
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft
File: --6lC0fY6xxw_ToK6VrRt2nYQ0o.mft (raw, json)
Hash identifier: bnbn0eqS8KT6j/FDe91XXx3SqVatdz2ZDTCSCWwucN8=
Subject key identifier: 10:5F:D9:46:43:32:69:75:27:E1:98:B0:E8:F6:C6:7A:AA:07:C7:C0
Authority key identifier: FB:EE:A5:0B:47:D8:EB:1C:70:FD:3A:0A:E9:5A:D1:B7:69:D8:43:4A
Certificate issuer: /CN=A9111D65/serialNumber=FBEEA50B47D8EB1C70FD3A0AE95AD1B769D8434A
Certificate serial: 40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--6lC0fY6xxw_ToK6VrRt2nYQ0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft
Manifest number: 3F
Signing time: Fri 17 Jul 2026 09:48:24 +0000
Manifest this update: Fri 17 Jul 2026 09:48:23 +0000
Manifest next update: Fri 24 Jul 2026 09:48:23 +0000
Files and hashes: 1: --6lC0fY6xxw_ToK6VrRt2nYQ0o.crl (hash: kz0wzccphVOAI75jW/KOOjF9MFDfqbEQlbUO1j7fNBQ=)
2: D6075FAE22A911F1B999B242B5833773.roa (hash: hoH+7hdmgPXKwxfgbiApjuFfBwt+Y2bPJbIp+G+HCz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.crl
rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--6lC0fY6xxw_ToK6VrRt2nYQ0o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 09:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111D65, serialNumber=FBEEA50B47D8EB1C70FD3A0AE95AD1B769D8434A
Validity
Not Before: Jul 17 09:48:23 2026 GMT
Not After : Jul 24 09:48:23 2026 GMT
Subject: CN=6a59fa68-62c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:12:dc:c8:50:56:67:87:cb:45:b6:8d:6f:2f:
c2:b6:5a:f6:6a:46:50:3f:45:1e:c1:e4:5d:34:ea:
87:21:79:d8:da:25:90:18:40:9d:2a:e0:06:28:a4:
75:4a:58:61:5c:01:73:1a:7f:c3:c0:b9:f3:e7:23:
46:0b:c4:48:24:e3:4c:9d:d6:c1:80:56:ee:1c:90:
23:45:6f:3d:99:3c:3d:9b:14:7f:3d:55:5b:49:6f:
b6:0d:a8:3b:f4:58:00:a5:05:86:c3:59:8e:0c:e5:
1e:64:82:94:16:fa:c2:62:2d:02:e8:5e:1b:95:28:
a7:1a:5c:f3:3a:a8:80:41:4c:95:4a:67:88:ac:5e:
7e:78:4a:1f:58:70:86:a2:3d:94:f3:d4:14:d7:ec:
4f:2b:ff:09:a1:11:bc:93:81:d6:47:57:b5:68:27:
af:0c:86:8a:31:ed:c1:34:d0:41:55:1f:65:45:c7:
82:e7:01:c9:5d:62:5a:6b:96:56:d3:24:79:3c:e2:
dc:1c:0c:d4:f1:56:4f:e9:e8:f7:3d:8a:42:37:f4:
de:52:dd:c1:52:85:5a:5a:aa:75:37:cb:01:a7:78:
86:dd:39:71:a4:a0:31:15:0d:c1:8d:81:52:90:8b:
f8:5d:0c:c3:d3:b5:3d:36:c4:91:ab:10:5f:ae:a7:
fa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5F:D9:46:43:32:69:75:27:E1:98:B0:E8:F6:C6:7A:AA:07:C7:C0
X509v3 Authority Key Identifier:
