
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
File: 6WkLu582wJ1MLtT2bPVdw1J1-3I.mft (raw, json)
Hash identifier: kwId3J/nX4dp1ah/TuLZLEMCixafPDnxnz1V9lay2HM=
Subject key identifier: 59:9E:E0:0C:D7:C1:95:04:58:A5:A2:60:A1:B8:32:13:04:49:22:C7
Authority key identifier: E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72
Certificate issuer: /CN=A91BA9CE/serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72
Certificate serial: 0D45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
Manifest number: 0D19
Signing time: Tue 12 May 2026 18:11:09 +0000
Manifest this update: Tue 12 May 2026 18:11:09 +0000
Manifest next update: Tue 19 May 2026 18:11:09 +0000
Files and hashes: 1: 6WkLu582wJ1MLtT2bPVdw1J1-3I.crl (hash: YokD+TY+Xm/+y8SDuHrr2ns5QK2kU8iLk2mBCulzHNc=)
2: 703918CC69EA11EE83318C50C4F9AE02.roa (hash: rFeU6+VRmAkqArzk8m/u7RZ8+bahOhmzZ3Bcpw03nLw=)
3: DC79515C011411EAAB0EF153C4F9AE02.roa (hash: bxdAOGEj/+Udp1jV0BPkX+3yhlPb74LiIfGot0pNRBw=)
4: 843F754669EA11EE90D6585BC4F9AE02.roa (hash: WI26tucy3cSYO4sE9GmP72fSFg+gB2AzQ5GmMyowLBY=)
5: DB63CF9A011411EAAB0EF153C4F9AE02.roa (hash: KIcJRDk3S7+rRmk7CaiKtvN5123l+l7hzY10/IQxIQ8=)
6: DBED3B7C011411EAAB0EF153C4F9AE02.roa (hash: wE1GPx9wnoFcfEYGMUAJqz9RuXU5yBbJIWxjAwW0zyI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl
rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:11:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3397 (0xd45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA9CE, serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72
Validity
Not Before: May 12 18:11:09 2026 GMT
Not After : May 19 18:11:09 2026 GMT
Subject: CN=6a036d3d-e6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:5c:e3:8a:28:c8:20:ec:69:0e:c5:03:54:
d9:4c:40:0a:5a:95:8c:51:ad:ea:4e:ec:38:03:9e:
44:8d:c5:ab:96:7f:9c:3d:98:b0:4c:e8:8c:cd:83:
9b:48:96:df:c7:b2:b2:a1:13:7a:23:c2:29:2b:79:
04:b8:02:5d:28:5f:8d:b6:e6:d8:e2:b3:b0:01:b5:
3f:a5:8d:6e:30:57:45:e3:6a:c1:2b:29:d8:0a:1b:
40:c9:00:c9:9b:d0:64:a9:7e:bc:40:ee:1a:2a:e8:
11:bd:73:f0:c9:0c:28:f2:f8:0b:d8:c2:51:96:77:
80:37:2c:01:7d:87:7c:64:68:30:04:79:4b:49:98:
ae:c0:fe:d5:55:1c:f2:fe:8e:aa:0a:ce:ca:e6:f0:
5c:dd:f1:fe:3a:72:a4:90:06:24:bb:4c:50:f6:50:
64:64:35:49:7f:c9:ad:8c:f4:b6:7f:20:cf:c1:1d:
60:8c:84:c4:5e:e2:e6:ed:34:2c:ec:82:24:58:86:
90:a1:92:98:9d:09:66:9e:dd:d4:96:a2:ff:94:8a:
21:4d:cb:69:44:48:da:d9:7b:bc:bd:1b:30:45:95:
5b:f8:b5:5a:24:ad:5b:67:00:4a:92:33:02:e8:92:
b1:8a:f0:29:d0:a8:78:6f:92:bd:de:7f:4c:c1:00:
bb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9E:E0:0C:D7:C1:95:04:58:A5:A2:60:A1:B8:32:13:04:49:22:C7
X509v3 Authority Key Identifier:
keyid:E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:d8:96:aa:38:a5:f6:e0:14:75:79:c9:5c:73:67:a0:9f:0f:
90:a3:03:32:9b:60:1d:c4:c7:2b:d2:d8:d3:b4:c0:5b:25:f5:
0c:17:7c:2c:ef:b6:9f:66:ce:80:d6:1d:31:10:e1:41:aa:d6:
95:e9:ca:ea:6b:ff:0d:71:33:bc:ed:8e:e8:af:69:18:df:f1:
ae:5e:2f:3e:4e:c9:fb:e2:f4:6d:03:ed:dc:19:c3:9a:ca:4f:
fe:8b:72:68:b0:8d:09:bb:f4:23:44:75:3f:c7:6d:c4:0e:96:
77:4b:0f:f9:d7:50:3f:9a:24:df:ce:1a:ae:bd:05:c5:b5:91:
f3:ff:10:a9:d9:b3:93:fb:26:75:e7:ab:20:4f:97:48:1d:17:
a3:e9:31:1a:66:86:63:ac:ac:e0:cd:1f:55:65:e8:99:fb:02:
5e:eb:70:31:db:1c:d9:36:7a:88:7a:38:a8:f7:9c:1f:4d:ef:
d2:dc:49:04:b1:58:da:f4:76:49:ce:a9:ff:56:f2:34:97:16:
0a:2a:05:21:4a:e3:a9:07:0c:33:c6:61:13:ff:a4:cf:17:bc:
34:9f:63:c8:d9:d1:fa:e1:6b:58:0f:f1:90:04:cc:53:6d:05:
8d:18:ef:9f:18:4d:bb:c0:f4:7f:a2:70:69:0a:b1:f4:a4:99:
0d:6a:f1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:58:13 2026 by rpki-client