
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
File: M6AXSkpLAJwBFRWWkTbzAQidtbU.mft (raw, json)
Hash identifier: 1WcnSgNolLbVRSPQIhBsdxgmNs3NhY5qDtxdfLuRqiw=
Subject key identifier: F3:A6:9B:56:F2:A7:02:9A:A1:16:56:BD:28:FE:66:77:98:5E:2B:A7
Authority key identifier: 33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5
Certificate issuer: /CN=A91FF1CC/serialNumber=33A0174A4A4B009C011515969136F301089DB5B5
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
Manifest number: D3
Signing time: Wed 25 Mar 2026 05:59:32 +0000
Manifest this update: Wed 25 Mar 2026 05:59:32 +0000
Manifest next update: Wed 01 Apr 2026 05:59:32 +0000
Files and hashes: 1: M6AXSkpLAJwBFRWWkTbzAQidtbU.crl (hash: OmDG2fv6V4PX543i7615JE5so/5yESukhVP994pg/BY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl
rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF1CC, serialNumber=33A0174A4A4B009C011515969136F301089DB5B5
Validity
Not Before: Mar 25 05:59:32 2026 GMT
Not After : Apr 1 05:59:32 2026 GMT
Subject: CN=69c379c4-ace4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:f9:df:d9:23:b6:15:ef:0d:35:89:c4:d0:
ee:0d:28:ad:80:c3:80:fd:09:16:f0:24:06:26:13:
41:bf:76:cd:dd:a8:4f:af:bf:a5:8e:0d:1f:db:d6:
20:50:6b:45:83:d7:a2:80:4e:4c:a9:e3:80:67:4a:
72:49:d8:2c:70:98:e6:70:f7:39:51:00:19:dd:de:
79:1a:2e:e1:c4:d7:f8:a1:bc:a8:e0:96:96:23:94:
8f:70:72:d1:d6:19:76:05:ff:e8:5f:e5:ba:e5:bc:
d6:d2:be:46:78:0f:be:2b:9b:d0:94:cb:11:51:97:
ff:5a:7d:36:81:d2:c9:58:61:b8:33:c5:22:d8:5d:
c6:79:b8:05:aa:86:e2:38:d3:2d:6c:63:8a:f2:77:
79:7f:5b:62:ef:78:2d:84:a0:77:a9:10:36:00:a1:
10:c2:5a:6e:af:03:49:21:57:e0:0f:d8:ea:47:58:
3f:02:6c:95:57:c1:b8:4d:82:7b:bf:0c:4f:8a:6f:
1c:ab:5a:09:e6:89:b1:4d:40:8f:cf:5f:a7:9b:7e:
e8:8a:8f:f2:0c:66:9d:38:1a:8c:45:2f:7a:d4:00:
8b:3d:01:3f:b8:0b:49:62:68:55:f1:5f:06:09:1f:
4e:8e:f8:76:fd:06:76:fc:f5:2c:9d:4b:a4:c3:32:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A6:9B:56:F2:A7:02:9A:A1:16:56:BD:28:FE:66:77:98:5E:2B:A7
X509v3 Authority Key Identifier:
keyid:33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:25:5b:d5:15:1f:21:fc:30:93:27:91:e2:2e:ea:9d:19:09:
53:16:dc:6e:5e:86:3e:18:d8:eb:06:09:9d:a1:27:98:da:7f:
f3:d6:b6:b5:58:e7:8a:97:8f:61:09:a2:fe:9f:ea:8b:4a:cc:
12:dc:07:23:29:48:fe:6f:b8:f6:27:30:3d:b2:23:f1:ca:96:
28:66:35:98:92:4a:e9:99:b7:1f:12:56:45:b4:41:a0:4c:03:
2c:e1:29:19:2e:6d:e1:89:39:a2:ee:85:a6:f5:00:04:80:e0:
78:3c:5f:7b:42:e3:30:f7:6a:f8:05:07:1e:c0:9c:e0:01:1e:
61:7a:da:bd:74:4c:5d:8a:81:1e:49:28:05:82:7d:1f:a4:5a:
d7:d5:c1:93:fd:14:98:e0:38:39:75:12:0f:3e:b7:37:b3:bc:
2b:41:6c:b4:23:ed:4b:5a:6e:53:f3:e8:a7:f5:ec:88:ae:59:
09:62:0c:61:b9:7b:18:49:81:0a:00:91:80:96:82:c0:97:9f:
5d:5b:30:e4:97:0c:fd:4d:f3:40:09:b3:3e:b6:0e:ac:6e:99:
55:e2:fb:10:4e:10:06:a0:2c:2c:c0:99:14:ee:d4:e1:98:4b:
ff:99:e4:ba:3c:13:7b:fe:83:f9:f7:29:9a:bf:c3:f6:f3:b3:
f0:e1:aa:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:21 2026 by rpki-client