
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
File: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft (raw, json)
Hash identifier: iEWrv3YkekGk9eEeVAn6pgTFwZim7AUd4irK+VTNPv0=
Subject key identifier: 17:9E:82:DB:8A:A0:28:74:32:DB:9B:44:0F:6E:5D:71:F2:93:46:F7
Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14
Certificate issuer: /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
Certificate serial: 0B70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
Manifest number: 0B48
Signing time: Wed 22 Jul 2026 19:36:36 +0000
Manifest this update: Wed 22 Jul 2026 19:36:36 +0000
Manifest next update: Wed 29 Jul 2026 19:36:36 +0000
Files and hashes: 1: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl (hash: 5bvkke+twHNIpT4RwdPa9mbR/rv9aFOFq8LtdXzvPBw=)
2: BE633CD283A611EE804BB319C4F9AE02.roa (hash: VEGEjvA8mXlTYgeX41lw6Rhiexaef4whXcV7cTx74tM=)
3: 8AD0E57C8FE311EB89767C78C4F9AE02.roa (hash: 5OKWpLiITpzC82N35iOhZbsAzgBXSVM9wxMVAwNfKSI=)
4: ACFA076483A611EE9C62DE0CC4F9AE02.roa (hash: bmegegPDxR1urUoWVZTcpCbAwDOttLwteVNluF5nkEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl
rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:36:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2928 (0xb70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CBD7, serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
Validity
Not Before: Jul 22 19:36:36 2026 GMT
Not After : Jul 29 19:36:36 2026 GMT
Subject: CN=6a611bc4-ecd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:f5:e9:3e:ce:21:f6:5b:06:43:7d:4a:b9:
99:82:b3:73:c5:d7:5f:96:a0:0c:48:17:b0:c1:bc:
19:12:e9:38:75:7e:69:fd:c4:66:d4:b9:a5:4a:b7:
73:25:3d:ca:77:aa:8d:a0:ed:02:7d:e9:de:24:f5:
24:22:85:c7:47:77:81:1a:93:b4:d8:1f:63:39:c1:
76:07:f5:71:12:1b:80:6f:8d:fb:ba:51:0f:13:67:
8c:84:2e:35:43:d3:b3:6f:c2:0c:55:fc:9f:df:ec:
2a:ab:ea:b3:7f:5f:b1:91:e9:fb:67:3f:74:93:88:
3d:16:5b:53:06:ab:76:8f:f3:d8:f0:05:20:5e:6f:
0e:1c:db:35:fb:b4:d2:54:c8:b4:d7:7b:6c:b3:ad:
24:0a:69:72:28:ef:51:76:2e:21:eb:e6:9c:10:06:
bc:67:de:ee:33:90:9c:b6:52:8d:63:b3:43:fd:60:
39:4e:91:00:20:09:73:6d:fd:68:d5:79:70:52:f4:
06:c4:49:fe:0b:4d:1c:57:32:9e:42:2a:db:3c:da:
5d:70:28:04:c0:05:ba:0e:d0:56:bd:06:b2:1c:36:
ab:42:55:69:f4:5f:06:23:a6:25:f0:d4:5d:10:c5:
68:ac:a8:39:b3:79:36:2f:24:4c:81:f7:fb:cd:f3:
69:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9E:82:DB:8A:A0:28:74:32:DB:9B:44:0F:6E:5D:71:F2:93:46:F7
X509v3 Authority Key Identifier:
keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9e:b1:c5:f3:55:36:fd:77:3f:58:aa:b4:ac:a7:46:bc:65:
33:85:32:44:87:5b:51:85:65:85:96:10:b4:3a:47:1a:84:97:
79:f0:a1:53:db:45:b3:fd:42:d8:d4:aa:53:19:97:58:b3:a6:
2c:f7:d6:47:d0:ec:60:bb:4c:af:34:80:96:f8:1f:20:55:e5:
ee:de:9b:00:ea:56:40:dc:6c:55:4d:fe:2a:08:a6:52:12:2d:
1c:74:82:9d:03:f9:88:de:f4:17:cf:b7:a3:80:9b:45:c2:56:
03:8b:d6:db:24:1d:93:f7:3b:45:fb:fc:c1:fc:a2:62:70:81:
35:7a:e2:6b:99:f2:57:ba:86:a3:d2:86:ab:5b:ad:51:20:13:
d6:0f:6e:5d:8e:5e:e8:4c:17:b1:d2:5c:88:be:15:a5:8c:ef:
77:b0:35:91:78:a8:e8:51:4b:15:77:61:c1:81:87:34:41:9d:
ba:34:33:8b:d6:01:0f:4e:39:41:c6:af:b1:29:8e:db:2c:f9:
1b:3b:2b:fb:3c:92:85:5a:e3:0c:24:fb:ec:d4:88:4f:a6:8f:
bc:0f:cd:16:1f:b0:d3:6b:7a:c8:4b:47:5c:4f:c6:00:06:b4:
47:75:4c:f8:bf:b8:f3:4f:b2:88:f6:7c:6a:2b:b6:01:c9:7f:
1d:bc:e1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:08:39 2026 by rpki-client