
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft
File: -6D4tMTQWqlqqvV6OUQDcbyNBDc.mft (raw, json)
Hash identifier: XmP52UDpfKu9UxcrOweCgdLx72wwAngyJV2s0HHP01o=
Subject key identifier: C5:BA:36:5B:16:02:2B:33:E6:AA:61:CF:86:51:6F:48:CC:0D:8B:45
Authority key identifier: FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37
Certificate issuer: /CN=A91F9ECA/serialNumber=FBA0F8B4C4D05AA96AAAF57A39440371BC8D0437
Certificate serial: 05D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft
Manifest number: 05CF
Signing time: Tue 24 Mar 2026 22:43:18 +0000
Manifest this update: Tue 24 Mar 2026 22:43:17 +0000
Manifest next update: Tue 31 Mar 2026 22:43:17 +0000
Files and hashes: 1: -6D4tMTQWqlqqvV6OUQDcbyNBDc.crl (hash: 2AibLUtgmUgwfMebxnjyquudt2nBKo5yxR8d6yJ6/W8=)
2: 9F2BA98AF90611EBB8E0C27FC4F9AE02.roa (hash: 0tDqDY+24oh3Yf+5edA9cxJIl1tQumHOlR9sg5V4+cU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.crl
rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:43:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1493 (0x5d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9ECA, serialNumber=FBA0F8B4C4D05AA96AAAF57A39440371BC8D0437
Validity
Not Before: Mar 24 22:43:17 2026 GMT
Not After : Mar 31 22:43:17 2026 GMT
Subject: CN=69c31386-b550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:49:df:bb:b1:a6:32:d8:03:91:16:38:5b:7d:
fd:43:92:b4:f3:34:da:37:11:ec:ad:1d:c1:1a:85:
c8:5d:4c:b0:fc:4c:c3:1c:17:10:44:09:a0:08:2c:
b7:db:39:d6:f4:51:c5:fa:f9:57:06:02:b3:a8:7f:
ea:05:83:d3:42:06:41:a9:d6:21:ca:30:22:cd:74:
8e:2b:0d:92:f8:cd:9a:80:8e:9a:b5:a9:b1:29:85:
15:3f:5e:42:93:dd:65:e3:34:b5:a2:08:75:e4:7c:
aa:a2:bc:f6:1a:34:6b:4e:38:ea:74:8f:de:b2:c7:
fa:6a:e6:de:08:e2:a6:de:f4:0f:bf:90:f6:d9:1e:
4e:26:1a:27:d2:d7:21:35:02:44:4f:7f:f1:06:85:
40:a4:c2:89:40:4b:a3:4a:4a:ee:e0:48:e5:8a:9c:
86:c0:66:56:23:9e:ab:0d:f0:86:96:1e:de:8a:c2:
e9:78:60:1b:57:68:a7:d9:9e:2f:b1:cd:c6:44:5b:
d6:b8:d1:a7:24:a9:b6:27:3a:7f:11:5a:ff:e2:fa:
46:17:b1:ed:d0:37:1f:87:e4:d6:83:7d:29:05:dd:
24:bf:58:80:d6:33:14:3b:3e:b2:34:56:4a:bd:f8:
b0:36:e6:d3:1f:74:8b:27:72:a8:a3:52:18:5f:be:
d9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BA:36:5B:16:02:2B:33:E6:AA:61:CF:86:51:6F:48:CC:0D:8B:45
X509v3 Authority Key Identifier:
keyid:FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:f5:2f:55:a8:b8:15:62:b3:77:83:ce:ed:30:f1:ba:db:8f:
68:c0:9c:0a:57:b9:62:ed:b9:70:51:03:47:46:1e:61:0d:b9:
27:6e:c0:c2:18:d9:bf:9f:05:04:e4:9d:cb:3c:5d:f1:c1:4f:
91:8b:10:ea:c6:9d:26:dc:af:4c:11:b0:e7:d5:66:f1:ea:e8:
f0:d5:d1:06:c8:83:93:9c:ab:3f:f3:ac:6a:46:d4:0d:4d:87:
49:f1:57:1f:6b:9a:38:4a:82:7b:5c:ca:d5:0d:03:43:07:0f:
b7:af:36:9e:a0:01:a6:9d:d9:51:e6:2b:93:c2:8a:9d:91:ca:
ff:24:c8:a5:44:17:9a:03:f0:41:01:10:11:61:bd:e6:21:8c:
07:3e:2f:56:3f:44:e0:25:97:9a:36:f6:a7:57:44:db:dc:9a:
5e:8d:37:09:12:c1:b1:e4:49:44:81:21:6a:64:42:2e:7a:bb:
b4:65:ae:d5:b6:a7:59:f6:f5:33:da:07:e6:d8:68:b7:c3:d4:
7f:87:54:e8:97:83:01:9f:16:e3:12:b3:91:a6:4a:5a:4a:d1:
56:08:6c:bc:3b:54:e2:b0:f1:ff:4b:98:9d:27:54:90:70:ac:
82:80:02:a3:17:6d:41:ea:61:75:0c:62:c6:a5:84:31:1c:05:
bd:32:32:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:42 2026 by rpki-client