
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft
File: l6zd4pEaCfOTXxhg2wV9TP9GssU.mft (raw, json)
Hash identifier: 1TuoxbJ0hwUMGL9MJ3xZNfbxsHhvpju2JqJ6mLFtT3M=
Subject key identifier: F5:77:B6:BF:11:D9:4B:44:C6:D5:00:B4:89:BE:51:3E:8E:E3:E0:F2
Authority key identifier: 97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5
Certificate issuer: /CN=A91E7A75/serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5
Certificate serial: FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft
Manifest number: E9
Signing time: Thu 23 Jul 2026 08:14:23 +0000
Manifest this update: Thu 23 Jul 2026 08:14:22 +0000
Manifest next update: Thu 30 Jul 2026 08:14:22 +0000
Files and hashes: 1: l6zd4pEaCfOTXxhg2wV9TP9GssU.crl (hash: Es/6bYmiw1D7x2HHHcd/Iv+HH5vL8cXd2GOQWucfZH0=)
2: 7538A8FC275211F0A14FD328C4F9AE02.roa (hash: wKpTIdTIZRF8pzS9lUnHOrHkh5HchxQFgkek0jpSD6Q=)
3: 9E314E3A275211F09DB11A29C4F9AE02.roa (hash: ouIXTA7nbMIsAmF3ndS+L28s40QPvKUpIo7ArtiHIu0=)
4: 9ECB0CF0275211F09DB11A29C4F9AE02.roa (hash: 5ZDy+q95r5zdw+R7DnGV36oaHIDbY23gtfzUTt//mwc=)
5: 74B37F24275211F0A14FD328C4F9AE02.roa (hash: F55zjQnFvkTNeRw59Rc/nAQUDsOUxPNiEUce26KcKVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl
rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:14:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7A75, serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5
Validity
Not Before: Jul 23 08:14:22 2026 GMT
Not After : Jul 30 08:14:22 2026 GMT
Subject: CN=6a61cd5f-d1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:13:12:61:a3:39:14:9a:6c:fc:a1:f2:0d:2a:
90:d2:e2:ec:54:da:2c:d0:e3:5a:f4:68:29:ec:2d:
2f:c0:94:79:a6:c7:aa:02:31:7c:18:27:46:e0:b3:
67:ec:5d:00:30:6d:03:9b:47:75:29:69:09:6c:a3:
90:86:32:33:c2:dc:7c:5d:90:ea:d7:f0:e1:1a:97:
f5:64:ff:f6:dc:f6:34:12:44:64:74:b2:39:86:f4:
3b:64:d4:b1:43:0b:6b:ce:d9:73:65:e0:27:a9:0d:
95:4c:ed:f8:80:8f:3c:11:26:28:b9:6e:d4:6d:d0:
91:e9:7a:13:68:00:08:a0:0d:d8:3d:13:96:e0:c4:
da:c5:8b:ae:a4:b7:f7:da:c7:9f:93:c2:79:09:95:
9f:97:15:92:80:9f:32:de:4c:84:f4:d6:dd:a7:17:
d4:80:67:7a:04:e4:b2:1a:41:e9:bb:d2:55:0c:05:
f4:34:21:36:5e:f9:d7:7a:e4:47:91:d7:49:6a:d7:
51:2e:9e:1b:d4:84:52:82:e4:d3:4a:9d:3f:aa:68:
66:80:e4:a0:9c:fa:04:6f:78:f6:10:dc:83:ee:12:
38:ba:6c:e9:ed:87:47:56:41:62:46:f3:d6:93:2c:
89:cf:10:c8:99:2d:61:e2:30:98:f4:b4:19:da:db:
80:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:77:B6:BF:11:D9:4B:44:C6:D5:00:B4:89:BE:51:3E:8E:E3:E0:F2
