
$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
File: 6Ihh_0pFOAJnqBtY-pnkia0AG70.mft (raw, json)
Hash identifier: jfZVB4PTGlkYpUR84bJJzqUBKuvztbcjXGW8LbMVmR0=
Subject key identifier: 89:56:70:23:75:F8:B7:BB:10:0A:64:31:7E:EC:17:23:A7:B6:1A:D2
Authority key identifier: E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD
Certificate issuer: /CN=A918ACB2/serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD
Certificate serial: 01F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
Manifest number: 01DF
Signing time: Thu 23 Jul 2026 04:57:40 +0000
Manifest this update: Thu 23 Jul 2026 04:57:39 +0000
Manifest next update: Thu 30 Jul 2026 04:57:39 +0000
Files and hashes: 1: 6Ihh_0pFOAJnqBtY-pnkia0AG70.crl (hash: FC/qZcms3YUTrcO4ZpTIcVdukvCDFH6K88xnGbPZhV0=)
2: BD1A38D4984B11EFB342C220C4F9AE02.roa (hash: ENHhkrk8BCTpwWr4aooyXoOdIvkQ+fMj1H+Xu4jYjcE=)
3: B66B434EBCE011EE98AEB646C4F9AE02.roa (hash: GFImaBIJDxKMIRAiFX2CXsx2x2WQvz0QE3N7btck8OU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl
rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 496 (0x1f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918ACB2, serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD
Validity
Not Before: Jul 23 04:57:39 2026 GMT
Not After : Jul 30 04:57:39 2026 GMT
Subject: CN=6a619f44-7232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:82:31:ea:46:d8:aa:e7:44:1c:44:4f:93:
7b:e2:e5:c5:47:40:d2:26:77:e6:f5:fa:d3:7d:c6:
e4:38:1b:71:3b:26:9c:de:db:b2:28:c2:32:48:1e:
7a:ac:b9:ed:c1:08:ce:12:99:9f:1a:61:bc:6a:6e:
a9:18:af:09:11:52:eb:1d:dd:d8:90:9b:f8:90:63:
9f:1e:6f:5a:a8:72:6e:34:3c:4a:6e:93:4f:f2:8d:
3f:cb:50:44:f5:bb:96:d1:f8:db:f4:17:21:57:31:
8c:80:0d:17:80:36:f8:9d:c7:c1:f0:05:8e:9d:b7:
7e:26:d6:6a:21:07:0f:80:59:d6:f9:d5:3a:62:59:
74:59:5a:a6:19:d7:3e:da:a2:e4:ad:87:a6:b5:45:
81:09:6d:d3:97:fd:2c:b1:11:23:2c:57:f9:42:4f:
65:73:7b:0d:11:01:77:48:d6:e1:4c:d7:b1:9e:f8:
a9:db:64:24:9c:a4:22:32:0b:52:4c:1c:5e:b6:4e:
a0:9c:43:cf:52:7c:42:93:69:5f:ac:40:b6:82:4b:
1b:10:38:af:6d:0e:b0:1d:29:3d:c7:cd:08:fb:6d:
38:76:36:14:18:3a:e5:cc:08:44:9c:b9:d5:8f:e8:
4b:e6:68:c4:e5:07:95:70:17:20:c1:79:ff:0c:11:
80:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:56:70:23:75:F8:B7:BB:10:0A:64:31:7E:EC:17:23:A7:B6:1A:D2
X509v3 Authority Key Identifier:
keyid:E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:61:3b:a3:ee:1a:95:94:96:aa:8a:83:53:f7:c5:48:04:78:
