
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft
File: 6wFhqozbHyTNf-E9XlzlIXulj4I.mft (raw, json)
Hash identifier: elPx9EueyMbJ1lTu0iCmaOH+ty1aMVRxfyTn5BiFwDw=
Subject key identifier: D5:06:86:3F:3B:35:71:EC:06:D0:CD:A5:DF:B7:64:DB:27:4E:DC:7D
Authority key identifier: EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82
Certificate issuer: /CN=A91FC77C/serialNumber=EB0161AA8CDB1F24CD7FE13D5E5CE5217BA58F82
Certificate serial: 17B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft
Manifest number: 17AA
Signing time: Thu 26 Mar 2026 16:32:45 +0000
Manifest this update: Thu 26 Mar 2026 16:32:44 +0000
Manifest next update: Thu 02 Apr 2026 16:32:44 +0000
Files and hashes: 1: 6wFhqozbHyTNf-E9XlzlIXulj4I.crl (hash: Q0cYL7cGj5pCNwTerUmIpdXo6sPiKyb83dIiWvcUaY4=)
2: AAAAE566E8AA11E78A615315C4F9AE02.roa (hash: +KfR9XbiA07UHIB3QQaFMDsbb0IWgivCKLoTziO/wYE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.crl
rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 16:32:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6071 (0x17b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC77C, serialNumber=EB0161AA8CDB1F24CD7FE13D5E5CE5217BA58F82
Validity
Not Before: Mar 26 16:32:44 2026 GMT
Not After : Apr 2 16:32:44 2026 GMT
Subject: CN=69c55fad-d185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b9:4d:3f:7e:7c:ce:cd:96:40:c5:8a:12:09:
f6:e7:31:1c:56:b5:34:54:6d:af:14:cd:57:2d:a8:
89:8c:4f:36:d5:84:4f:5f:f8:e1:e0:3b:b7:68:e7:
a0:2f:47:51:48:8c:65:6d:16:94:69:2a:35:61:cf:
5c:62:1c:6d:31:4f:f5:18:30:79:b0:14:cb:96:93:
e4:b7:ad:c8:1b:e5:bd:41:d3:3d:41:dc:34:6d:e8:
ff:75:de:35:b6:7f:2b:a2:eb:f6:93:91:9c:51:cb:
3d:cb:02:4e:d3:a5:b2:d4:23:80:54:c2:db:9e:e4:
8e:f1:2e:5f:9f:90:7c:37:9b:64:21:aa:4e:ab:59:
2d:01:bf:73:e4:91:f6:3c:40:9c:42:70:6e:de:a7:
23:6a:11:d7:65:58:12:22:74:7f:32:82:d8:87:b2:
04:6b:a1:a0:44:74:67:58:89:bc:d7:2e:1f:20:59:
14:05:6e:51:63:34:1e:43:da:e9:af:2a:46:20:14:
1d:39:5c:96:63:95:45:06:06:a5:3d:b2:77:9f:e3:
8e:b7:f1:b3:ee:21:f0:06:55:f6:77:4f:b4:f2:6c:
ad:4f:2c:16:d3:8c:6d:b8:cc:31:be:6e:7b:ff:9e:
5d:66:d3:53:f5:84:a7:f3:f2:9f:53:00:2a:4f:ee:
eb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:06:86:3F:3B:35:71:EC:06:D0:CD:A5:DF:B7:64:DB:27:4E:DC:7D
X509v3 Authority Key Identifier:
keyid:EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:14:97:96:6d:b6:bd:09:0f:71:12:ad:a6:2c:8e:1a:35:54:
2b:bc:8c:c3:64:6a:8f:29:b5:ed:4c:54:fc:08:31:f2:36:03:
16:e4:01:be:3f:08:ee:c7:37:2f:50:be:7e:d4:4e:08:e1:0e:
48:bb:4d:8c:3b:4d:6f:6b:8d:d1:f4:d7:c6:3b:c0:be:4f:ce:
06:db:3d:27:dd:cf:94:30:27:6d:52:33:d3:5e:ee:67:a8:48:
ac:3b:c6:e8:3d:00:d4:5d:e9:e7:9a:e9:07:ab:d9:1e:30:72:
92:01:92:ad:86:a1:43:4a:5a:d2:cd:d5:da:85:3e:50:ae:55:
d3:69:14:10:b9:b9:fd:9e:80:38:17:9b:65:e4:55:3a:78:37:
56:ba:ce:06:4a:85:18:6b:ec:5c:38:78:7c:15:3b:ca:60:51:
ab:b2:d8:4c:ad:6e:95:55:15:26:ce:c8:a8:e2:2e:5b:00:36:
af:27:c6:94:c7:be:a6:88:62:2e:4d:bd:49:5d:f4:f7:cd:f5:
3b:f3:64:c1:51:f1:37:24:ce:d0:52:88:51:5f:8d:3c:f6:3f:
94:1a:a6:93:29:ff:b5:3c:d8:ce:19:15:8e:59:39:eb:3d:ea:
ce:d5:d5:83:4f:cd:c6:d5:de:3b:c8:6d:07:4d:70:39:f1:2e:
d6:f3:73:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:41:07 2026 by rpki-client