
$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
File: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json)
Hash identifier: di1oIcMVrN5zpTgx5CNtN/LWO726OgegqBPTO1BfdMg=
Subject key identifier: 14:47:C1:87:78:29:C5:28:60:B9:75:31:21:F6:2B:B0:B0:2E:8C:2A
Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8
Certificate issuer: /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8
Certificate serial: 356B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
Manifest number: 3564
Signing time: Wed 22 Jul 2026 14:52:07 +0000
Manifest this update: Wed 22 Jul 2026 14:52:06 +0000
Manifest next update: Wed 29 Jul 2026 14:52:06 +0000
Files and hashes: 1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: VDeVc7Fh9Og+vgVb99YHFaVHw3BRQIQHzoRbwE3I4e4=)
2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: Cs9JKjCuX2CcXJQrUV7cbcqrEj31WEsSJAImJkXjuRI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl
rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:52:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13675 (0x356b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91889B6, serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8
Validity
Not Before: Jul 22 14:52:06 2026 GMT
Not After : Jul 29 14:52:06 2026 GMT
Subject: CN=6a60d917-1bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:16:a1:cd:14:9a:50:06:bf:c4:cc:bc:d0:06:
af:f1:84:bd:e0:2e:e8:dc:c3:03:aa:73:4b:6c:b4:
d7:c9:d4:43:31:4a:18:b2:55:51:35:6e:31:e8:d0:
e3:3a:1b:ca:4d:b0:09:e7:52:fc:d6:74:38:ac:3f:
e5:e7:84:be:9a:68:9b:2d:ae:0d:84:79:85:a0:d6:
f0:97:5d:2a:29:30:43:6b:2e:52:b7:ff:17:14:b0:
4f:dd:bb:ca:c0:40:74:70:c7:e0:1e:2a:0a:f0:6c:
0e:3d:b6:bf:2e:3c:dc:47:00:27:ee:54:70:27:e5:
05:9a:0c:47:85:b3:ff:85:ba:79:02:1e:00:b5:53:
77:2f:2c:eb:68:45:ac:fa:fa:4c:eb:55:3b:54:bc:
63:a8:08:81:c7:13:09:e3:fa:40:dc:1e:3c:36:31:
a7:3b:b0:e7:71:b7:e9:82:6f:e4:c4:4a:80:b1:8d:
d5:9f:39:b9:ad:32:39:28:b7:9d:d9:eb:7e:e9:1f:
72:7a:95:0d:35:94:5b:56:19:0f:08:77:92:29:7c:
1a:28:50:de:52:64:7d:08:fd:2f:f7:29:dc:be:2a:
c9:6d:14:44:9c:cf:5b:9a:4e:bc:bc:34:45:a6:61:
f6:fc:ab:1a:87:93:6c:c6:b3:1f:85:39:b4:ed:ea:
36:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:47:C1:87:78:29:C5:28:60:B9:75:31:21:F6:2B:B0:B0:2E:8C:2A
X509v3 Authority Key Identifier:
keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:38:2e:99:18:f6:6e:ec:d2:af:e1:4d:54:a2:27:31:d9:86:
c2:ff:83:c0:fb:08:bc:ec:cb:46:2b:1c:59:d9:b4:f6:70:30:
81:4c:63:dd:6c:5b:7a:72:7f:66:7d:4d:ce:df:4f:e0:29:2f:
f8:66:c1:8c:74:75:32:3e:a8:2c:59:22:06:7f:95:39:f3:a9:
5f:d3:49:02:9d:cb:42:b8:d5:bf:4f:d2:c8:cf:39:10:ae:40:
f6:9e:ca:99:bc:8c:dc:d0:21:18:92:f2:0e:05:b2:ef:47:f0:
87:80:39:95:4a:0c:8d:97:94:c1:3f:67:82:bd:37:84:53:67:
54:88:02:ae:0c:f3:f7:8d:60:d7:91:40:70:ef:ba:e6:f4:20:
13:5e:66:54:e1:37:59:34:c8:fe:75:22:29:ea:de:42:1f:a5:
21:be:9d:e8:3b:1e:86:ff:18:c4:56:30:f0:5a:de:18:f7:b5:
93:f8:41:13:e5:62:03:8d:41:0c:f0:fa:90:81:c7:05:d1:ef:
b3:fa:a3:d7:a9:ac:ee:40:93:f9:61:a8:76:b0:79:a3:80:63:
86:a4:f1:1e:22:7e:02:d9:96:94:f2:db:ef:bc:c2:52:7e:34:
13:37:da:ef:e5:5c:8f:c3:c0:be:b6:bb:9e:f6:84:53:f8:a5:
ea:1c:47:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:30:21 2026 by rpki-client