
$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
File: 6zyPJLutyUE0hx1uX9C3xYtJ08k.mft (raw, json)
Hash identifier: 7+23hlvv3lkkuQzY+WcvZPzXlESIAE8A1p6zHTIvQ9Q=
Subject key identifier: FE:8B:A6:DB:61:8C:EC:A3:93:AB:4C:54:30:47:96:65:50:18:83:A5
Authority key identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
Certificate issuer: /CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Certificate serial: 018B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
Manifest number: 0175
Signing time: Thu 23 Jul 2026 06:23:18 +0000
Manifest this update: Thu 23 Jul 2026 06:23:17 +0000
Manifest next update: Thu 30 Jul 2026 06:23:17 +0000
Files and hashes: 1: 6zyPJLutyUE0hx1uX9C3xYtJ08k.crl (hash: ky0KNqQAeQsJc+6Jlt4lOq8NSWI2QPZs7ed9ekOtjNI=)
2: 78C65D926B0B11EFBFE25881C4F9AE02.roa (hash: 0oj6DB6AcAI80O6cWTUs9uNP0wv1u3q24kvlcmDmd+0=)
3: CCACFBE2457411F1A79BF008B4833773.roa (hash: 69kJO7SbSIclkQPTtHUHDZya4cNb1UG7+lT2HQ2fYMc=)
4: CD5D6E32457411F1A79BF008B4833773.roa (hash: ov2cn0hdjIaDQDbU24O0PtbCpiSn8/k/CW+RbhycUxs=)
5: 866314EE5FCC11EF8416052EC4F9AE02.roa (hash: GLcX1wFp7o9QRrChsXnCvjX1Ko/I4of/iC0AV3GlULs=)
6: 7ECAB97A5F3711EFA2A15F6DC4F9AE02.roa (hash: cwdVnCmvvqxvWzMgTGL5Jud7cZIF7lHoUd7q8Ic9ySU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395 (0x18b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91883D3, serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Validity
Not Before: Jul 23 06:23:17 2026 GMT
Not After : Jul 30 06:23:17 2026 GMT
Subject: CN=6a61b356-3f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dd:49:65:86:75:f9:64:3e:15:8f:ff:66:33:
2f:a8:5f:9c:49:fd:ed:9c:5a:b9:bc:70:34:32:60:
41:ae:12:0d:74:73:a7:95:b7:32:d7:51:ee:86:73:
4b:34:b8:65:a6:a2:ac:47:ad:45:c4:19:c5:f1:85:
eb:8f:fd:35:c5:e1:13:6a:4d:1a:42:4f:cc:8c:b1:
40:3f:8a:c3:c6:f7:ad:17:25:71:5c:03:a2:a2:7c:
ad:f1:5d:6f:ce:97:e9:e7:e2:2b:ba:d4:37:79:65:
e4:ce:37:c5:0f:dc:d5:3c:37:b8:33:7b:3b:16:70:
bd:e1:dd:c5:0e:f1:61:f7:3a:ac:69:4e:0e:f7:a8:
a1:7d:dd:2b:67:d1:c2:b9:d6:7a:4f:f5:99:ed:93:
f8:ba:4b:36:56:f2:5e:4d:9f:53:09:82:64:8c:cf:
b4:67:a5:f1:f7:b7:c6:e2:96:bd:bb:37:6e:1a:a4:
89:26:71:96:37:a4:fc:e5:1d:31:a1:36:39:90:22:
8c:61:84:78:04:4d:3d:af:25:1b:0c:0a:4e:6a:f5:
37:54:86:60:4f:c0:e8:bf:2b:3e:74:35:4d:8d:af:
97:ef:ee:38:b3:ba:96:5e:5b:78:5d:40:da:a2:f8:
bb:8d:26:cf:4f:9e:bf:23:ea:61:0a:ba:d2:5e:e2:
98:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8B:A6:DB:61:8C:EC:A3:93:AB:4C:54:30:47:96:65:50:18:83:A5
X509v3 Authority Key Identifier:
keyid:EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f2:8d:1f:14:ce:83:92:7a:34:5f:bf:f0:c0:d8:0a:96:8a:
d9:2c:35:5d:4d:45:a7:d6:f2:53:92:80:b0:94:20:bd:70:1b:
2e:e3:f5:d3:bd:d2:c0:dd:b3:a5:65:23:53:d4:f9:25:02:7d:
20:1f:26:ba:3f:43:62:2f:cb:54:e7:75:44:74:ed:ec:43:22:
39:fb:18:89:27:bf:01:2c:d7:d2:7a:dd:d0:aa:7f:d5:45:de:
1b:6f:07:3d:dc:ec:cb:fe:77:a9:c8:d9:4d:31:c6:62:7e:05:
79:42:c7:5e:79:06:40:91:01:c1:2d:23:95:c2:ab:29:50:e0:
57:1d:73:b0:68:1f:67:5b:61:91:d9:2a:e7:7a:4a:b8:ba:f2:
a3:56:54:a9:85:26:c6:e6:2d:2f:22:97:fa:16:34:e4:cd:da:
df:43:7c:75:0f:e4:73:a0:3c:6e:57:eb:43:c9:0f:a9:79:a0:
ca:a5:a2:3e:71:b5:d3:e6:d3:b6:2c:6c:56:56:0d:70:8d:aa:
a7:64:50:c0:19:32:dc:f5:cf:45:24:e0:1f:bd:dd:38:ee:46:
5f:c2:ee:28:a7:1f:8d:a1:01:42:ad:1b:c9:34:f8:32:82:79:
40:19:f7:c2:e1:04:5a:67:6c:4a:38:3f:b8:bd:6f:31:c0:f2:
f0:22:e7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:23:24 2026 by rpki-client