X509v3 Authority Key Identifier:
keyid:97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:39:39:21:c7:be:9a:c1:f8:8e:fc:28:8a:c2:ec:51:e5:4d:
12:90:cf:a7:b7:68:35:98:6e:66:80:a5:19:f9:31:9c:5e:b0:
fe:db:40:b7:f2:8a:88:b1:6b:34:1c:26:a9:96:f4:50:a7:49:
fb:c0:71:a8:98:c9:5c:b3:47:86:f4:7b:da:9d:5a:b5:a2:ef:
7a:2f:ee:56:1b:49:0c:69:e4:5d:40:9c:75:0d:c8:3d:cb:9e:
bf:22:fd:6e:d3:be:09:70:25:d9:63:80:a4:9f:3f:bc:11:9b:
20:99:f2:1b:8f:76:7a:1a:7c:98:c2:d5:bd:1e:a7:5f:2e:1c:
74:03:5c:b3:d7:95:9a:60:20:d1:96:ca:2d:a6:d6:25:20:68:
3d:63:a1:ab:c0:a4:76:7f:eb:46:86:ac:c9:07:03:f5:a0:92:
cb:58:be:fd:30:29:c3:19:dd:ab:f5:08:8b:6d:14:f3:71:35:
58:e9:bf:91:f4:63:0c:b0:5e:14:ca:ee:cd:70:8d:8c:87:d1:
c3:a7:b1:a3:9e:ce:38:15:9e:dc:3b:e9:67:1b:07:a6:76:2a:
72:7e:46:30:30:b7:b8:48:a8:e6:67:18:66:c8:11:d5:51:53:
f1:ff:bb:e9:95:e0:6b:f1:95:37:5f:8e:4f:82:ff:af:a0:e7:
49:43:ad:cd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTdBNzUxMTAvBgNVBAUTKDk3QUNEREUyOTExQTA5RjM5MzVGMTg2MERCMDU3RDRD
RkY0NkIyQzUwHhcNMjYwNzIzMDgxNDIyWhcNMjYwNzMwMDgxNDIyWjAYMRYwFAYD
VQQDEw02YTYxY2Q1Zi1kMWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApRMSYaM5FJps/KHyDSqQ0uLsVNos0ONa9Ggp7C0vwJR5pseqAjF8GCdG4LNn
7F0AMG0Dm0d1KWkJbKOQhjIzwtx8XZDq1/DhGpf1ZP/23PY0EkRkdLI5hvQ7ZNSx
QwtrztlzZeAnqQ2VTO34gI88ESYouW7UbdCR6XoTaAAIoA3YPROW4MTaxYuupLf3
2sefk8J5CZWflxWSgJ8y3kyE9NbdpxfUgGd6BOSyGkHpu9JVDAX0NCE2XvnXeuRH
kddJatdRLp4b1IRSguTTSp0/qmhmgOSgnPoEb3j2ENyD7hI4umzp7YdHVkFiRvPW
kyyJzxDImS1h4jCY9LQZ2tuAEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPV3tr8R
2UtExtUAtIm+UT6O4+DyMB8GA1UdIwQYMBaAFJes3eKRGgnzk18YYNsFfUz/RrLF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0E3NS9FNkY0QjZEQTI3
NTExMUYwQUNGMEFGMjRDNEY5QUUwMi9sNnpkNHBFYUNmT1RYeGhnMndWOVRQOUdz
c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2w2emQ0cEVhQ2ZPVFh4aGcyd1Y5VFA5R3NzVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
N0E3NS9FNkY0QjZEQTI3NTExMUYwQUNGMEFGMjRDNEY5QUUwMi9sNnpkNHBFYUNm
T1RYeGhnMndWOVRQOUdzc1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmzk5Ice+msH4jvwoisLsUeVNEpDPp7doNZhuZoClGfkxnF6w/ttAt/KKiLFr
NBwmqZb0UKdJ+8BxqJjJXLNHhvR72p1ataLvei/uVhtJDGnkXUCcdQ3IPcuevyL9
btO+CXAl2WOApJ8/vBGbIJnyG492ehp8mMLVvR6nXy4cdANcs9eVmmAg0ZbKLabW
JSBoPWOhq8Ckdn/rRoasyQcD9aCSy1i+/TApwxndq/UIi20U83E1WOm/kfRjDLBe
FMruzXCNjIfRw6exo57OOBWe3DvpZxsHpnYqcn5GMDC3uEio5mcYZsgR1VFT8f+7
6ZXga/GVN1+OT4L/r6DnSUOtzQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:16 2026 by rpki-client