
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
File: 6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft (raw, json)
Hash identifier: 65vlpatw6Jd+hVkSaKe4EGuZgcJQvCpjl0bfdGPT0hk=
Subject key identifier: 8E:25:FF:1C:9D:63:48:BD:13:AD:83:1A:2D:63:4D:28:D9:73:DC:29
Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
Certificate issuer: /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Certificate serial: 0C36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
Manifest number: 0BF7
Signing time: Wed 22 Jul 2026 19:14:06 +0000
Manifest this update: Wed 22 Jul 2026 19:14:05 +0000
Manifest next update: Wed 29 Jul 2026 19:14:05 +0000
Files and hashes: 1: 6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl (hash: ZGZ6Rpb6JAb+XYk/aLJkdPXB9yqXeVlPrzGm7vxupfo=)
2: 83B1E1429AAB11F0AFE54B2AC4F9AE02.roa (hash: qD1cITJ7GAVqG9RAWVarhkOzSRkX7RbWYic+rFSQm5U=)
3: 73E164B0F78311F08252E67A4C6F56BC.roa (hash: G+ObB5wiY0RZq1BlygyBu8U8dT9wJLTIM9sck3J/+9U=)
4: 6B3307CE4D8411EFBAD45B86C4F9AE02.roa (hash: zhvQ2OwFKuDGlesdZErwFsvm54e1zw6iRxJQhNg3+u4=)
5: 46D0A6A8BDDA11F086EB9613C4F9AE02.roa (hash: huORanbeeLTQyC8vfHVhR2qi15Mp9g0ge9RJFONvZrM=)
6: 380CEAB05FEB11F1BD52DAD67947A888.roa (hash: 5XIm4G/6TbXOTinq6DGZpVQ7bsZ0tjO6ogKrtlf69JU=)
7: 84210E0A9AAB11F0AFE54B2AC4F9AE02.roa (hash: dGkZlvZrZzzmUrpdcX6PjNjrHOBIi+bf0tGrQjJ9ueg=)
8: 1FCC64AC719511F090F7F83BC4F9AE02.roa (hash: HDz+1GzuPpUTidanGB4G4ykVBkwdTS/Q6fpag6ihvfc=)
9: D5955AB6975511EF94255C5EC4F9AE02.roa (hash: JVd2FG3UkH9H5B617YmFMPIf/lKVb8TVBIpvLq/w07A=)
10: 6DADCA1C2F1C11EDA3E29B09C4F9AE02.roa (hash: IxMPHfcO4FMJHXeamW9Ntxik/OpowXLrenedL/WZ9v0=)
11: 4F153D60719511F0A684963CC4F9AE02.roa (hash: f1UfIHsu2w3uQBtlhqphr4jX3JsvBAbFFTKeDdMIPEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:14:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3126 (0xc36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Validity
Not Before: Jul 22 19:14:05 2026 GMT
Not After : Jul 29 19:14:05 2026 GMT
Subject: CN=6a61167e-74b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:41:9c:94:de:ce:b2:7e:54:0c:b9:54:1c:c3:
9c:62:cc:42:2d:07:a2:3f:55:6d:60:fd:50:6a:14:
25:37:6e:25:b4:c3:d4:33:a0:db:21:63:08:c1:38:
75:72:39:5f:a1:38:87:6b:87:49:18:7c:9b:47:fd:
44:3e:9b:42:4b:5e:4d:d6:9d:7e:c5:99:24:16:43:
f2:78:78:56:37:b1:3a:dc:de:f9:36:48:29:5a:38:
da:c7:ed:e8:18:97:09:37:28:48:88:19:f0:73:53:
6d:36:37:78:23:46:aa:79:e5:6d:d1:10:d0:ce:46:
bf:4e:f2:a8:e3:89:e3:04:b5:0c:98:c2:03:70:62:
86:16:a5:8b:f5:ad:6c:80:c6:d1:11:8d:51:74:d0:
b6:11:be:ed:d5:e1:b6:fb:c7:ce:0b:fe:54:8b:5c:
f8:73:88:1f:f9:15:91:5b:6c:6d:60:48:71:f7:7c:
41:0d:82:a9:d6:6c:ce:ea:8b:4d:76:ab:45:9a:8a:
7a:4d:2e:87:8e:98:31:1e:cc:52:03:cb:f5:f8:e3:
