
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
File: 6zyPJLutyUE0hx1uX9C3xYtJ08k.mft (raw, json)
Hash identifier: weNpZBtQEuUavhEq+jxQQvTGFE+B5lwCOc6vYplazV8=
Subject key identifier: D7:B3:17:BF:4B:A8:B2:6B:06:32:0D:E8:8C:24:0A:B4:85:40:36:5B
Authority key identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
Certificate issuer: /CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Certificate serial: 01C2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
Manifest number: 01A4
Signing time: Tue 13 Oct 2026 04:57:15 +0000
Manifest this update: Tue 13 Oct 2026 04:57:14 +0000
Manifest next update: Tue 20 Oct 2026 04:57:14 +0000
Files and hashes: 1: 6zyPJLutyUE0hx1uX9C3xYtJ08k.crl (hash: xG3i6NVKAkpBe0c+5YGfPYI50znP4wiSHQTaR0oswTY=)
2: CD5D6E32457411F1A79BF008B4833773.roa (hash: ov2cn0hdjIaDQDbU24O0PtbCpiSn8/k/CW+RbhycUxs=)
3: 81BEA598A33611F188644B746211F970.roa (hash: 7p7hPXX22tD9ADKMV8Jxjv6Fwd8VTeYKGo4DKCVKza4=)
4: 80B14A70A33611F188644B746211F970.roa (hash: nlY3R/ZMOLyVEcNF52UHT/oYi5mxfkCr24rlMOWjlsE=)
5: 78C65D926B0B11EFBFE25881C4F9AE02.roa (hash: 0oj6DB6AcAI80O6cWTUs9uNP0wv1u3q24kvlcmDmd+0=)
6: CCACFBE2457411F1A79BF008B4833773.roa (hash: 69kJO7SbSIclkQPTtHUHDZya4cNb1UG7+lT2HQ2fYMc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 04:57:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450 (0x1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91883D3, serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Validity
Not Before: Oct 13 04:57:14 2026 GMT
Not After : Oct 20 04:57:14 2026 GMT
Subject: CN=6acdba2b-068b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9c:12:83:4b:24:7e:f7:a6:c1:0e:34:45:8a:
2e:92:39:0c:07:86:0e:2e:cf:0b:52:25:0f:a5:19:
3c:50:f7:dc:eb:60:16:f4:60:ba:cd:a8:3c:5d:4d:
02:6a:51:78:9b:f1:a6:f8:17:ae:33:a2:6a:52:7a:
82:11:80:0a:80:cb:b3:45:a2:14:0a:13:ca:6e:ef:
8b:59:e6:0a:75:cf:7b:55:dd:11:05:05:71:99:a9:
8c:d3:54:c5:d7:84:15:90:9d:ed:0c:bb:63:20:db:
89:61:09:d7:ce:e5:f8:84:6f:70:b6:62:3c:cb:c6:
ca:97:4b:36:78:4e:5e:72:13:ac:60:94:b1:93:16:
ef:a2:3e:22:c1:9e:79:94:08:2d:ce:5c:b3:4c:39:
82:44:ba:b2:90:59:8f:9c:26:f2:39:c8:40:3c:3d:
5c:e7:ad:c7:dc:e1:94:b8:e9:76:2e:8f:78:ef:34:
11:ae:bb:dd:6e:62:23:06:5f:ec:e3:51:10:4f:ea:
72:b0:27:1b:83:3a:fc:c9:7f:22:65:83:c5:40:3f:
94:8f:37:e8:59:ae:fc:05:cf:cf:d4:2e:20:7b:12:
f3:f8:46:5d:c2:73:02:2b:52:c5:b2:7b:8f:ca:4b:
b9:99:16:55:f2:c0:2c:66:5a:8a:e9:7a:fa:fc:5f:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B3:17:BF:4B:A8:B2:6B:06:32:0D:E8:8C:24:0A:B4:85:40:36:5B
X509v3 Authority Key Identifier:
keyid:EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0c:93:54:57:8a:de:4d:ab:67:99:37:0e:a2:26:8f:29:97:
c6:7e:9c:f8:04:3e:71:0a:43:0a:95:15:13:fd:3b:d5:e7:a8:
90:c5:cb:06:dd:c5:64:f7:7a:3c:0f:f1:fc:a4:28:98:45:3a:
72:97:be:1d:52:17:b9:f2:b8:f5:ee:3f:7c:2f:39:44:09:81:
9f:58:1c:85:c6:0c:ec:00:4f:34:9f:78:76:8d:fd:d0:9c:49:
63:a4:2a:74:20:b8:33:25:b5:62:22:09:85:ee:37:fe:fd:0b:
ac:7d:de:41:b1:24:7f:16:a5:02:80:aa:2b:78:1e:ac:19:39:
5e:b3:94:56:34:b6:1f:0e:bf:be:53:b0:3b:22:4f:ab:1e:66:
2c:96:b5:83:86:91:19:26:b1:39:6f:ee:d3:be:7d:03:95:40:
c1:eb:3d:29:1d:65:1d:1d:48:a8:15:6f:8d:07:1d:ef:96:d8:
2b:35:0a:81:3a:48:8b:66:ec:58:a9:67:66:22:ab:12:1f:0d:
5a:1f:b6:44:f4:e7:21:74:21:50:b2:40:f8:99:c9:9c:f9:2f:
d4:ee:a3:e6:a0:d1:4e:cc:aa:2e:67:0d:3d:db:f1:dd:20:6e:
e2:84:c8:6b:52:a9:4e:cb:6a:df:66:4c:68:30:49:bf:d9:7a:
41:07:8e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:14:36 2026 by rpki-client