
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft
File: 6HkDAXqx8GqctGqwIb0Lkhya-og.mft (raw, json)
Hash identifier: +REAJsKMH0L1fPoh3m5HNkqq66D5cITUO5JBilz+4tA=
Subject key identifier: 24:18:A4:C8:CD:24:CA:1F:5E:82:86:17:4D:95:96:6A:EF:3D:A6:5E
Authority key identifier: E8:79:03:01:7A:B1:F0:6A:9C:B4:6A:B0:21:BD:0B:92:1C:9A:FA:88
Certificate issuer: /CN=A91C49BA/serialNumber=E87903017AB1F06A9CB46AB021BD0B921C9AFA88
Certificate serial: 49
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft
Manifest number: 47
Signing time: Wed 25 Mar 2026 07:30:48 +0000
Manifest this update: Wed 25 Mar 2026 07:30:48 +0000
Manifest next update: Wed 01 Apr 2026 07:30:48 +0000
Files and hashes: 1: 6HkDAXqx8GqctGqwIb0Lkhya-og.crl (hash: eBkKTYFkclW4vi3fknMBgoCKIBBUb35kKkhwBThj34M=)
2: 72F530E2BEF611F08C939B16C4F9AE02.roa (hash: yhMTNzO+SsDCmy0S8wXFM6nSSpWZDvT6nvy+5GJLY5A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.crl
rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C49BA, serialNumber=E87903017AB1F06A9CB46AB021BD0B921C9AFA88
Validity
Not Before: Mar 25 07:30:48 2026 GMT
Not After : Apr 1 07:30:48 2026 GMT
Subject: CN=69c38f28-cedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f0:8b:bf:94:fd:13:07:f9:da:01:ba:13:49:
49:76:5d:22:6e:05:0a:74:81:c6:4e:5e:30:38:ee:
d6:27:2a:45:3a:e7:00:7c:ac:c4:85:58:d2:e9:ad:
f7:f5:99:4a:f6:f5:36:45:c1:47:8d:74:22:df:b5:
71:8b:4e:cf:8c:d1:ec:79:57:e2:db:ac:e2:22:32:
bf:54:57:ad:87:71:ab:c2:65:c7:47:0d:e2:0a:64:
a6:04:c8:d7:42:ea:62:6c:90:c4:8e:4a:57:0f:50:
73:11:5b:53:10:88:83:73:4b:1b:55:dd:18:d8:a3:
da:bf:5b:67:2d:1d:c6:b5:49:b4:67:be:ca:8d:4c:
db:8c:16:94:bf:ed:24:7e:78:52:6d:7f:ca:d5:2c:
0c:f1:1c:e8:d7:e5:23:04:0d:b9:d3:b1:8c:3f:3b:
3c:1b:b5:51:39:0c:73:c1:ff:0c:53:d6:dc:00:74:
13:2b:20:64:f7:17:7e:eb:66:b0:98:ff:19:46:b5:
7c:f1:3b:06:15:49:ff:7f:d7:6c:bf:81:30:91:15:
40:3c:93:f1:48:1a:dc:23:53:0f:f7:e8:27:64:6a:
1b:de:b7:11:38:c0:35:34:4d:4b:8e:b2:05:24:53:
0d:e0:c2:c0:c5:ad:5d:4a:68:af:c9:38:c2:fa:3b:
18:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:18:A4:C8:CD:24:CA:1F:5E:82:86:17:4D:95:96:6A:EF:3D:A6:5E
X509v3 Authority Key Identifier:
keyid:E8:79:03:01:7A:B1:F0:6A:9C:B4:6A:B0:21:BD:0B:92:1C:9A:FA:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:97:fd:3b:11:7c:96:cb:5e:04:57:5e:02:69:46:4d:45:e1:
ca:6b:99:ad:52:81:93:b1:37:45:b6:7c:09:d3:a3:b2:a2:5b:
a2:fc:bc:ca:eb:d4:e1:24:25:11:98:1c:73:3b:a5:04:54:23:
6c:e8:04:a5:68:d7:0a:0c:a1:08:64:ad:72:4e:b8:54:c5:7f:
41:b0:1d:73:92:a6:c9:9d:8f:15:77:3c:f8:6d:21:e5:72:c7:
d7:f2:d5:9e:88:68:06:1c:d8:9a:30:ec:3c:4c:ab:0b:e2:6a:
11:99:ab:66:a2:85:f2:ec:ed:cc:74:5a:01:d4:a3:e7:f3:2d:
7e:9a:2a:79:f0:aa:b8:b9:22:30:00:fe:6b:93:6c:f3:3e:6e:
f7:8b:57:2e:de:1d:25:93:c9:d2:8a:1d:25:ff:a6:0a:ef:ca:
48:b7:ab:a5:25:f6:43:73:cb:02:c7:1a:cc:96:33:38:1d:93:
91:09:f1:33:66:90:23:91:19:ba:db:cf:3e:53:5b:d7:40:ab:
24:78:c2:90:08:33:d4:f0:3c:96:e8:87:76:a0:64:85:b3:43:
d9:4a:2d:ca:e0:bf:71:c6:a4:8f:6d:b4:94:cb:0b:d1:62:6c:
e9:76:42:49:b7:fd:16:22:81:1a:6c:d5:7a:6d:5b:4a:fc:ee:
9f:ac:3f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:46:05 2026 by rpki-client