
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
File: 6WkLu582wJ1MLtT2bPVdw1J1-3I.mft (raw, json)
Hash identifier: k3xEGkXfFB2xg+XKgRvfbD3H13cWVvERRuRHs3szfVY=
Subject key identifier: C4:FB:20:05:B3:4F:8B:00:23:0E:37:38:DD:D6:EC:AD:51:4C:6F:3C
Authority key identifier: E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72
Certificate issuer: /CN=A91BA9CE/serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72
Certificate serial: 0D70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
Manifest number: 0D3F
Signing time: Wed 22 Jul 2026 18:20:29 +0000
Manifest this update: Wed 22 Jul 2026 18:20:29 +0000
Manifest next update: Wed 29 Jul 2026 18:20:29 +0000
Files and hashes: 1: 6WkLu582wJ1MLtT2bPVdw1J1-3I.crl (hash: btWkVucW1NuonYwJQOBPcmf0yLhvkc/7cd/XoevMp2A=)
2: DB63CF9A011411EAAB0EF153C4F9AE02.roa (hash: iXoFDC1/xn8eo80BBt5o4qBvONSL8fiFR0NnU+Rlsm4=)
3: 703918CC69EA11EE83318C50C4F9AE02.roa (hash: RY/qHTj/TZMLF7or7YczACasBD51dw5I3A60sFNv3Ww=)
4: DC79515C011411EAAB0EF153C4F9AE02.roa (hash: KS8c0Xi48inxYzZwmpUb5TLhVOZX441xko0cDwnChQQ=)
5: DBED3B7C011411EAAB0EF153C4F9AE02.roa (hash: FnVWhChRr11R5lpk40SJBFENshJaIF0/rxDkqiwSIcM=)
6: 843F754669EA11EE90D6585BC4F9AE02.roa (hash: sEAKBH3vdiwKhzr+pz82LbbFlkeuV8FcYTwEffKRwCI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl
rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3440 (0xd70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA9CE, serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72
Validity
Not Before: Jul 22 18:20:29 2026 GMT
Not After : Jul 29 18:20:29 2026 GMT
Subject: CN=6a6109ed-25b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a8:3d:24:02:a8:84:37:5b:7c:ee:20:2f:42:
a0:3d:8a:39:34:3f:29:d3:5a:56:bb:6e:1d:32:23:
e0:d3:f7:56:12:ae:d3:a6:b9:b3:18:ba:b2:70:ea:
0b:80:b6:40:68:ce:6d:dc:33:a3:31:9a:b9:05:39:
1b:1a:3d:d7:6b:40:06:1d:3d:9d:a1:7e:34:93:90:
0f:73:38:26:e5:c1:d4:f9:77:dd:a1:b2:67:76:fd:
89:d5:3a:47:a6:94:ac:a8:76:df:78:18:b0:69:9d:
42:65:3a:c9:56:f0:e7:6e:09:2d:a2:2e:be:51:33:
54:83:dc:12:7f:0a:09:c9:45:08:84:fa:80:84:d6:
b8:3b:dd:f9:25:66:e9:bd:e0:39:36:a3:1a:67:18:
e1:55:17:57:d9:e1:c7:b1:68:8c:73:3c:1f:fb:4e:
98:f5:c3:52:ae:42:f7:da:e2:8d:54:9f:a7:25:71:
84:cf:3f:98:ad:b2:b6:93:95:25:0a:ac:5e:b0:b5:
e4:b5:e4:b8:2f:06:0e:a1:d5:c9:b8:ca:2c:94:c4:
62:c7:fd:a8:25:83:87:fc:c2:04:19:2b:69:9a:d5:
a4:82:26:a4:b2:6f:91:24:c3:cb:87:35:cb:e6:f8:
9b:cf:21:8b:2c:82:28:aa:0c:be:66:c1:c9:0d:87:
bd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FB:20:05:B3:4F:8B:00:23:0E:37:38:DD:D6:EC:AD:51:4C:6F:3C
