
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
File: 6O2nHIlk0p8GwkorbRt3FTyo84k.mft (raw, json)
Hash identifier: l/9IGq8++qjjZykSL6hsCmVc8gCSOO09UTpGNknNEOg=
Subject key identifier: 3D:46:39:96:B5:53:26:A4:2A:1E:5C:9B:8F:4A:48:11:FA:78:60:B0
Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89
Certificate issuer: /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389
Certificate serial: 2122
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
Manifest number: 20F9
Signing time: Tue 24 Mar 2026 15:52:41 +0000
Manifest this update: Tue 24 Mar 2026 15:52:41 +0000
Manifest next update: Tue 31 Mar 2026 15:52:41 +0000
Files and hashes: 1: 6O2nHIlk0p8GwkorbRt3FTyo84k.crl (hash: 4cHtGMkzIZW8FMEluusPNPB0fBQKnTcYzv7wEZ4f1wI=)
2: D6702FB2C51411E7A0AC1A77C4F9AE02.roa (hash: +tvaJ54I6jm5pWGSD/+mc9Tf5oV3zMzWVdx1mR4kWxw=)
3: 36AB4096C51611E7AECA8B79C4F9AE02.roa (hash: MGk7Hv0oGH/cadOMgEkpIwvLj9yE4m4r9Wud6jaS3Qs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl
rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:52:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8482 (0x2122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F724B, serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389
Validity
Not Before: Mar 24 15:52:41 2026 GMT
Not After : Mar 31 15:52:41 2026 GMT
Subject: CN=69c2b349-4b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:5b:56:70:4c:c4:27:4e:6b:f4:d9:7d:6f:
54:32:df:43:1f:37:57:90:55:ec:23:4c:46:cd:eb:
06:fc:66:c1:21:94:02:45:a7:2a:87:0e:39:7d:d6:
6a:43:d3:c1:32:5f:a0:98:b7:0b:bc:5f:0f:ac:4b:
4d:4b:bb:74:2b:de:19:c9:1a:a4:52:27:a6:ff:37:
e5:02:f9:c9:2d:ee:db:c6:6f:9a:d0:5b:02:1d:ba:
13:cd:96:27:98:57:96:ee:99:bc:94:d2:e6:50:3b:
c4:1b:32:98:ec:ff:b7:27:8c:53:6b:0a:3c:1a:00:
2f:c5:cd:cd:e1:9f:d5:e4:77:d5:c0:d6:d3:a8:09:
75:0d:a0:c3:4e:89:28:2f:8b:54:c8:d1:56:07:8d:
d8:fa:f9:62:d2:8f:08:bf:68:a9:72:47:e7:b3:7c:
36:b9:c8:06:0f:ee:f4:2e:45:7c:a4:c2:dc:d9:92:
d8:64:ba:c2:46:12:2c:6c:b2:bd:62:72:c8:23:09:
26:33:9b:52:b8:ae:00:45:4b:1b:84:99:c6:db:a6:
41:10:ee:8f:07:f0:70:1e:3b:35:f3:91:0a:a1:c3:
a7:41:70:2c:a9:56:19:e9:81:16:ef:30:8f:15:2d:
2a:9f:7a:65:f4:72:99:e1:5d:a3:a6:96:9a:53:8a:
73:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:46:39:96:B5:53:26:A4:2A:1E:5C:9B:8F:4A:48:11:FA:78:60:B0
X509v3 Authority Key Identifier:
keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e3:ed:ed:51:04:13:12:1d:09:37:fe:02:94:fb:b0:72:3c:
10:26:5b:6c:59:b5:8c:73:2d:88:0e:3e:4f:69:a0:c1:45:f8:
f8:30:ff:11:16:0d:97:9e:bd:16:de:06:62:ab:84:e5:2a:41:
bf:b3:ba:07:78:84:9d:98:55:cb:40:19:a4:54:b3:8b:a1:7e:
5f:4d:c3:d7:52:9b:6c:41:14:f8:37:4e:56:22:5c:be:a3:a7:
f4:7e:c7:6c:cc:d7:14:42:27:3f:6a:17:4d:02:59:a9:3c:4b:
3b:61:95:29:d5:bd:88:bb:71:4c:e3:df:81:10:49:a5:a3:3c:
c0:09:d1:fa:2f:b9:59:34:3d:d1:f3:5c:d7:a9:c3:a2:ce:52:
e5:a2:64:37:50:49:a2:79:0e:e7:37:8a:3f:e9:8b:a8:7b:41:
6c:8f:5b:8a:d9:cd:8e:81:c3:e5:1f:df:e3:5b:dc:7c:ae:d6:
a5:bf:f5:cc:48:46:82:51:64:07:1e:33:95:7c:96:e6:87:92:
fc:00:83:90:54:a3:24:59:22:f0:63:b1:68:6d:af:ce:1b:b7:
75:a3:50:19:70:a2:0c:92:f6:d4:fc:36:15:b4:04:a9:52:2f:
18:3d:fc:a0:91:52:29:63:34:b3:58:9a:ff:6f:2e:95:44:47:
2d:44:fe:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICISIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjcyNEIxMTAvBgNVBAUTKEU4RURBNzFDODk2NEQyOUYwNkMyNEEyQjZEMUI3NzE1
M0NBOEYzODkwHhcNMjYwMzI0MTU1MjQxWhcNMjYwMzMxMTU1MjQxWjAYMRYwFAYD
VQQDEw02OWMyYjM0OS00YjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArClbVnBMxCdOa/TZfW9UMt9DHzdXkFXsI0xGzesG/GbBIZQCRacqhw45fdZq
Q9PBMl+gmLcLvF8PrEtNS7t0K94ZyRqkUiem/zflAvnJLe7bxm+a0FsCHboTzZYn
mFeW7pm8lNLmUDvEGzKY7P+3J4xTawo8GgAvxc3N4Z/V5HfVwNbTqAl1DaDDToko
L4tUyNFWB43Y+vli0o8Iv2ipckfns3w2ucgGD+70LkV8pMLc2ZLYZLrCRhIsbLK9
YnLIIwkmM5tSuK4ARUsbhJnG26ZBEO6PB/BwHjs185EKocOnQXAsqVYZ6YEW7zCP
FS0qn3pl9HKZ4V2jppaaU4pzfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD1GOZa1
UyakKh5cm49KSBH6eGCwMB8GA1UdIwQYMBaAFOjtpxyJZNKfBsJKK20bdxU8qPOJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzI0Qi8xQkM3MUE2MjE2
ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBwOEd3a29yYlJ0M0ZUeW84
NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZPMm5ISWxrMHA4R3drb3JiUnQzRlR5bzg0ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NzI0Qi8xQkM3MUE2MjE2ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBw
OEd3a29yYlJ0M0ZUeW84NGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqePt7VEEExIdCTf+ApT7sHI8ECZbbFm1jHMtiA4+T2mgwUX4+DD/ERYNl569
Ft4GYquE5SpBv7O6B3iEnZhVy0AZpFSzi6F+X03D11KbbEEU+DdOViJcvqOn9H7H
bMzXFEInP2oXTQJZqTxLO2GVKdW9iLtxTOPfgRBJpaM8wAnR+i+5WTQ90fNc16nD
os5S5aJkN1BJonkO5zeKP+mLqHtBbI9bitnNjoHD5R/f41vcfK7Wpb/1zEhGglFk
Bx4zlXyW5oeS/ACDkFSjJFki8GOxaG2vzhu3daNQGXCiDJL21Pw2FbQEqVIvGD38
oJFSKWM0s1ia/28ulURHLUT+Ow==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:14:57 2026 by rpki-client