
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
File: 6HFyjDosJtDmCABLp9Hlo1gwlWw.mft (raw, json)
Hash identifier: gDn+RuSLAKTVK+WsSuvWim4ryFCcw3kI4tyORsvY7WA=
Subject key identifier: 39:F4:AF:42:81:61:90:0F:2E:F7:9B:6A:42:59:99:27:34:C0:85:79
Authority key identifier: E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C
Certificate issuer: /CN=A91E6EFE/serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C
Certificate serial: 027C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
Manifest number: 0274
Signing time: Wed 25 Mar 2026 01:25:16 +0000
Manifest this update: Wed 25 Mar 2026 01:25:15 +0000
Manifest next update: Wed 01 Apr 2026 01:25:15 +0000
Files and hashes: 1: 6HFyjDosJtDmCABLp9Hlo1gwlWw.crl (hash: GKr8gl/wQYwg2HdI7VHsuIeKnhfSCai2vDZi5pjJHZk=)
2: 8367C13A6CA411ED9DD6425CC4F9AE02.roa (hash: 2V1RNdcikOtSa6XJr4FTxq5Y+/ocM1dKeWBzdjvqhEs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl
rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:25:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 636 (0x27c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6EFE, serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C
Validity
Not Before: Mar 25 01:25:15 2026 GMT
Not After : Apr 1 01:25:15 2026 GMT
Subject: CN=69c3397c-d6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:d1:ac:ce:b1:5e:2c:82:2f:6f:9b:bc:78:
62:f3:c0:83:c8:bf:63:e3:d2:1b:c9:ae:f5:48:49:
ea:76:d4:1b:38:de:b7:5d:e5:b9:18:68:90:d3:b7:
f4:08:c5:01:10:61:ae:ad:f4:3a:28:13:47:33:c7:
49:30:7a:4f:c9:3c:f1:38:4a:33:89:61:3a:29:45:
d8:f7:ad:ce:c5:b7:c4:67:bf:f5:52:e3:e3:df:be:
fa:9d:e2:86:d3:00:dd:8c:1c:c8:4c:43:7e:05:7e:
0e:f3:7f:80:0a:66:8c:24:ad:1f:bb:2b:67:75:62:
d9:f7:dd:6f:db:fd:94:58:9d:c6:67:cb:56:81:55:
a7:ff:04:e3:25:c2:20:27:b8:ec:4b:e4:00:65:ff:
e9:f3:6d:f6:98:f9:93:e4:85:15:71:0f:58:dc:72:
62:b5:a4:ce:1c:06:cf:88:26:d8:b6:a7:19:68:2f:
62:c3:5b:27:7b:b6:d8:9b:02:4b:9e:3b:e9:2c:15:
fb:99:df:40:8c:2c:28:cb:60:8f:c7:c5:4c:d2:8b:
bd:84:24:81:bf:77:44:68:ae:0e:9b:67:19:2e:e1:
3e:80:26:22:fa:1d:87:8c:25:70:ab:1c:f7:27:31:
cb:2f:72:1d:85:92:6f:b2:cf:38:e2:85:e8:bd:32:
a7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F4:AF:42:81:61:90:0F:2E:F7:9B:6A:42:59:99:27:34:C0:85:79
X509v3 Authority Key Identifier:
keyid:E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:25:fa:d3:6b:cd:6b:bf:5a:22:4d:68:ad:ed:a9:aa:a7:7f:
b3:4b:4d:e4:bb:4d:bd:c2:21:9c:39:69:12:74:8d:ee:fe:da:
01:00:3c:db:75:78:14:7e:3c:33:05:6c:00:54:bb:f5:fc:45:
c8:00:20:97:a6:85:85:a7:7e:3e:7a:95:f8:58:1a:38:c1:d5:
47:27:95:20:4a:d3:16:30:a5:11:62:fc:d3:87:af:26:1a:5f:
c6:8b:28:c2:e8:c5:48:b3:ab:20:2b:ed:e6:0e:13:f7:3a:4c:
73:30:1a:fd:b5:a0:22:4f:85:31:d6:1c:42:c2:a4:5d:fe:50:
36:7c:69:37:b0:79:8c:07:1f:4a:bc:43:cb:7b:fc:f4:fc:3c:
86:e2:1d:e1:e3:4b:b8:be:73:a2:48:ec:fd:87:0e:16:0e:f1:
ee:ed:b5:bc:19:7f:5a:01:12:5f:61:2c:0a:3d:b1:38:cb:ae:
97:26:29:71:36:67:44:21:f7:63:8c:70:84:ee:b4:4a:e6:96:
62:c7:83:47:af:83:8f:7c:71:48:48:ea:19:53:b9:77:5e:f4:
0c:6e:43:9b:a6:d0:8f:2d:86:9d:49:88:73:fa:54:1e:ea:9f:
1b:ec:d3:2a:22:44:c7:b1:11:ed:d4:38:20:2a:49:ca:67:e5:
e6:c1:4c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:34:48 2026 by rpki-client