
$ rpki-client -vvf rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
File: 0wlAzG8MECS4QLu309gBJjYGylk.mft (raw, json)
Hash identifier: TtbknCjNz0BYt79Tz6OhmpY2RrtGyUMO2Dmjtx+pwMM=
Subject key identifier: 9E:1F:E2:D2:03:D2:C8:9D:F0:B3:7F:23:21:AC:7F:52:4D:4C:E9:0B
Authority key identifier: D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59
Certificate issuer: /CN=A91412BC/serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
Certificate serial: EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
Manifest number: E6
Signing time: Thu 23 Jul 2026 08:13:01 +0000
Manifest this update: Thu 23 Jul 2026 08:13:00 +0000
Manifest next update: Thu 30 Jul 2026 08:13:00 +0000
Files and hashes: 1: 0wlAzG8MECS4QLu309gBJjYGylk.crl (hash: 3C3ThXZ+dlnwtvb8NEtBqtIiTQP34fsexN4OT7sin0o=)
2: 936B147E248A11F0AD4B1179C4F9AE02.roa (hash: LyQfyLurnqqH+WScrTsxG9TtblSEPenqHyPotX69udU=)
3: 92F3063C248A11F0AD4B1179C4F9AE02.roa (hash: snLyJB1mtilsonSg8bolW4tfoO6cxLckhLrYHgEKQiQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl
rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91412BC, serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
Validity
Not Before: Jul 23 08:13:00 2026 GMT
Not After : Jul 30 08:13:00 2026 GMT
Subject: CN=6a61cd0c-7895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cb:f8:c9:fa:2f:aa:7e:37:d6:5a:cc:c6:3b:
6e:1a:f4:da:b4:24:a2:d6:f6:d4:76:ee:c8:78:d8:
52:10:97:13:8e:77:2d:2a:12:2f:96:02:60:c3:48:
3b:28:c1:cb:2c:5d:79:2f:b3:79:d5:1e:04:35:16:
5f:a2:d1:5b:e2:14:ae:74:f5:4e:56:8f:18:26:ea:
70:65:e2:46:a9:36:2a:35:18:00:6a:5a:42:50:c9:
58:06:9b:65:9c:fe:b7:db:69:35:d2:d8:f3:3f:98:
55:13:86:3b:36:36:e7:88:de:41:3e:9c:88:d5:be:
05:49:7f:01:a6:01:ab:a6:0f:a0:10:44:56:78:0e:
4b:f1:98:0c:4d:c8:1e:63:29:f7:db:24:56:e3:ab:
1b:7f:28:ee:a7:2e:c3:13:65:de:bd:0d:db:4c:7d:
64:a5:3d:ec:a5:46:5e:5a:e1:91:e2:82:d4:5a:3c:
c9:44:32:e5:f3:cf:b4:bf:80:2e:65:ce:f1:c5:db:
de:8a:ce:bb:a9:48:b0:ef:65:07:68:d3:30:63:98:
d8:fb:e4:b6:9a:ac:b1:0b:b9:3d:5d:75:d7:bb:77:
22:45:c4:72:cf:cb:d9:57:e1:30:b1:05:21:6a:d0:
38:1e:25:f4:e8:e9:b9:de:7a:36:17:6e:9b:e3:34:
cf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1F:E2:D2:03:D2:C8:9D:F0:B3:7F:23:21:AC:7F:52:4D:4C:E9:0B
X509v3 Authority Key Identifier:
keyid:D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:8a:91:da:1f:c3:4e:e3:dd:00:36:7e:7c:39:ef:bf:9a:0c:
