
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft
File: 6f7YwwxxXQSs4XWunL1wDBl3BgI.mft (raw, json)
Hash identifier: ZvwvjzmqjOhN/wT2IHAXKaeVXw6xNQfdT/2ggWYJ5PQ=
Subject key identifier: 3A:B2:A7:01:2E:D0:B8:41:31:44:6A:9F:D3:02:8E:0D:95:A1:6D:18
Authority key identifier: E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02
Certificate issuer: /CN=A91C3EF6/serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602
Certificate serial: 1570
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft
Manifest number: 1564
Signing time: Tue 24 Mar 2026 16:41:07 +0000
Manifest this update: Tue 24 Mar 2026 16:41:07 +0000
Manifest next update: Tue 31 Mar 2026 16:41:07 +0000
Files and hashes: 1: 6f7YwwxxXQSs4XWunL1wDBl3BgI.crl (hash: fOAY/Pad/JPNAvORLR2D8Rb1bOpqlZbyY9xDTUc+zYs=)
2: D056896E592A11E889035A70C4F9AE02.roa (hash: xfOOBrWbtGHcwmNZy8LKGhWdJ4lHmDqX/WSQcw29UdI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl
rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5488 (0x1570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3EF6, serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602
Validity
Not Before: Mar 24 16:41:07 2026 GMT
Not After : Mar 31 16:41:07 2026 GMT
Subject: CN=69c2bea3-35ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:50:1a:42:5f:5c:ee:23:83:44:b8:a5:2f:
33:01:63:35:2c:f2:d8:24:fe:7f:39:7f:1f:53:cf:
14:47:38:fc:32:9d:0f:73:2a:73:f3:cc:b7:a0:65:
19:ee:87:da:ba:49:b8:ed:35:da:38:70:44:c1:6d:
49:93:33:18:9e:6f:ee:22:fa:8a:92:9f:dc:0a:b9:
8c:ca:a4:9b:a6:82:ce:f8:e1:13:bb:7f:d3:fb:6f:
19:4f:3c:d6:13:6e:c0:2f:90:0c:e1:f8:a5:eb:e3:
c4:b5:b3:79:e4:4b:97:b9:01:02:89:b7:ce:b9:78:
98:d2:65:80:4c:70:fd:13:97:29:e5:91:75:11:61:
7a:21:89:15:f0:0b:b3:e8:20:6a:84:ef:33:00:52:
53:60:f1:81:84:b3:4d:c7:86:51:03:88:63:ac:04:
cf:b7:55:2a:34:74:ca:6a:85:76:8c:4c:ec:33:61:
95:d8:ed:45:5f:74:30:1f:b1:b4:8e:ba:c9:3e:10:
b6:5f:e8:f5:eb:54:e2:50:8c:cf:34:0c:cc:d7:54:
38:ab:28:d7:96:22:83:07:a3:a6:32:28:4d:f7:45:
eb:8f:44:c0:f4:fd:8a:55:df:db:b4:11:5d:48:ed:
5b:9c:59:26:c3:04:65:29:f6:18:3e:12:2d:42:7a:
9d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B2:A7:01:2E:D0:B8:41:31:44:6A:9F:D3:02:8E:0D:95:A1:6D:18
X509v3 Authority Key Identifier:
keyid:E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:97:b1:27:c8:8c:b0:f8:9d:4c:14:9d:67:c7:27:5c:d2:cd:
e3:71:fe:58:5d:67:2d:74:50:36:4c:47:2d:4a:76:06:f1:73:
0b:4e:c9:21:d4:c1:ce:48:47:5b:b9:ec:68:ee:80:45:12:ba:
0e:94:23:6f:3b:6d:38:9e:79:b1:01:73:74:41:4d:4b:33:25:
83:b2:0b:f9:f3:43:51:35:36:05:d4:78:99:8c:1f:18:26:2d:
de:75:88:3f:79:e3:9a:5e:03:05:6a:eb:43:d7:6b:13:1c:ed:
a6:9e:28:b1:f8:b5:76:cf:3f:b2:9c:8b:7b:15:d2:91:5b:b5:
79:91:94:24:cc:d1:bb:ed:88:26:b0:c8:92:98:23:6e:a8:83:
09:cd:0a:72:29:79:ea:d1:79:4d:46:42:e0:99:dc:b9:cd:4b:
dc:70:2c:0d:11:cd:da:8c:fa:b3:e3:8e:11:57:3b:3b:4b:14:
3b:b2:85:07:37:6b:c3:71:b8:a7:85:07:bb:77:ab:4e:7f:4b:
06:34:03:ab:31:14:2d:95:cd:c7:4b:9a:38:eb:94:73:0f:03:
5a:c6:ae:9e:13:78:3c:3e:f9:75:33:01:03:6d:78:a7:f9:72:
57:d5:0a:38:5b:bf:20:93:3b:71:e8:34:c7:c2:f2:af:8b:f7:
e9:aa:87:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:06:21 2026 by rpki-client