
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
File: 6VdtMs2hm7hvPBYuyf020_0lucE.mft (raw, json)
Hash identifier: NF4mlfrlVDjbFS129SB3oWwvdgRjwAVdl6kpnF2Kug0=
Subject key identifier: 91:13:D2:43:EA:6E:20:C6:99:16:48:F3:D4:FA:BD:F5:C9:19:32:C0
Authority key identifier: E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1
Certificate issuer: /CN=A9131359/serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1
Certificate serial: 02B5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
Manifest number: 02AE
Signing time: Thu 23 Jul 2026 02:29:46 +0000
Manifest this update: Thu 23 Jul 2026 02:29:45 +0000
Manifest next update: Thu 30 Jul 2026 02:29:45 +0000
Files and hashes: 1: 6VdtMs2hm7hvPBYuyf020_0lucE.crl (hash: zMq5P8i2mk8gkiykzCVFKQrvqdB++nMlkRCgdskoWVo=)
2: 01C299E0662611ED94A8DA42C4F9AE02.roa (hash: oC6miXWdaPojqcpO8i3+8D+CMDRbnsGghAkCPd5g198=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl
rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 693 (0x2b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131359, serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1
Validity
Not Before: Jul 23 02:29:45 2026 GMT
Not After : Jul 30 02:29:45 2026 GMT
Subject: CN=6a617c9a-7b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:04:ca:6c:ff:c3:37:28:01:02:c9:f5:eb:
6c:f0:ce:45:a8:fb:f9:8b:51:db:5d:bc:8b:72:d9:
05:1a:dc:27:00:0d:7d:ef:4c:a4:e0:a8:b4:5d:05:
33:ed:c5:21:94:a1:ab:3c:6c:7f:f9:64:b5:0a:24:
cc:f8:96:67:e4:14:e2:e7:ae:18:e5:5e:96:73:02:
9b:d7:b5:86:f5:02:3e:49:9e:54:f6:47:bc:33:49:
13:77:55:86:4a:af:e4:69:0c:ee:48:56:ae:ef:fb:
d5:ab:e3:0c:63:34:75:ca:22:78:fd:57:b0:07:45:
d0:08:8e:2a:fc:ea:3f:9f:88:53:8e:a8:83:5c:cd:
20:98:77:97:76:5b:3c:68:db:f4:2a:ce:32:a2:7f:
e4:8a:71:56:10:97:bf:3e:c0:66:10:30:4e:6b:63:
f2:2f:80:01:d1:a7:65:7c:25:61:da:ec:0b:24:8b:
b9:33:28:3e:8c:30:51:f9:7a:94:59:a3:e3:0d:fb:
3b:0b:30:09:ec:92:8e:09:21:36:74:07:e5:93:d4:
fd:dc:00:6a:eb:c8:ba:f1:53:23:6d:b8:a7:65:5e:
93:63:83:db:96:4d:b3:ee:a8:50:6a:e9:21:17:07:
11:42:56:27:15:84:61:0d:0a:df:9f:5e:d7:7d:98:
f0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:13:D2:43:EA:6E:20:C6:99:16:48:F3:D4:FA:BD:F5:C9:19:32:C0
X509v3 Authority Key Identifier:
keyid:E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:a2:04:ca:03:8b:0b:06:e6:07:5d:d2:7d:8d:8e:8e:7b:fc:
16:8b:21:1d:36:39:0e:5d:2f:1e:e5:c5:af:e9:3a:ae:48:f5:
92:cd:75:f1:89:26:10:20:45:80:03:2d:35:33:16:20:c7:3d:
9d:ca:79:98:48:dc:40:bd:c3:a1:68:4a:aa:56:39:38:f8:6f:
97:01:59:88:0d:24:e9:13:3a:b9:33:b0:08:88:ec:ee:5f:62:
f3:92:39:5c:56:f0:68:06:0b:bf:ad:8c:b1:97:74:1e:37:a9:
6a:83:e2:f8:0a:27:3d:80:5a:9e:1f:63:06:9d:70:cc:b1:4b:
f5:ac:73:4f:7c:1a:84:f8:39:63:2d:5d:75:29:fd:3f:7b:1c:
c2:b4:db:5e:c8:99:34:da:93:5f:59:aa:91:96:0a:cb:fb:ea:
df:2f:54:6c:03:06:d5:73:33:2c:49:a4:5e:c0:8b:4a:de:8e:
61:0b:4a:24:55:da:9d:6d:39:32:20:03:1d:d8:9f:5e:d2:35:
a0:a2:c2:b2:ff:4a:49:0d:a5:18:70:4f:61:0c:40:97:66:c3:
4f:79:69:34:a1:36:33:2f:de:a7:bd:f2:59:8c:17:b6:6c:51:
d9:c7:d2:39:42:d3:77:62:7c:2c:39:30:54:27:76:23:db:7e:
14:64:d8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:54:36 2026 by rpki-client