19:5f:db:92:9f:f3:9b:28:55:fd:31:ff:f9:3b:fa:b0:3e:92:
91:83:d3:69:cb:fd:c7:a5:86:60:73:0d:25:ba:e0:65:df:a2:
b8:cc:f2:6d:20:03:1e:76:2e:70:d8:ef:fe:3e:a2:fe:a5:ea:
32:22:af:71:e2:8f:60:df:14:91:14:67:18:53:66:a5:40:71:
19:91:9a:07:17:67:eb:00:c0:a7:45:99:59:dc:50:85:ce:eb:
9f:92:3b:32:2c:15:31:d7:f0:11:ef:7f:d4:9e:66:3a:2f:95:
e7:20:f2:87:79:1d:92:41:96:7e:53:6a:eb:41:9e:e6:c9:94:
df:a8:c5:f4:04:59:f2:83:66:8f:2a:bb:d5:a8:d2:c7:ed:fe:
90:74:b8:9e:41:9f:39:3a:17:ea:1e:d2:05:70:bd:f6:7d:6d:
c2:af:71:74:cd:b3:d2:22:cd:b7:ef:49:6e:a5:a8:bf:2a:2c:
bf:19:8b:c2:2d:fb:6c:24:40:45:04:00:7c:07:f7:8e:06:6c:
de:5a:fc:cf:7d:20:fb:b8:f0:10:62:53:19:86:46:21:57:eb:
c4:41:af:bc:fe:3c:34:43:57:06:4a:e1:f2:cc:95:82:3a:a6:
0e:a7:59:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDEyQkMxMTAvBgNVBAUTKEQzMDk0MENDNkYwQzEwMjRCODQwQkJCN0QzRDgwMTI2
MzYwNkNBNTkwHhcNMjYwNzIzMDgxMzAwWhcNMjYwNzMwMDgxMzAwWjAYMRYwFAYD
VQQDEw02YTYxY2QwYy03ODk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0cv4yfovqn431lrMxjtuGvTatCSi1vbUdu7IeNhSEJcTjnctKhIvlgJgw0g7
KMHLLF15L7N51R4ENRZfotFb4hSudPVOVo8YJupwZeJGqTYqNRgAalpCUMlYBptl
nP6322k10tjzP5hVE4Y7NjbniN5BPpyI1b4FSX8BpgGrpg+gEERWeA5L8ZgMTcge
Yyn32yRW46sbfyjupy7DE2XevQ3bTH1kpT3spUZeWuGR4oLUWjzJRDLl88+0v4Au
Zc7xxdveis67qUiw72UHaNMwY5jY++S2mqyxC7k9XXXXu3ciRcRyz8vZV+EwsQUh
atA4HiX06Om53no2F26b4zTP4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ4f4tID
0sid8LN/IyGsf1JNTOkLMB8GA1UdIwQYMBaAFNMJQMxvDBAkuEC7t9PYASY2BspZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTJCQy8yMUE5NTMxNDI0
OEExMUYwOTk4NkQwNzdDNEY5QUUwMi8wd2xBekc4TUVDUzRRTHUzMDlnQkpqWUd5
bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzB3bEF6RzhNRUNTNFFMdTMwOWdCSmpZR3lsay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MTJCQy8yMUE5NTMxNDI0OEExMUYwOTk4NkQwNzdDNEY5QUUwMi8wd2xBekc4TUVD
UzRRTHUzMDlnQkpqWUd5bGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALIqR2h/DTuPdADZ+fDnvv5oMGV/bkp/zmyhV/TH/+Tv6sD6SkYPTacv9x6WG
YHMNJbrgZd+iuMzybSADHnYucNjv/j6i/qXqMiKvceKPYN8UkRRnGFNmpUBxGZGa
Bxdn6wDAp0WZWdxQhc7rn5I7MiwVMdfwEe9/1J5mOi+V5yDyh3kdkkGWflNq60Ge
5smU36jF9ARZ8oNmjyq71ajSx+3+kHS4nkGfOToX6h7SBXC99n1twq9xdM2z0iLN
t+9JbqWovyosvxmLwi37bCRARQQAfAf3jgZs3lr8z30g+7jwEGJTGYZGIVfrxEGv
vP48NENXBkrh8syVgjqmDqdZrA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:23:40 2026 by rpki-client