
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft
File: 6NbUISgrkBkAAJd2GiVjIjyngV4.mft (raw, json)
Hash identifier: oe5sdOee8nz8nVFTuW1TQCluZDf7XEs59QPtWMwRYCY=
Subject key identifier: E8:9F:E5:2C:64:E1:15:BF:5A:40:18:85:DC:1F:9C:4D:F0:AC:A7:BC
Authority key identifier: E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E
Certificate issuer: /CN=A91EFCFF/serialNumber=E8D6D421282B9019000097761A2563223CA7815E
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft
Manifest number: 011A
Signing time: Wed 25 Mar 2026 05:03:44 +0000
Manifest this update: Wed 25 Mar 2026 05:03:44 +0000
Manifest next update: Wed 01 Apr 2026 05:03:44 +0000
Files and hashes: 1: 6NbUISgrkBkAAJd2GiVjIjyngV4.crl (hash: VG7SLYf8887V/mpoZKVNnvs7AGYvXIRa/ooB8nLVmUM=)
2: CCEAF60C911311EFA9C63854C4F9AE02.roa (hash: YCyt4eq0YTJbjtnPvyQjHsHsHz1MnNzHboaf/xb9tXs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl
rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFCFF, serialNumber=E8D6D421282B9019000097761A2563223CA7815E
Validity
Not Before: Mar 25 05:03:44 2026 GMT
Not After : Apr 1 05:03:44 2026 GMT
Subject: CN=69c36cb0-2b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:e8:c1:47:55:c9:e5:46:73:e0:5b:8a:cb:
d7:4a:00:b8:34:7b:01:0b:74:66:9f:88:a2:76:0f:
5c:5e:75:ab:8d:12:5c:65:01:c7:d9:f2:bf:1e:a7:
37:57:27:c2:2c:d3:96:73:aa:59:36:dc:a4:71:40:
4d:0e:64:55:9e:65:80:6b:14:c1:4c:f7:de:62:71:
96:23:d5:11:f0:76:19:17:4a:e5:3c:c1:4c:9f:57:
05:ed:25:34:50:86:b5:09:ef:da:4a:7d:84:53:ca:
24:df:c4:04:8d:05:48:cd:19:1f:33:b9:31:4e:f3:
f8:24:5f:df:e0:dc:41:e1:e8:c6:be:41:b1:a3:2a:
8b:32:33:7b:fe:ee:9f:df:fc:1e:e2:c2:97:3c:7a:
b2:20:be:11:83:8b:69:f6:cd:ac:55:48:d9:a9:0b:
23:16:e9:8c:2c:d3:5c:2d:50:bb:b4:a9:6f:62:03:
f9:21:8b:e3:97:21:34:10:3d:76:ba:6f:f9:16:58:
4b:f5:b5:e1:f8:76:14:f7:4a:8f:be:00:e6:88:07:
4e:9f:46:2f:a8:d1:64:bb:50:e5:50:be:0a:95:23:
3b:ef:32:68:bf:ae:77:4c:07:7e:10:cb:81:c3:7d:
1b:b4:b5:f3:47:88:3a:1e:c7:d2:5c:d2:e7:0b:d7:
34:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9F:E5:2C:64:E1:15:BF:5A:40:18:85:DC:1F:9C:4D:F0:AC:A7:BC
X509v3 Authority Key Identifier:
keyid:E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:94:96:00:bf:69:d5:18:27:7a:b5:a0:fc:a7:d0:d5:7c:d9:
66:74:27:2e:39:bd:ab:bd:3e:bc:c2:37:bd:87:11:40:9d:18:
50:fb:14:d2:f3:4a:16:a7:9d:bb:a8:b1:d3:e2:35:93:ef:12:
1f:7f:4c:25:5c:35:ee:c7:15:67:6b:34:29:b9:2a:9d:1b:7a:
8d:8c:ed:86:00:cb:ee:35:e9:ad:b8:2a:25:b5:84:0e:0b:59:
95:88:d1:9b:1b:53:cb:6c:09:64:8f:54:47:6f:e0:8a:4b:80:
cd:28:91:c1:0f:c2:12:b8:de:fe:a3:32:c0:83:60:70:84:86:
cd:4b:83:c1:9f:be:da:5b:75:fd:c6:0b:c8:09:ab:c9:10:02:
b3:86:5f:97:e3:5f:f0:cc:46:aa:cd:b6:1b:fb:80:d2:dd:db:
72:ae:d5:55:cf:04:59:0b:c6:3d:e0:a1:61:b9:64:6f:5e:3e:
f6:41:f1:47:82:55:1c:b9:2e:45:30:d1:2a:95:b3:79:b4:95:
7d:65:47:85:b3:92:34:f7:76:4b:8a:a5:4e:6b:0c:94:12:65:
2e:2b:24:ed:4e:ce:b6:0d:25:a1:e2:e8:4f:98:8f:59:a3:97:
5e:95:0a:49:c0:7d:b9:5f:ff:ef:0d:47:e6:cf:10:59:93:14:
59:ff:ef:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:29 2026 by rpki-client