keyid:FB:EE:A5:0B:47:D8:EB:1C:70:FD:3A:0A:E9:5A:D1:B7:69:D8:43:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--6lC0fY6xxw_ToK6VrRt2nYQ0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:82:57:cc:01:b0:ef:7a:80:3b:f0:28:dc:e5:d1:aa:88:8c:
c6:18:31:e3:50:79:99:8f:47:18:24:9f:82:6a:5b:bf:a8:a7:
ed:70:35:32:d4:78:15:d9:20:90:c4:b5:1c:71:71:c3:6c:03:
01:d5:f8:83:97:47:80:0f:f1:b1:0e:c5:86:c6:22:9a:67:de:
6e:ba:4c:d2:28:2c:d0:78:ad:34:73:41:a6:a9:50:ef:97:fb:
fa:be:63:22:02:49:a5:ab:c8:da:46:c0:6c:1f:b7:7b:1e:9c:
c3:53:6b:d4:48:9d:fd:5c:1c:41:cf:b2:22:4a:b0:18:7c:f5:
11:e3:89:39:dc:39:8c:05:d5:71:ea:a7:9f:04:6c:fd:82:2e:
08:fc:6a:0f:16:b1:0d:d6:a5:35:96:7a:79:c6:71:67:d0:1c:
d8:1d:2c:c6:ff:88:f2:8a:76:c9:a6:99:c3:ee:03:b8:7e:3f:
33:d1:9c:e3:2e:73:16:ac:64:97:e3:8b:62:d5:64:83:23:de:
96:ea:36:7b:f5:78:86:c1:25:2c:59:ff:83:b2:4c:b9:79:f0:
8b:dd:13:10:17:2a:1c:91:f8:c0:fb:1a:06:16:41:71:9b:ca:
37:a2:88:b0:3a:f7:35:a4:aa:73:d5:9b:e4:8b:7e:f9:03:8d:
82:ab:c0:eb
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
MUQ2NTExMC8GA1UEBRMoRkJFRUE1MEI0N0Q4RUIxQzcwRkQzQTBBRTk1QUQxQjc2
OUQ4NDM0QTAeFw0yNjA3MTcwOTQ4MjNaFw0yNjA3MjQwOTQ4MjNaMBgxFjAUBgNV
BAMTDTZhNTlmYTY4LTYyYzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDIEtzIUFZnh8tFto1vL8K2WvZqRlA/RR7B5F006ochedjaJZAYQJ0q4AYopHVK
WGFcAXMaf8PAufPnI0YLxEgk40yd1sGAVu4ckCNFbz2ZPD2bFH89VVtJb7YNqDv0
WAClBYbDWY4M5R5kgpQW+sJiLQLoXhuVKKcaXPM6qIBBTJVKZ4isXn54Sh9YcIai
PZTz1BTX7E8r/wmhEbyTgdZHV7VoJ68Mhoox7cE00EFVH2VFx4LnAcldYlprllbT
JHk84twcDNTxVk/p6Pc9ikI39N5S3cFShVpaqnU3ywGneIbdOXGkoDEVDcGNgVKQ
i/hdDMPTtT02xJGrEF+up/pLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEF/ZRkMy
aXUn4Ziw6PbGeqoHx8AwHwYDVR0jBBgwFoAU++6lC0fY6xxw/ToK6VrRt2nYQ0ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExRDY1L0NGQjlFNzc2MjJB
ODExRjFBMjlDODUxQ0I1ODMzNzczLy0tNmxDMGZZNnh4d19Ub0s2VnJSdDJuWVEw
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvLS02bEMwZlk2eHh3X1RvSzZWclJ0Mm5ZUTBvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx
RDY1L0NGQjlFNzc2MjJBODExRjFBMjlDODUxQ0I1ODMzNzczLy0tNmxDMGZZNnh4
d19Ub0s2VnJSdDJuWVEwby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAfglfMAbDveoA78Cjc5dGqiIzGGDHjUHmZj0cYJJ+Calu/qKftcDUy1HgV2SCQ
xLUccXHDbAMB1fiDl0eAD/GxDsWGxiKaZ95uukzSKCzQeK00c0GmqVDvl/v6vmMi
Akmlq8jaRsBsH7d7HpzDU2vUSJ39XBxBz7IiSrAYfPUR44k53DmMBdVx6qefBGz9
gi4I/GoPFrEN1qU1lnp5xnFn0BzYHSzG/4jyinbJppnD7gO4fj8z0ZzjLnMWrGSX
44ti1WSDI96W6jZ79XiGwSUsWf+Dsky5efCL3RMQFyockfjA+xoGFkFxm8o3ooiw
Ovc1pKpz1Zvki375A42Cq8Dr
-----END CERTIFICATE-----
Generated at Sat Jul 18 09:33:24 2026 by rpki-client