
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
File: 6HFyjDosJtDmCABLp9Hlo1gwlWw.mft (raw, json)
Hash identifier: VqpN2Iy3PUlcapkCP5W/jbIfU3XoJcJDsJAOHvHBn44=
Subject key identifier: 2D:51:C5:44:B1:C4:68:94:A9:5C:B2:E0:3C:40:44:F2:08:C6:2E:7C
Authority key identifier: E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C
Certificate issuer: /CN=A91E6EFE/serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C
Certificate serial: 0298
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
Manifest number: 028F
Signing time: Wed 13 May 2026 01:50:43 +0000
Manifest this update: Wed 13 May 2026 01:50:43 +0000
Manifest next update: Wed 20 May 2026 01:50:43 +0000
Files and hashes: 1: 6HFyjDosJtDmCABLp9Hlo1gwlWw.crl (hash: ujUJx1AlKSO3chB9ZjKUcdcStp9y6GnuRWWGlIKHR8Y=)
2: 8367C13A6CA411ED9DD6425CC4F9AE02.roa (hash: 4eRmnV1SKuH1F3TR04UxwRBazkfSRALaDVotnHYReM0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl
rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:50:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664 (0x298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6EFE, serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C
Validity
Not Before: May 13 01:50:43 2026 GMT
Not After : May 20 01:50:43 2026 GMT
Subject: CN=6a03d8f3-6f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:30:3e:de:fd:d1:9c:3d:4e:b5:50:b3:fe:
e1:4f:d7:3c:64:b2:54:c8:a8:60:ab:9b:b2:5f:ed:
50:53:02:33:6c:71:d5:e7:4a:61:51:de:f9:3f:9b:
e8:a5:a8:65:cf:2e:2f:d1:42:e3:85:14:02:b9:d9:
b2:e7:cf:79:3f:5f:ea:f6:78:4a:0f:fa:b4:4a:fe:
15:b5:b5:c0:51:19:d8:c5:cd:70:7d:a8:fe:e4:90:
37:06:91:b9:6b:93:42:fd:43:2e:56:c6:cf:8d:07:
4f:05:0f:21:1b:96:78:f4:ed:94:61:78:ec:0d:2d:
af:a5:6a:aa:dd:71:cb:86:4e:59:4b:4a:cc:46:c3:
33:cb:2a:ac:bf:af:7b:79:f1:ca:3d:5a:b5:04:1b:
c2:86:e3:e5:de:cb:54:7a:b0:13:d8:01:99:ca:a9:
e0:a5:db:76:a2:58:73:d6:2e:05:37:0b:1d:8a:34:
c7:7d:0d:51:22:c8:be:97:f8:08:48:28:cc:a5:10:
5b:59:67:76:ec:8d:c5:24:17:f1:25:e4:6d:4a:15:
7e:40:44:33:61:d8:a0:28:43:70:e6:06:57:b1:cb:
fd:22:f4:6f:46:ee:b2:37:4d:0f:9a:18:92:29:49:
eb:2a:19:41:4d:0e:61:e9:4e:cb:e5:fc:39:ed:51:
61:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:51:C5:44:B1:C4:68:94:A9:5C:B2:E0:3C:40:44:F2:08:C6:2E:7C
X509v3 Authority Key Identifier:
keyid:E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:a8:4d:88:a8:cd:ab:94:c4:c2:b0:65:25:04:7f:54:b9:28:
b9:b2:3d:60:a8:52:cb:9f:09:bf:0b:43:cd:4a:16:39:19:8f:
a6:6c:1e:99:7c:a9:14:35:d1:26:7d:21:73:8b:7b:5a:88:f9:
96:ec:7b:3e:6c:f0:d6:7e:61:4d:17:36:db:39:e5:e2:4e:d4:
c6:52:08:9a:62:b1:46:e9:32:fd:be:12:90:c6:6e:9f:a7:77:
98:4a:1e:79:55:fb:af:7f:93:17:6c:98:10:9b:12:c0:ba:b7:
f0:ab:87:96:ba:c4:a3:e0:a4:46:fc:cf:a6:b3:fa:85:b2:89:
41:be:01:05:61:64:48:d2:f7:a4:93:a6:0b:f9:81:01:84:da:
d4:f5:bd:d3:85:3d:96:38:41:ab:9b:e7:76:d0:33:11:42:9d:
c7:f9:fe:0d:3f:1f:ba:98:34:b2:64:89:be:ba:f9:cc:e2:02:
45:83:a4:93:3f:97:f2:62:68:1a:ee:93:ce:05:25:41:71:17:
fd:6c:83:b9:84:64:27:9b:e4:30:c6:df:13:eb:cf:7f:41:23:
b6:bb:74:45:b0:84:08:22:39:f7:bd:78:96:47:84:78:55:aa:
90:40:23:f4:fc:df:be:7a:93:fc:83:d1:80:f3:b9:4d:af:ee:
6c:ab:38:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:36:08 2026 by rpki-client