
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
File: 6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft (raw, json)
Hash identifier: Dj6fb5Ph1TBVdeUq2quJ7jyS8xIOqORiUyUjnp0T4iM=
Subject key identifier: 50:48:59:F0:C3:97:7D:52:9B:F1:83:9B:D3:82:82:83:A9:17:29:16
Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
Certificate issuer: /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Certificate serial: 0C10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
Manifest number: 0BD2
Signing time: Tue 12 May 2026 19:01:04 +0000
Manifest this update: Tue 12 May 2026 19:01:04 +0000
Manifest next update: Tue 19 May 2026 19:01:04 +0000
Files and hashes: 1: 6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl (hash: bwhiu7azcnS8NUworf5n214wCbtnKbAMRuS2sL3ZoVs=)
2: D5955AB6975511EF94255C5EC4F9AE02.roa (hash: JVd2FG3UkH9H5B617YmFMPIf/lKVb8TVBIpvLq/w07A=)
3: 6B3307CE4D8411EFBAD45B86C4F9AE02.roa (hash: zhvQ2OwFKuDGlesdZErwFsvm54e1zw6iRxJQhNg3+u4=)
4: 46D0A6A8BDDA11F086EB9613C4F9AE02.roa (hash: huORanbeeLTQyC8vfHVhR2qi15Mp9g0ge9RJFONvZrM=)
5: 4F153D60719511F0A684963CC4F9AE02.roa (hash: f1UfIHsu2w3uQBtlhqphr4jX3JsvBAbFFTKeDdMIPEc=)
6: 83B1E1429AAB11F0AFE54B2AC4F9AE02.roa (hash: qD1cITJ7GAVqG9RAWVarhkOzSRkX7RbWYic+rFSQm5U=)
7: 84210E0A9AAB11F0AFE54B2AC4F9AE02.roa (hash: dGkZlvZrZzzmUrpdcX6PjNjrHOBIi+bf0tGrQjJ9ueg=)
8: 73E164B0F78311F08252E67A4C6F56BC.roa (hash: G+ObB5wiY0RZq1BlygyBu8U8dT9wJLTIM9sck3J/+9U=)
9: 6DADCA1C2F1C11EDA3E29B09C4F9AE02.roa (hash: IxMPHfcO4FMJHXeamW9Ntxik/OpowXLrenedL/WZ9v0=)
10: 1FCC64AC719511F090F7F83BC4F9AE02.roa (hash: HDz+1GzuPpUTidanGB4G4ykVBkwdTS/Q6fpag6ihvfc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3088 (0xc10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Validity
Not Before: May 12 19:01:04 2026 GMT
Not After : May 19 19:01:04 2026 GMT
Subject: CN=6a0378f0-e782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:36:93:ab:8f:fa:1a:e5:7d:fc:5b:1a:e8:5c:
f4:91:76:5c:b1:4c:a5:03:cf:9d:90:a7:69:ec:90:
d3:27:38:06:fe:5f:e9:94:34:11:8b:41:5b:fe:9f:
6d:72:2b:46:be:3f:6d:82:35:96:59:61:6d:b9:9d:
27:31:f2:ab:d1:52:94:08:14:ae:3b:7f:50:d1:07:
d7:fe:32:e1:8f:c8:e2:5e:b7:ae:00:92:2e:11:d9:
6b:5f:28:71:1e:74:5d:c3:ac:b8:76:03:ac:5c:0a:
22:1b:1f:1f:36:17:5f:41:81:de:93:5b:4e:69:5e:
0f:42:b1:d9:56:39:6d:6d:c0:e2:af:19:ee:ff:41:
1e:7f:e7:f0:95:1e:be:cc:96:6b:c3:d2:ae:77:fc:
6a:8d:f4:61:60:36:7d:ea:5e:46:89:ec:a0:33:bc:
a0:1b:a2:33:d8:cf:d5:82:7b:71:fe:c2:9f:1e:b6:
65:c3:d1:9b:a2:e2:b9:6b:23:ab:8f:6b:73:47:5f:
fe:bd:f8:c3:b1:c7:78:57:6e:29:b8:dc:b5:f3:8d:
c1:93:7e:29:d9:ad:93:a9:8a:f3:19:82:5c:44:52:
92:94:b9:de:e4:fc:c6:cf:e5:08:f3:a3:cb:ed:6b:
61:25:2a:2e:4f:70:c6:5f:d9:01:4f:f0:b6:50:25:
ea:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:48:59:F0:C3:97:7D:52:9B:F1:83:9B:D3:82:82:83:A9:17:29:16
X509v3 Authority Key Identifier:
keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:d3:6c:09:29:bd:ac:06:8e:72:5b:60:15:ba:d0:b3:b3:26:
92:f5:ea:d2:bf:cb:00:d9:b6:a6:f1:af:4b:60:11:86:36:71:
0a:f3:db:5a:dc:ac:c1:ef:44:77:f6:ff:97:6d:97:9e:0d:96:
a7:7f:4d:02:b8:c2:7d:ca:6c:72:67:f2:c2:72:f0:25:93:7b:
3b:fe:a7:03:fd:07:9d:ff:ca:db:fe:7d:28:00:e0:77:26:a3:
3e:bd:f1:01:1c:98:31:2c:5a:2d:a7:c2:70:d4:d5:60:d4:8a:
20:e6:c3:c0:a2:d8:24:27:c0:32:22:4b:6c:98:ee:30:0f:71:
ef:23:12:ce:99:70:43:58:b4:e2:10:07:62:e9:17:cf:49:8a:
b2:fd:24:9f:15:fd:19:b3:66:21:85:5c:e3:f9:de:86:cd:3b:
22:c1:e1:dd:c6:5f:e4:f8:22:43:11:ce:44:6b:bf:6c:2c:76:
37:d8:82:a1:2e:98:6f:bd:75:ef:a8:4c:cc:20:f9:09:7a:92:
80:0f:79:c1:ee:2c:56:c2:3a:4e:36:4a:67:66:c9:82:29:09:
27:3a:dd:b4:28:ed:cf:31:8c:52:18:c2:16:45:36:93:09:d6:
31:02:d1:af:a6:7e:32:e1:45:c0:1c:83:2b:a4:ec:7d:f9:80:
fc:eb:fb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:55:39 2026 by rpki-client