
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft
File: df43qD7agAphAmCFh-30CJ2CQOA.mft (raw, json)
Hash identifier: jwcwGTuoJW/iKlazQ2/bLARZyw/aa4ifq2e36t9HPZk=
Subject key identifier: 62:74:6B:59:41:57:EC:3A:F8:6A:0A:C8:FD:CC:16:60:D9:A9:4E:6B
Authority key identifier: 75:FE:37:A8:3E:DA:80:0A:61:02:60:85:87:ED:F4:08:9D:82:40:E0
Certificate issuer: /CN=A91DC7AA/serialNumber=75FE37A83EDA800A6102608587EDF4089D8240E0
Certificate serial: CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft
Manifest number: C6
Signing time: Mon 11 May 2026 07:04:00 +0000
Manifest this update: Mon 11 May 2026 07:04:00 +0000
Manifest next update: Mon 18 May 2026 07:04:00 +0000
Files and hashes: 1: df43qD7agAphAmCFh-30CJ2CQOA.crl (hash: 7fFymZNt9xi771TBrowzKzwHTpPokEWhtFNU+ePrAwk=)
2: A7C7EF962A8911F09526D35BC4F9AE02.roa (hash: HcYhHFFcvCKuaGxFRTIVt3Z+Wah4d0SujZ+rvqoNWCE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.crl
rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206 (0xce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC7AA, serialNumber=75FE37A83EDA800A6102608587EDF4089D8240E0
Validity
Not Before: May 11 07:04:00 2026 GMT
Not After : May 18 07:04:00 2026 GMT
Subject: CN=6a017f60-ccde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:c9:9a:df:f0:25:45:a4:19:18:07:06:44:
6d:64:a0:49:94:eb:40:16:20:82:48:a5:a5:3e:c2:
e4:11:e1:25:00:68:1c:3b:65:24:46:e8:47:3b:19:
60:31:d6:11:2f:70:96:23:cf:64:fb:ef:61:3c:5d:
7a:b3:54:e8:b8:52:17:6a:12:fa:3b:d5:98:93:54:
48:61:62:7f:29:6f:2f:cc:f6:8c:c8:cf:03:54:d6:
69:d6:46:a9:03:ec:b0:d5:1d:3a:29:be:90:b7:f8:
12:e3:5e:34:3c:91:58:53:78:e2:3d:bb:4b:e3:c8:
20:68:32:00:49:52:18:12:29:40:82:bc:63:e4:5e:
46:75:c8:08:4c:f5:da:2b:a8:8b:55:a9:de:1d:22:
ba:3a:3b:c8:aa:cb:4f:e1:1f:20:2b:e9:0a:a5:26:
68:cd:6e:c2:1e:76:68:14:81:a0:2d:c0:09:c3:f6:
ee:69:05:15:7c:90:83:dc:aa:9e:14:c4:1a:62:ae:
31:bd:c9:15:b3:aa:db:fa:cf:d4:58:39:86:a7:c3:
a8:60:6a:b1:74:32:8d:d9:d1:6f:42:ff:2d:b8:60:
3b:0c:ed:c8:de:78:2e:3f:20:5b:19:4b:bc:33:14:
10:9e:f5:7a:50:bf:e7:d9:ba:ca:0b:24:e5:05:4f:
1c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:74:6B:59:41:57:EC:3A:F8:6A:0A:C8:FD:CC:16:60:D9:A9:4E:6B
X509v3 Authority Key Identifier:
keyid:75:FE:37:A8:3E:DA:80:0A:61:02:60:85:87:ED:F4:08:9D:82:40:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:3e:60:e1:f8:70:b7:fc:bb:91:47:01:67:e0:ad:01:b6:ca:
bc:3c:f9:22:b1:ed:93:e9:54:eb:2e:91:a7:f2:d1:2a:c6:19:
54:e6:70:f2:db:0b:88:d3:cb:c4:53:d3:d2:05:f9:47:6e:2f:
90:0f:67:cf:b6:0b:67:ca:84:66:6e:a2:9f:14:95:3f:d6:04:
4d:3f:0d:83:2e:64:a1:c1:38:25:89:9f:06:1b:0e:5c:8d:d3:
59:28:0c:f5:4e:4b:86:7c:5a:ba:fe:1e:22:4c:1b:69:7f:3a:
3c:3a:64:34:26:04:11:8a:8f:13:24:0b:b9:cd:28:1d:56:e3:
18:ab:c6:57:07:7a:f2:05:dd:81:cd:b7:f3:5e:f0:6d:63:b0:
5e:eb:89:64:ec:c9:e1:84:4a:76:6b:2a:70:c7:84:5a:53:c4:
30:6a:64:1b:81:f9:ef:6a:c9:63:33:ff:be:7d:72:f2:75:32:
b4:42:8b:cb:b5:34:28:b2:6c:94:6e:45:fb:46:1a:cc:24:65:
d1:86:ce:71:0b:2b:38:79:82:ac:e1:85:2b:88:0a:60:1a:fa:
3a:b1:42:31:d2:46:d2:3f:b6:e2:75:93:05:08:4e:27:19:62:
85:87:7c:ff:6c:c6:eb:32:1b:07:9e:29:a3:0b:21:c1:bd:6a:
99:41:65:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:33:58 2026 by rpki-client