar 2026 16:00:51 +0000
Files and hashes: 1: R6cRTih-sdyDXQfpgEXvRvU-fFc.crl (hash: zMmjIRqZe7I/1qVbeI5HeBXGOyzT62PQM2/ZgTpzGSU=)
2: B842F0DEDB8A11F09F03163163D3641D.roa (hash: ks313B+YVez30ZvOkXppIDe7jBhr+JL2wzA7+C6C6as=)
3: A264F35C8BAC11E7AFBAB71AC4F9AE02.roa (hash: SlJiezfKVA682d59XvPf2AbS2jgh+2UE1l8E3xESDCc=)
4: B7BA9860DB8A11F09F03163163D3641D.roa (hash: O53sGlqKt1W1OA/6Skh5fLhJK6tOZwiFqxR6V2JMvYc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl
rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7702 (0x1e16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C16B5, serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
Validity
Not Before: Mar 24 16:00:51 2026 GMT
Not After : Mar 31 16:00:51 2026 GMT
Subject: CN=69c2b533-5993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:72:82:de:08:87:3a:4b:86:45:fd:9e:e8:fb:
c6:b9:62:ec:f8:3f:20:28:f4:eb:c8:d3:59:2b:47:
6b:53:5f:b0:cc:e4:14:e9:be:de:e3:7c:7f:3e:fb:
4e:7c:8b:36:35:8b:9f:75:98:cd:34:08:8f:a1:23:
63:2b:27:2d:9d:dd:58:17:e1:d0:6a:aa:7c:32:99:
51:94:53:ca:35:e7:93:e5:ad:25:2d:06:b3:a2:c9:
1b:7c:a0:01:a4:a5:89:6d:8e:ee:5a:b0:da:e7:bc:
78:0a:51:01:20:8f:37:24:e0:82:5d:6c:58:ac:a8:
fd:e6:5b:9a:bb:b8:d7:b3:4f:37:14:41:2e:57:dd:
5b:fe:f7:d7:a1:95:ed:85:42:86:68:4e:bf:ca:78:
0d:a8:e9:c6:c0:f7:e8:04:33:9d:b2:17:9c:f9:c6:
39:08:3c:47:61:c6:d2:91:06:70:f3:cf:b4:b4:33:
bc:bc:d1:51:82:59:a2:b9:92:d4:72:4c:cc:ae:35:
8c:c6:d3:12:c5:9a:f2:a9:ab:ee:50:32:d6:e5:ef:
f0:28:c1:a1:6e:94:69:94:37:86:59:b9:8e:d2:03:
80:ea:a6:2a:a5:dc:3f:dc:47:ec:1f:e8:ec:26:71:
d0:fd:fc:e3:fd:30:03:42:0d:d8:e8:f6:a2:92:17:
62:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EC:E6:9B:38:20:72:CB:E6:72:74:AD:13:0A:41:A0:DB:E2:FF:61
X509v3 Authority Key Identifier:
keyid:47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f0:bc:0a:4d:ff:b5:05:51:cb:1f:ed:ed:06:65:c4:30:45:
d6:5a:ad:fd:d1:b5:25:1e:46:45:d7:32:aa:55:83:12:27:f9:
9e:c4:a2:ed:e8:26:b0:ca:6f:54:78:21:19:1d:d3:64:2d:68:
86:30:f9:e0:2c:4f:3d:17:ad:c5:4b:9d:af:86:53:36:4b:0e:
7d:ae:b7:ec:d4:e2:e7:ef:0b:67:17:51:4e:24:64:eb:d9:a5:
7d:be:e8:47:c1:23:07:90:c4:58:d7:eb:b6:2a:a1:56:ed:b4:
51:a4:50:3d:7c:15:c5:53:95:3e:1f:50:1c:25:04:b3:0b:25:
52:8b:8e:a7:27:49:cb:2d:11:1b:4b:0f:43:19:a0:63:9d:d0:
05:03:50:90:6d:bb:a6:f2:33:8e:13:dc:28:1d:3b:64:ab:95:
c2:94:d2:1a:7e:27:40:60:82:a7:11:53:26:20:5b:25:25:0a:
4b:c0:59:f4:44:4b:68:12:66:f3:f6:cd:9f:2e:b4:cc:b0:05:
b1:21:3f:71:e8:93:f5:5f:05:f9:c2:7b:34:f9:25:29:94:bc:
e5:ea:eb:a5:a3:a2:5c:5e:f9:7d:ae:9d:01:ec:b3:e6:55:31:
ee:f6:b8:75:26:8c:52:62:7b:c1:29:f7:64:1f:a1:11:10:5e:
88:23:0f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:26 2026 by rpki-client