b0:12:62:5b:7a:b7:f5:73:57:2d:ed:ea:ac:5f:7e:
a3:23:8e:ba:71:46:54:a3:c6:dc:99:7f:35:2e:15:
de:4d:51:e9:48:f1:2f:f2:cc:63:6b:4a:39:0c:6b:
97:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:25:FF:1C:9D:63:48:BD:13:AD:83:1A:2D:63:4D:28:D9:73:DC:29
X509v3 Authority Key Identifier:
keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:10:ed:75:2e:84:e8:7c:3d:f9:e5:05:8e:22:2b:23:e3:1b:
6b:b5:11:52:fc:0e:24:a8:81:15:fd:30:7e:c4:7b:6e:03:14:
6f:30:65:a0:50:a7:ef:bc:b7:df:54:25:70:6f:28:fd:92:ba:
f4:91:dd:10:67:cc:3c:73:96:e3:43:a0:70:26:3c:b2:ae:58:
2e:f6:b3:61:7a:de:29:dd:db:22:c0:47:65:27:79:46:8d:dc:
a3:53:75:31:d6:94:73:8c:f7:df:3c:01:9f:71:56:3e:62:bb:
36:cc:4e:70:f7:c2:c1:a0:6c:75:ba:49:e8:70:d6:17:93:84:
aa:3b:5d:7f:c4:e7:e4:5b:cf:4a:bd:1c:12:df:51:6c:f9:88:
2b:86:4c:7e:86:de:a0:4d:6b:d2:60:2b:b0:06:cf:a2:16:16:
fc:57:1e:0f:61:b5:73:45:1e:01:23:1c:1f:ac:da:aa:5c:46:
c0:ba:82:12:40:8f:c1:13:74:ca:c9:79:a4:d4:0b:5d:39:b8:
55:3f:3e:93:53:cf:fc:db:de:d8:18:b6:65:96:2a:c5:2c:c1:
de:d7:c4:19:e3:5a:6a:6c:81:1e:2d:57:a7:cc:d6:b1:72:04:
d6:46:f7:76:d2:e6:d3:49:20:97:c7:48:e7:db:55:cc:7c:cd:
8a:56:c1:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTIzNTkxMTAvBgNVBAUTKEU5OTFBNUEyREQ5RDFGMkEyNDNERjZBQTI0QjlGNTBF
MUNCOEZFRTUwHhcNMjYwNzIyMTkxNDA1WhcNMjYwNzI5MTkxNDA1WjAYMRYwFAYD
VQQDEw02YTYxMTY3ZS03NGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz0GclN7Osn5UDLlUHMOcYsxCLQeiP1VtYP1QahQlN24ltMPUM6DbIWMIwTh1
cjlfoTiHa4dJGHybR/1EPptCS15N1p1+xZkkFkPyeHhWN7E63N75NkgpWjjax+3o
GJcJNyhIiBnwc1NtNjd4I0aqeeVt0RDQzka/TvKo44njBLUMmMIDcGKGFqWL9a1s
gMbREY1RdNC2Eb7t1eG2+8fOC/5Ui1z4c4gf+RWRW2xtYEhx93xBDYKp1mzO6otN
dqtFmop6TS6HjpgxHsxSA8v1+OOwEmJberf1c1ct7eqsX36jI466cUZUo8bcmX81
LhXeTVHpSPEv8sxja0o5DGuXgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI4l/xyd
Y0i9E62DGi1jTSjZc9wpMB8GA1UdIwQYMBaAFOmRpaLdnR8qJD32qiS59Q4cuP7l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjM1OS9GQzI5OERFQTQx
NzAxMUVBOThERTY1NkFDNEY5QUUwMi82Wkdsb3QyZEh5b2tQZmFxSkxuMURoeTRf
dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZaR2xvdDJkSHlva1BmYXFKTG4xRGh5NF91VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MjM1OS9GQzI5OERFQTQxNzAxMUVBOThERTY1NkFDNEY5QUUwMi82Wkdsb3QyZEh5
b2tQZmFxSkxuMURoeTRfdVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZxDtdS6E6Hw9+eUFjiIrI+Mba7URUvwOJKiBFf0wfsR7bgMUbzBloFCn77y3
31QlcG8o/ZK69JHdEGfMPHOW40OgcCY8sq5YLvazYXreKd3bIsBHZSd5Ro3co1N1
MdaUc4z33zwBn3FWPmK7NsxOcPfCwaBsdbpJ6HDWF5OEqjtdf8Tn5FvPSr0cEt9R
bPmIK4ZMfobeoE1r0mArsAbPohYW/FceD2G1c0UeASMcH6zaqlxGwLqCEkCPwRN0
ysl5pNQLXTm4VT8+k1PP/Nve2Bi2ZZYqxSzB3tfEGeNaamyBHi1Xp8zWsXIE1kb3
dtLm00kgl8dI59tVzHzNilbBJw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:02:43 2026 by rpki-client