
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft
File: --6lC0fY6xxw_ToK6VrRt2nYQ0o.mft (raw, json)
Hash identifier: w87p9sAvup/v/tOEw3kdLytWhbJDbW6P/rEJjW4s97Y=
Subject key identifier: 4F:65:34:31:28:B9:F3:8E:C2:7B:5F:63:3B:F9:67:8C:90:0F:42:46
Authority key identifier: FB:EE:A5:0B:47:D8:EB:1C:70:FD:3A:0A:E9:5A:D1:B7:69:D8:43:4A
Certificate issuer: /CN=A9111D65/serialNumber=FBEEA50B47D8EB1C70FD3A0AE95AD1B769D8434A
Certificate serial: 43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--6lC0fY6xxw_ToK6VrRt2nYQ0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft
Manifest number: 42
Signing time: Thu 23 Jul 2026 10:27:59 +0000
Manifest this update: Thu 23 Jul 2026 10:27:58 +0000
Manifest next update: Thu 30 Jul 2026 10:27:58 +0000
Files and hashes: 1: --6lC0fY6xxw_ToK6VrRt2nYQ0o.crl (hash: NpJqyt0ChYV07q4fhIGqX7Lc4UCewo1l6Wf1d+PakiQ=)
2: D6075FAE22A911F1B999B242B5833773.roa (hash: hoH+7hdmgPXKwxfgbiApjuFfBwt+Y2bPJbIp+G+HCz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.crl
rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--6lC0fY6xxw_ToK6VrRt2nYQ0o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:27:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111D65, serialNumber=FBEEA50B47D8EB1C70FD3A0AE95AD1B769D8434A
Validity
Not Before: Jul 23 10:27:58 2026 GMT
Not After : Jul 30 10:27:58 2026 GMT
Subject: CN=6a61ecae-9cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bb:e4:50:62:c1:91:af:dd:ce:43:cd:8b:73:
f3:cd:46:93:86:53:28:df:ad:d1:19:0f:cb:ee:07:
fa:bf:21:f5:bb:4f:84:59:65:7c:1d:98:20:da:f3:
24:70:bf:99:9e:6b:b8:5a:96:3b:29:4d:88:31:fb:
9a:0b:c5:9b:7e:cc:d7:49:0b:65:8a:33:67:4e:c2:
19:a8:f9:4e:86:83:aa:f8:39:7b:7c:4d:9d:06:3f:
56:e8:6f:8b:04:4c:b4:8a:d4:2a:cc:00:df:7a:05:
3e:73:02:5d:49:c6:ac:f1:08:7c:a6:a7:88:67:a9:
b0:68:29:9a:e9:78:f1:ed:40:45:c6:b5:4c:55:34:
6f:a5:f4:56:52:3f:67:88:98:d2:c8:b0:6c:2b:11:
f0:4d:12:ec:31:0b:bb:cc:e7:18:fb:c3:53:11:a7:
e2:ed:17:95:dc:42:03:bd:7d:bc:47:32:0c:c9:f7:
a1:6d:95:5c:34:62:7d:c7:18:a0:81:25:07:54:77:
a0:e8:37:d6:0b:dc:e1:7a:0f:cd:8a:39:bb:47:f1:
40:f0:e3:df:60:a7:cf:fb:00:b8:b3:7e:0e:00:5e:
19:4a:97:18:90:7e:90:ed:16:77:3f:f3:4e:9d:ba:
0f:43:f9:b9:5f:84:c6:39:d3:b0:3a:19:68:e6:28:
68:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:65:34:31:28:B9:F3:8E:C2:7B:5F:63:3B:F9:67:8C:90:0F:42:46
X509v3 Authority Key Identifier:
keyid:FB:EE:A5:0B:47:D8:EB:1C:70:FD:3A:0A:E9:5A:D1:B7:69:D8:43:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--6lC0fY6xxw_ToK6VrRt2nYQ0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:da:12:05:6c:e1:f4:fe:55:34:e4:c6:1b:ed:c6:f8:bb:f9:
89:12:71:c4:c1:5d:26:3a:65:93:06:db:80:2e:bc:e3:c5:5b:
4b:8e:0f:d6:06:64:24:ca:98:9b:06:f3:fa:3a:c2:fd:f4:de:
ba:ca:f9:62:78:5b:9d:8c:fa:8e:29:2d:a3:ca:a4:ad:aa:50:
cb:62:00:4e:2d:bb:bf:82:eb:7f:be:33:75:6a:72:ab:00:81:
aa:17:00:2a:77:14:b7:fc:9a:20:0d:10:31:7a:b0:c6:a6:ee:
c1:a0:2a:92:dc:b9:2a:0e:b6:a6:7d:f8:0c:f5:e6:16:2a:84:
86:01:c9:60:1b:e8:1e:c6:af:91:fc:23:2b:34:47:97:c0:51:
22:b7:7b:62:8c:f5:a9:23:6b:f2:bb:6a:58:0a:35:35:b1:de:
1e:03:40:b9:d3:94:d4:e5:78:5d:af:45:00:89:7a:74:4b:2d:
4f:e0:74:a3:df:da:50:cf:d4:c9:b0:96:b0:a4:e9:7e:60:82:
30:1d:e6:95:08:85:ec:5d:58:6b:3a:b7:d3:95:29:45:b6:2f:
43:35:06:fb:b4:46:0c:dd:fb:e0:dd:fc:c1:6b:85:57:95:41:
6d:f2:38:8e:9e:51:a2:59:f8:18:48:b3:f7:a5:90:e1:bf:59:
6e:38:b5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:06:15 2026 by rpki-client