2f:c3:53:0e:ef:ce:bf:59:2a:a7:89:bc:b3:36:ca:94:dc:4b:
ea:85:be:d5:97:bb:04:c2:5b:73:5c:e1:44:9a:3f:a7:fb:20:
c1:14:6f:a7:e4:96:66:53:51:32:66:15:4b:a6:41:1c:d2:ec:
cc:87:af:6e:bd:4d:68:ba:05:c6:b4:34:ab:d4:17:f9:81:c9:
6c:a5:56:f1:8e:36:6d:c9:d3:a7:aa:fc:d8:9b:e6:1e:3b:dc:
5f:41:cd:39:25:78:ba:85:57:98:d4:6f:7c:08:cd:f8:bc:f8:
bd:a2:bb:b3:06:67:af:71:3d:8d:ad:8f:65:15:d5:e0:ff:12:
2e:47:63:80:09:47:6a:ee:da:4a:c0:bb:76:5e:71:a2:f8:f2:
8a:8d:10:b0:b2:e6:6e:6d:89:7f:d7:6e:76:2e:d4:62:83:4e:
ba:b8:55:c5:b5:30:c3:65:97:51:2f:68:12:f8:a1:52:fe:f0:
4b:0e:28:45:0b:64:43:1a:30:5f:23:1e:6d:05:c8:a6:5e:4e:
77:a7:9f:c0:ce:d7:01:96:d4:1a:4c:3c:80:79:c3:63:aa:7f:
d6:d4:a6:ad:9e:d2:1b:e4:ba:e8:5c:dd:8a:53:d0:29:c0:ca:
89:ee:c2:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEFDQjIxMTAvBgNVBAUTKEU4ODg2MUZGNEE0NTM4MDI2N0E4MUI1OEZBOTlFNDg5
QUQwMDFCQkQwHhcNMjYwNzIzMDQ1NzM5WhcNMjYwNzMwMDQ1NzM5WjAYMRYwFAYD
VQQDEw02YTYxOWY0NC03MjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvEeCMepG2KrnRBxET5N74uXFR0DSJnfm9frTfcbkOBtxOyac3tuyKMIySB56
rLntwQjOEpmfGmG8am6pGK8JEVLrHd3YkJv4kGOfHm9aqHJuNDxKbpNP8o0/y1BE
9buW0fjb9BchVzGMgA0XgDb4ncfB8AWOnbd+JtZqIQcPgFnW+dU6Yll0WVqmGdc+
2qLkrYemtUWBCW3Tl/0ssREjLFf5Qk9lc3sNEQF3SNbhTNexnvip22QknKQiMgtS
TBxetk6gnEPPUnxCk2lfrEC2gksbEDivbQ6wHSk9x80I+204djYUGDrlzAhEnLnV
j+hL5mjE5QeVcBcgwXn/DBGA5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIlWcCN1
+Le7EApkMX7sFyOnthrSMB8GA1UdIwQYMBaAFOiIYf9KRTgCZ6gbWPqZ5ImtABu9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUNCMi85RkU3NjBBNkI4
M0MxMUVFODc0MTkwMkVDNEY5QUUwMi82SWhoXzBwRk9BSm5xQnRZLXBua2lhMEFH
NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZJaGhfMHBGT0FKbnFCdFktcG5raWEwQUc3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QUNCMi85RkU3NjBBNkI4M0MxMUVFODc0MTkwMkVDNEY5QUUwMi82SWhoXzBwRk9B
Sm5xQnRZLXBua2lhMEFHNzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMWE7o+4alZSWqoqDU/fFSAR4L8NTDu/Ov1kqp4m8szbKlNxL6oW+1Ze7BMJb
c1zhRJo/p/sgwRRvp+SWZlNRMmYVS6ZBHNLszIevbr1NaLoFxrQ0q9QX+YHJbKVW
8Y42bcnTp6r82JvmHjvcX0HNOSV4uoVXmNRvfAjN+Lz4vaK7swZnr3E9ja2PZRXV
4P8SLkdjgAlHau7aSsC7dl5xovjyio0QsLLmbm2Jf9dudi7UYoNOurhVxbUww2WX
US9oEvihUv7wSw4oRQtkQxowXyMebQXIpl5Od6efwM7XAZbUGkw8gHnDY6p/1tSm
rZ7SG+S66FzdilPQKcDKie7CNg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:24:12 2026 by rpki-client