
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
File: 6N-NXkyE2ofXKac8HE6GETgassE.mft (raw, json)
Hash identifier: BdASx7jFSegm4SoLRAv+Nnu9a2+EnAv4C4IYbz3QfsE=
Subject key identifier: B7:89:64:65:41:15:71:50:7A:E1:66:B4:1F:7A:82:DA:D0:C1:05:4B
Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1
Certificate issuer: /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
Certificate serial: 2AF2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
Manifest number: 2AC6
Signing time: Tue 12 May 2026 15:34:51 +0000
Manifest this update: Tue 12 May 2026 15:34:51 +0000
Manifest next update: Tue 19 May 2026 15:34:51 +0000
Files and hashes: 1: 6N-NXkyE2ofXKac8HE6GETgassE.crl (hash: ypec4O9vLqD/NZOt5yU/v1FBHHpaiLvqsIMP1fqbMuo=)
2: 3785190EF0FE11EEA034D07EC4F9AE02.roa (hash: ViUN1ktDgOXxiF30cbqP6I4Vb/rzbxLloaN/i3nx4IY=)
3: E86E188A795F11EFBF3B491CC4F9AE02.roa (hash: XjnN+h9msR5bdiDBc0pY+bbyuYDH3qgvu5jG8SVLQ0Y=)
4: 445DB498796011EFA7E9391DC4F9AE02.roa (hash: k2tDc+ez6BNq63hqlmOcWT3woUQyCLcLZFk7DkkdvX8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl
rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:34:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10994 (0x2af2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B01C7, serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
Validity
Not Before: May 12 15:34:51 2026 GMT
Not After : May 19 15:34:51 2026 GMT
Subject: CN=6a03489b-992b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:ef:5c:7e:2e:c1:7f:32:1f:ba:42:cc:4e:
77:ea:53:2a:e1:2c:c2:a1:19:dc:30:90:3b:9d:17:
ac:7b:44:d4:a2:12:db:92:6b:15:10:cb:f3:93:9b:
22:c2:18:e7:2c:1c:1f:df:d9:e3:d4:cb:e5:4d:e7:
53:6c:bd:c6:e7:9f:df:1a:80:28:8e:2e:3d:35:b2:
1a:33:29:f9:ff:54:c1:49:07:26:15:5e:ed:14:b7:
0b:57:b5:99:c8:2f:d2:c6:bd:09:ec:c4:f2:7b:ee:
44:61:7d:0c:57:a0:43:e6:94:5d:fa:87:31:41:cf:
01:6c:81:a7:e0:c2:42:cf:13:ae:ca:79:aa:c2:8d:
cb:21:22:f6:dc:69:ca:89:e6:83:72:5c:38:07:58:
e9:18:a5:48:48:4a:c0:6b:78:98:96:8f:1e:6a:53:
63:f1:70:4a:d2:31:df:b1:77:b7:2f:38:e6:40:d4:
bc:ed:6b:75:ab:b2:3d:ca:b7:33:90:b7:8d:e1:59:
17:49:b0:93:cc:50:4e:bd:41:97:f5:c5:9a:ca:bd:
39:6c:48:bd:af:ac:2f:6c:6a:b7:fd:1f:bf:43:6d:
06:48:5a:54:70:6a:ae:71:78:1d:15:23:cb:b3:61:
78:66:3d:47:2d:66:6d:f9:b5:b7:a5:f7:c1:78:8a:
42:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:89:64:65:41:15:71:50:7A:E1:66:B4:1F:7A:82:DA:D0:C1:05:4B
X509v3 Authority Key Identifier:
keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:15:23:f5:53:c1:94:f0:89:93:ad:e3:96:ab:bd:43:d1:34:
01:65:07:ed:e9:10:b5:31:18:14:96:81:d9:4d:83:0d:f3:a6:
46:09:66:23:e6:36:44:5c:6e:16:db:9d:e7:62:0e:f9:8f:50:
cb:06:13:e0:2d:e0:c0:a3:47:d0:5d:71:fb:b9:cb:e7:31:f5:
d4:3e:d4:b2:8e:b3:f6:ac:a0:ef:e8:95:f4:e1:57:a3:c2:1e:
2b:b9:36:bd:c0:d6:0d:ff:0c:41:ac:3a:a5:5e:80:38:9b:6c:
72:e5:a9:5d:1f:33:28:13:63:54:d5:22:5d:5a:14:46:8f:1a:
b2:19:7c:51:77:b3:09:42:52:02:e3:98:ff:2b:19:4e:ce:42:
aa:e7:2b:d4:ae:3b:1b:8f:47:85:b6:02:7e:97:24:5b:24:bb:
46:6a:c8:a1:31:8a:8c:95:b1:a7:ff:56:1b:88:1c:29:66:8a:
62:36:43:2a:f1:1d:06:77:5d:1a:a6:c2:ec:42:cc:59:e6:31:
94:a8:f1:b8:b8:e2:55:f8:62:61:8f:8b:86:77:c0:8b:21:88:
a5:61:e3:f2:e0:06:65:d0:9a:64:1e:cb:95:a6:34:b2:b3:c3:
9d:99:96:b6:d7:8c:0f:bc:b5:3a:3b:6b:1f:3f:a0:d8:83:3e:
f6:c2:fa:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjAxQzcxMTAvBgNVBAUTKEU4REY4RDVFNEM4NERBODdENzI5QTczQzFDNEU4NjEx
MzgxQUIyQzEwHhcNMjYwNTEyMTUzNDUxWhcNMjYwNTE5MTUzNDUxWjAYMRYwFAYD
VQQDEw02YTAzNDg5Yi05OTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArtfvXH4uwX8yH7pCzE536lMq4SzCoRncMJA7nRese0TUohLbkmsVEMvzk5si
whjnLBwf39nj1MvlTedTbL3G55/fGoAoji49NbIaMyn5/1TBSQcmFV7tFLcLV7WZ
yC/Sxr0J7MTye+5EYX0MV6BD5pRd+ocxQc8BbIGn4MJCzxOuynmqwo3LISL23GnK
ieaDclw4B1jpGKVISErAa3iYlo8ealNj8XBK0jHfsXe3LzjmQNS87Wt1q7I9yrcz
kLeN4VkXSbCTzFBOvUGX9cWayr05bEi9r6wvbGq3/R+/Q20GSFpUcGqucXgdFSPL
s2F4Zj1HLWZt+bW3pffBeIpCPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLeJZGVB
FXFQeuFmtB96gtrQwQVLMB8GA1UdIwQYMBaAFOjfjV5MhNqH1ymnPBxOhhE4GrLB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDFDNy85N0NGMjBGQTMz
MjMxMUU0QTZFNzQ5MTFDNEY5QUUwMi82Ti1OWGt5RTJvZlhLYWM4SEU2R0VUZ2Fz
c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZOLU5Ya3lFMm9mWEthYzhIRTZHRVRnYXNzRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDFDNy85N0NGMjBGQTMzMjMxMUU0QTZFNzQ5MTFDNEY5QUUwMi82Ti1OWGt5RTJv
ZlhLYWM4SEU2R0VUZ2Fzc0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAORUj9VPBlPCJk63jlqu9Q9E0AWUH7ekQtTEYFJaB2U2DDfOmRglmI+Y2RFxu
Ftud52IO+Y9QywYT4C3gwKNH0F1x+7nL5zH11D7Uso6z9qyg7+iV9OFXo8IeK7k2
vcDWDf8MQaw6pV6AOJtscuWpXR8zKBNjVNUiXVoURo8ashl8UXezCUJSAuOY/ysZ
Ts5Cqucr1K47G49HhbYCfpckWyS7RmrIoTGKjJWxp/9WG4gcKWaKYjZDKvEdBndd
GqbC7ELMWeYxlKjxuLjiVfhiYY+LhnfAiyGIpWHj8uAGZdCaZB7LlaY0srPDnZmW
tteMD7y1OjtrHz+g2IM+9sL6YA==
-----END CERTIFICATE-----
Generated at Wed May 13 08:04:51 2026 by rpki-client