
$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
File: 6zyPJLutyUE0hx1uX9C3xYtJ08k.mft (raw, json)
Hash identifier: omZnien0VHdVH8svDR0sT+ODdFr2PEfYlLVY9J+ikYI=
Subject key identifier: C4:6B:B8:1D:FF:66:F9:50:14:BA:77:53:D1:8C:E1:58:A8:9D:3B:16
Authority key identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
Certificate issuer: /CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Certificate serial: 0168
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
Manifest number: 0152
Signing time: Wed 13 May 2026 05:19:05 +0000
Manifest this update: Wed 13 May 2026 05:19:04 +0000
Manifest next update: Wed 20 May 2026 05:19:04 +0000
Files and hashes: 1: 6zyPJLutyUE0hx1uX9C3xYtJ08k.crl (hash: 1wh7Z321YwfzLFtDi3AI3YI86cWeImoYLJs5WHiQxf8=)
2: 7ECAB97A5F3711EFA2A15F6DC4F9AE02.roa (hash: cwdVnCmvvqxvWzMgTGL5Jud7cZIF7lHoUd7q8Ic9ySU=)
3: 866314EE5FCC11EF8416052EC4F9AE02.roa (hash: GLcX1wFp7o9QRrChsXnCvjX1Ko/I4of/iC0AV3GlULs=)
4: 78C65D926B0B11EFBFE25881C4F9AE02.roa (hash: 0oj6DB6AcAI80O6cWTUs9uNP0wv1u3q24kvlcmDmd+0=)
5: CCACFBE2457411F1A79BF008B4833773.roa (hash: 69kJO7SbSIclkQPTtHUHDZya4cNb1UG7+lT2HQ2fYMc=)
6: CD5D6E32457411F1A79BF008B4833773.roa (hash: ov2cn0hdjIaDQDbU24O0PtbCpiSn8/k/CW+RbhycUxs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360 (0x168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91883D3, serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Validity
Not Before: May 13 05:19:04 2026 GMT
Not After : May 20 05:19:04 2026 GMT
Subject: CN=6a0409c9-70d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:56:e5:61:84:5a:18:89:0a:f6:69:c0:17:e5:
e8:02:2a:8b:a9:01:90:89:6c:c7:52:c8:67:f3:a7:
e4:bc:7f:97:5c:ab:9a:3d:37:e9:bf:d7:f2:09:f8:
df:ea:40:14:18:22:02:ec:8e:26:ff:8a:22:b9:a4:
4e:34:c5:30:25:51:23:9f:75:04:29:e1:f8:c7:af:
24:e3:62:a2:0e:e3:32:04:9e:13:ed:ee:18:2b:32:
b6:7c:10:4e:a5:11:8e:a8:38:37:84:05:65:93:16:
57:fd:f5:62:be:b6:64:75:f2:43:53:e9:97:5a:b5:
48:c8:c9:1a:35:c0:0e:b5:70:d1:46:14:f4:af:02:
70:97:dc:0f:f9:02:11:7f:42:96:88:90:f4:05:96:
cd:13:7a:07:8f:38:c3:52:70:b2:f0:67:ca:fd:c1:
ab:29:a1:57:bf:df:72:08:1e:aa:ed:53:bf:ed:4a:
5d:27:a7:ca:50:48:f9:d5:df:d2:08:6e:d2:ff:6d:
e0:49:10:80:49:b9:40:a3:e6:5e:75:8d:ee:ec:d6:
86:17:1f:65:91:f7:ed:cb:2b:b0:37:25:4d:ef:60:
43:f0:f0:50:f7:f8:f4:cc:e3:8d:a5:f5:93:fc:c9:
47:c8:2e:c8:0c:78:8a:15:62:b6:81:6c:b7:a1:86:
06:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6B:B8:1D:FF:66:F9:50:14:BA:77:53:D1:8C:E1:58:A8:9D:3B:16
X509v3 Authority Key Identifier:
keyid:EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4e:28:d4:71:22:1f:d8:a3:00:15:23:84:40:0e:38:a0:d2:
ef:39:e4:24:3f:2e:80:ac:d6:f6:1a:7d:5b:2e:a1:e5:fb:d6:
ca:19:f9:eb:ee:56:5d:e9:b7:28:98:7b:2e:1d:6f:28:2b:62:
52:d8:3d:e0:64:51:dc:58:24:eb:20:b8:f7:64:60:af:77:ae:
fe:ce:19:eb:e8:f1:86:49:e0:88:1f:db:22:98:7e:f0:02:f9:
86:08:0a:37:ee:df:8c:1b:51:47:e6:e6:73:1f:4d:2b:f4:f5:
05:70:0c:a3:7e:2c:a2:a2:b4:5d:04:9c:08:86:5a:d0:66:d3:
f6:d9:31:de:c7:96:9d:41:c6:d0:85:57:9b:12:00:59:c3:95:
6b:c7:0f:53:c7:db:69:2e:d9:21:51:6d:4a:93:ef:2d:32:4f:
4a:14:35:2f:35:77:7a:c6:4c:44:42:36:6a:00:b5:e3:92:78:
0c:66:10:3a:fe:00:79:54:22:3a:c3:98:15:a6:2b:e7:52:29:
b7:24:ad:e5:cf:26:54:fd:9d:2b:12:6d:dd:21:66:75:c8:a3:
bf:89:b3:52:d8:24:8f:c2:45:2d:80:61:3a:51:21:10:27:41:
d4:f6:63:77:19:ac:44:0d:52:e5:f6:6f:2a:63:16:9f:63:36:
d9:14:1b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:23:15 2026 by rpki-client