
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
File: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft (raw, json)
Hash identifier: 4ofN7PGhKS4LMEBcqbTNZAaXEXUp2jtQNq6r9li4iW0=
Subject key identifier: 7C:FF:68:74:81:46:BE:E4:C1:A7:88:CA:23:7F:28:38:E2:47:35:F7
Authority key identifier: EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E
Certificate issuer: /CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
Certificate serial: 0B8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
Manifest number: 0B72
Signing time: Wed 22 Jul 2026 19:31:41 +0000
Manifest this update: Wed 22 Jul 2026 19:31:41 +0000
Manifest next update: Wed 29 Jul 2026 19:31:41 +0000
Files and hashes: 1: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl (hash: yxM2il1YOoVEs7PtZ55rk4EmwzZn0DZ2x3zI0a0+Nhw=)
2: 144D1F865F7F11EBB5C08239C4F9AE02.roa (hash: a98jB4MSjv/smFnJ8Lz82VIPKbQpi9CPszl7PwTNJ3k=)
3: 2996029C591611EA86D2A42DC4F9AE02.roa (hash: YoQLzF1Lm5yCnjPw539aGKaVVb5igGFfhZc6/2536gM=)
4: 45A83CC809EE11EBAD92B66BC4F9AE02.roa (hash: zxbNBeuYEf6c+f0pWWpGgn67zb1hnSTjyBGEz1Av9Hk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl
rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2957 (0xb8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154B7E, serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
Validity
Not Before: Jul 22 19:31:41 2026 GMT
Not After : Jul 29 19:31:41 2026 GMT
Subject: CN=6a611a9d-6885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e6:55:8d:4d:1e:18:52:42:19:64:de:7a:e6:
37:35:76:00:3b:6f:72:44:24:40:ba:cd:34:6a:7f:
70:92:0d:32:e0:23:18:f5:5b:e2:b2:55:65:23:43:
71:12:94:37:d7:c7:ff:3b:27:0d:be:47:ca:ec:25:
00:f2:f0:52:e1:17:7a:24:2c:ad:6c:35:a1:88:1e:
16:d7:03:97:e0:5a:7e:2a:60:d4:7f:10:fe:36:93:
ed:60:87:8b:97:b7:59:56:15:10:72:db:33:cc:db:
51:06:e8:d4:03:ff:10:93:55:46:0e:e7:02:d6:a8:
d4:5c:79:af:89:dc:b3:4d:61:12:59:23:2e:0c:92:
cb:5c:77:72:ff:45:23:5a:10:ec:a8:50:58:5e:6a:
86:1a:6f:6b:35:03:a9:d0:5c:81:2f:31:a9:ac:ef:
f7:f3:ab:06:47:9a:55:cf:db:1f:d6:78:36:1b:8f:
f8:3b:b2:13:00:50:46:ea:3a:ec:2c:2d:b9:db:64:
1a:2e:3a:eb:6d:c5:23:21:0e:56:1e:5c:66:a4:c8:
db:15:83:3c:ce:d8:8e:38:93:93:c0:a0:c1:f2:d8:
27:ba:94:9a:0b:3d:10:aa:9d:42:73:03:da:44:90:
98:79:b7:d8:61:28:df:eb:82:c3:dc:06:58:55:cb:
27:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FF:68:74:81:46:BE:E4:C1:A7:88:CA:23:7F:28:38:E2:47:35:F7
X509v3 Authority Key Identifier:
keyid:EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:b5:32:11:96:42:29:23:ea:a7:a2:da:70:ce:58:65:9c:0a:
91:bd:1c:ab:43:c2:f8:6d:82:e4:0a:15:cd:a4:da:c2:8c:68:
22:cd:8e:77:cd:03:a1:88:de:ef:90:32:25:1c:2f:e6:ae:66:
98:99:1a:86:1d:ca:62:1d:24:53:71:d5:9a:93:5f:46:d5:bb:
78:c1:b9:bc:1b:4e:58:6d:1d:e9:9a:87:40:a2:1c:2a:98:2c:
92:f1:99:c0:25:ee:03:e1:00:18:a0:13:9f:38:10:10:cd:7e:
24:fa:d1:4e:2c:c2:4c:36:07:ea:04:45:c1:0b:8c:87:6f:70:
38:7c:f3:50:91:a0:5b:57:c7:bd:c3:04:6d:d6:fd:31:e2:55:
a1:71:3d:d6:8d:1e:fd:34:e3:f7:94:0a:be:98:ad:6d:58:5b:
e5:b0:80:16:63:94:f7:e9:09:d6:e2:05:1b:0a:dc:5e:16:40:
26:4b:37:07:5e:8e:f5:db:79:df:e2:90:e1:ba:db:36:40:25:
e4:ef:fc:1e:fb:71:86:b9:d1:25:f7:81:14:f6:94:bd:5b:b3:
e6:54:3c:25:e4:c0:3c:e9:fb:ee:92:cc:c0:b8:bd:52:1d:23:
7a:9e:86:33:48:ed:30:7e:9f:67:3d:ac:b2:d8:98:43:03:d3:
d5:97:49:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:07:55 2026 by rpki-client