X509v3 Authority Key Identifier:
keyid:E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:56:68:50:c8:ac:4c:f4:fa:a1:35:14:cd:92:de:aa:9e:08:
e6:4b:8e:7f:29:3b:60:16:3e:19:15:8d:4e:68:a0:a1:10:04:
84:56:0b:50:32:50:46:58:40:b3:a8:50:9f:11:3a:b1:bc:b3:
2e:86:b0:2c:13:21:f4:4a:35:e8:06:5d:15:e4:67:c3:eb:50:
c6:9b:48:36:cd:6e:7b:fd:a1:51:6c:99:05:02:2b:85:5e:33:
3e:80:e9:1a:5d:6f:f0:3b:f0:54:5e:ac:dd:23:9a:7f:e6:6d:
d7:80:c7:8c:50:3c:43:a8:6a:2d:68:55:a9:69:e2:aa:22:d6:
e9:4d:92:9f:b0:3f:4a:82:ac:79:5a:1c:1a:5f:f8:26:b7:84:
f3:a9:af:ae:95:42:0d:0a:73:07:3e:f8:cd:d4:0b:6b:49:14:
7c:54:07:28:cd:96:3c:da:e4:93:fc:bb:aa:e8:c8:83:83:81:
cd:78:ec:93:c1:10:c6:b1:9b:78:3d:33:9f:03:01:92:06:4a:
24:51:dc:fd:18:d2:f7:22:cd:ae:57:51:77:ef:c5:9e:ab:96:
a5:57:c1:12:50:31:f5:db:ce:24:b5:3f:7e:c0:6d:44:1d:d3:
7e:70:48:c6:cb:0b:f2:ac:be:f2:e4:9f:82:89:70:d4:20:23:
b6:b3:e5:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkE5Q0UxMTAvBgNVBAUTKEU5NjkwQkJCOUYzNkMwOUQ0QzJFRDRGNjZDRjU1REMz
NTI3NUZCNzIwHhcNMjYwNzIyMTgyMDI5WhcNMjYwNzI5MTgyMDI5WjAYMRYwFAYD
VQQDEw02YTYxMDllZC0yNWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4ag9JAKohDdbfO4gL0KgPYo5ND8p01pWu24dMiPg0/dWEq7TprmzGLqycOoL
gLZAaM5t3DOjMZq5BTkbGj3Xa0AGHT2doX40k5APczgm5cHU+XfdobJndv2J1TpH
ppSsqHbfeBiwaZ1CZTrJVvDnbgktoi6+UTNUg9wSfwoJyUUIhPqAhNa4O935JWbp
veA5NqMaZxjhVRdX2eHHsWiMczwf+06Y9cNSrkL32uKNVJ+nJXGEzz+YrbK2k5Ul
CqxesLXkteS4LwYOodXJuMoslMRix/2oJYOH/MIEGStpmtWkgiaksm+RJMPLhzXL
5vibzyGLLIIoqgy+ZsHJDYe9JQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMT7IAWz
T4sAIw43ON3W7K1RTG88MB8GA1UdIwQYMBaAFOlpC7ufNsCdTC7U9mz1XcNSdfty
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTlDRS81NEYxNURBNDAx
MTExMUVBQkQ0RjBBNDlDNEY5QUUwMi82V2tMdTU4MndKMU1MdFQyYlBWZHcxSjEt
M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZXa0x1NTgyd0oxTUx0VDJiUFZkdzFKMS0zSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTlDRS81NEYxNURBNDAxMTExMUVBQkQ0RjBBNDlDNEY5QUUwMi82V2tMdTU4MndK
MU1MdFQyYlBWZHcxSjEtM0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdlZoUMisTPT6oTUUzZLeqp4I5kuOfyk7YBY+GRWNTmigoRAEhFYLUDJQRlhA
s6hQnxE6sbyzLoawLBMh9Eo16AZdFeRnw+tQxptINs1ue/2hUWyZBQIrhV4zPoDp
Gl1v8DvwVF6s3SOaf+Zt14DHjFA8Q6hqLWhVqWniqiLW6U2Sn7A/SoKseVocGl/4
JreE86mvrpVCDQpzBz74zdQLa0kUfFQHKM2WPNrkk/y7qujIg4OBzXjsk8EQxrGb
eD0znwMBkgZKJFHc/RjS9yLNrldRd+/FnquWpVfBElAx9dvOJLU/fsBtRB3TfnBI
xssL8qy+8uSfgolw1CAjtrPl+A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:44:07 2026 by rpki-client