
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft
File: 61l_6N8H6peZiwP4KDQ7yIda7Qg.mft (raw, json)
Hash identifier: jTZ9pMDZgJ/F9s4Fp8eUaRy4Z6bB3mcXrbmRfYmLXTI=
Subject key identifier: D2:B8:5D:E9:BD:EE:CD:FE:A3:63:49:55:BD:F5:C7:40:C2:CF:9E:12
Authority key identifier: EB:59:7F:E8:DF:07:EA:97:99:8B:03:F8:28:34:3B:C8:87:5A:ED:08
Certificate issuer: /CN=A91FCF7C/serialNumber=EB597FE8DF07EA97998B03F828343BC8875AED08
Certificate serial: 06F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61l_6N8H6peZiwP4KDQ7yIda7Qg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft
Manifest number: 06EC
Signing time: Tue 24 Mar 2026 21:48:46 +0000
Manifest this update: Tue 24 Mar 2026 21:48:45 +0000
Manifest next update: Tue 31 Mar 2026 21:48:45 +0000
Files and hashes: 1: 61l_6N8H6peZiwP4KDQ7yIda7Qg.crl (hash: 0Pd3z37S+8w+8OFIfKyX/h/jxMNB9Yz/WTeLVyc4wHU=)
2: EF31C4CC87CE11EBAA016A4BC4F9AE02.roa (hash: sDFJ7RnRZiaTA645Dw6N6inHyehs5SaMqmOSY4xqnAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.crl
rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61l_6N8H6peZiwP4KDQ7yIda7Qg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1778 (0x6f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCF7C, serialNumber=EB597FE8DF07EA97998B03F828343BC8875AED08
Validity
Not Before: Mar 24 21:48:45 2026 GMT
Not After : Mar 31 21:48:45 2026 GMT
Subject: CN=69c306bd-349e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:51:4b:38:fc:fa:55:7c:14:21:4f:fb:11:
f6:0d:de:f4:ad:d9:38:71:93:04:e9:bd:b4:f2:60:
bc:37:33:e1:91:c5:54:8e:f6:ef:34:f9:af:b9:fd:
e0:14:4e:3e:6a:bd:a4:55:72:7a:45:b3:22:99:5b:
10:59:77:dc:1b:1c:56:67:d0:1f:2d:14:e8:56:50:
50:30:2c:3e:d1:44:88:b2:4d:58:3c:6b:a5:69:11:
93:ab:36:a2:b2:3e:b3:68:8d:76:08:32:e4:8a:41:
e2:27:02:f9:bc:99:88:e2:7f:eb:ac:c3:9a:b6:e1:
16:09:2c:e2:6a:69:1e:ca:ea:e0:f2:19:56:0a:4a:
63:e0:45:63:e9:ae:d8:71:09:10:85:cf:93:b9:a9:
73:11:47:1c:eb:79:f5:2a:94:5a:3c:07:f9:c7:55:
ce:52:3a:92:4f:83:37:24:80:44:07:ff:26:8f:44:
5f:e5:52:ca:de:38:66:95:49:fd:b1:2a:69:78:2b:
83:cb:02:5d:7a:ef:c2:a5:9b:dc:ca:78:33:a1:f1:
96:18:55:21:a9:00:c6:e8:33:56:49:93:30:b3:5c:
fa:6b:dd:d6:a9:e5:cb:ad:eb:f9:b9:a1:e8:53:82:
9f:2e:bc:71:51:ef:45:a2:31:07:7d:50:ed:7d:bf:
5b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B8:5D:E9:BD:EE:CD:FE:A3:63:49:55:BD:F5:C7:40:C2:CF:9E:12
X509v3 Authority Key Identifier:
keyid:EB:59:7F:E8:DF:07:EA:97:99:8B:03:F8:28:34:3B:C8:87:5A:ED:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61l_6N8H6peZiwP4KDQ7yIda7Qg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:0e:61:ec:fa:94:72:55:0b:ec:c8:10:c8:e8:04:1b:cc:4d:
7d:b5:e9:ff:ac:dd:4e:df:7a:be:df:a1:29:08:9e:52:86:89:
3b:f7:97:4f:c9:9d:d4:d0:49:5d:28:3b:a5:45:f5:36:3a:5a:
f2:ad:71:d6:1f:5f:80:bc:8b:78:0d:98:d6:b7:a5:20:e8:bb:
17:0e:e1:a6:57:7f:44:f0:5e:cc:8e:c7:be:aa:81:3a:b3:7e:
14:77:92:39:27:1a:17:e5:a3:ab:ca:82:48:f4:60:68:9e:0e:
ac:0d:23:2a:6f:48:e9:b0:55:24:12:ad:1d:c0:ce:f0:43:bd:
e7:45:ed:4b:e9:85:02:ca:a8:37:80:eb:b7:63:55:0c:be:2f:
fe:39:f5:29:42:a9:d4:12:ad:25:ee:81:eb:e9:09:a1:8b:68:
55:bf:b9:94:f4:57:34:2e:ff:4d:25:9a:d7:ed:3f:dc:19:1e:
b2:a3:dd:78:63:74:97:0d:52:fe:ab:e0:de:c4:db:c0:58:4c:
cc:42:e8:9b:c9:bf:98:fc:57:d2:93:b4:35:7a:6c:d8:f3:f1:
35:e6:3a:68:c4:ac:70:fb:79:c0:e3:13:9d:9e:2d:b2:39:84:
50:f6:5a:f1:07:43:ca:7a:a6:db:8e:08:d5:9b:04:76:2c:ce:
b1:61:1b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:52:12 2026 by rpki-client