
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
File: 6GcXUDRPGMKvdH_68lWFDrx50B8.mft (raw, json)
Hash identifier: oYj2r8i/Zm5Li9zfUPeIBzdzokUnMulk2RHgl6KczAE=
Subject key identifier: A6:D1:FF:3B:8E:78:55:F2:74:08:AF:63:A1:78:2A:C0:83:04:95:BD
Authority key identifier: E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F
Certificate issuer: /CN=A9114DDF/serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F
Certificate serial: 0476
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
Manifest number: 0468
Signing time: Wed 19 Aug 2026 00:30:28 +0000
Manifest this update: Wed 19 Aug 2026 00:30:27 +0000
Manifest next update: Wed 26 Aug 2026 00:30:27 +0000
Files and hashes: 1: 6GcXUDRPGMKvdH_68lWFDrx50B8.crl (hash: YyeaZdERPrwLdNPrf9UaT8mdW9srd1zBsIma4yJS0sE=)
2: FFFC26F0A51C11EC8394365BC4F9AE02.roa (hash: azSQvrLGixSL3oYOq7/u81UYo4j8paDDRGJYii7YcF0=)
3: FF46137EA51C11EC8394365BC4F9AE02.roa (hash: iuWH4XsJsz0loBqcOc0cY5MFt/NYR3pQCRGo6mfAtWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl
rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1142 (0x476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114DDF, serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F
Validity
Not Before: Aug 19 00:30:27 2026 GMT
Not After : Aug 26 00:30:27 2026 GMT
Subject: CN=6a84f924-b376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:ac:ae:af:aa:f2:4d:e5:3a:3e:2b:a8:31:
23:af:5c:95:c0:98:ca:d3:02:e6:54:07:90:7f:68:
86:c2:92:d3:be:1a:94:05:84:4a:9f:63:62:a5:a4:
33:77:c6:37:d1:23:6a:b0:50:d4:1b:3b:cb:38:89:
c3:1b:7d:53:36:69:6b:ce:90:64:64:df:16:c1:50:
79:93:0c:14:46:0e:85:7d:67:3d:d1:e7:c4:71:de:
96:9c:2b:ee:47:6d:f3:33:0b:4f:4a:10:c9:96:09:
d7:93:02:ad:ee:cf:78:db:9a:11:e1:87:8a:cd:3c:
70:1c:83:9f:84:2e:9a:e8:ce:e1:64:51:56:2e:f7:
10:89:61:52:19:76:c0:da:cb:b5:61:1d:98:47:4b:
68:52:b6:4c:b4:e1:72:82:b7:31:76:ef:04:9e:75:
18:78:2d:e7:f3:77:97:f3:e5:28:4f:04:f7:a2:7e:
46:4d:7b:74:96:96:33:f9:a1:10:e9:6a:e9:f4:cd:
bc:db:8f:59:27:17:bf:96:56:cd:fa:62:e8:d8:91:
47:11:e2:f3:77:6b:3f:14:f8:87:0b:de:83:c5:48:
18:e2:d5:8d:5a:97:2d:36:d5:0a:36:57:18:bb:4d:
67:54:63:3d:92:66:a4:46:a6:95:a0:24:56:dc:78:
d6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D1:FF:3B:8E:78:55:F2:74:08:AF:63:A1:78:2A:C0:83:04:95:BD
X509v3 Authority Key Identifier:
keyid:E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:e7:d7:c6:21:a4:dd:3f:c5:fe:f8:33:8d:4f:69:bd:2f:89:
55:a7:6d:71:68:de:f7:3d:84:94:c2:1c:47:0f:8a:68:b5:fb:
fa:83:4e:02:2b:83:84:8f:24:47:ad:55:68:f5:02:f4:00:fe:
4b:74:57:97:a4:56:15:8a:02:51:2a:a5:7b:5a:5d:4d:c7:6a:
0b:90:4c:f6:d4:b1:98:5d:b5:51:e7:2d:49:96:2d:02:76:07:
24:26:5d:9e:af:ba:4e:8a:6b:70:f1:27:8b:cd:dc:8d:4b:b2:
2c:8f:7d:96:a4:48:1b:99:5f:a0:bb:a2:84:83:2a:05:78:4c:
c3:5d:67:aa:82:5b:42:1e:57:8e:06:01:27:fa:b3:3d:a4:0d:
a7:83:21:33:b5:fb:85:54:ee:38:71:09:c5:89:55:eb:2e:98:
50:59:66:64:81:bd:a9:d9:f9:73:7c:a3:4d:cf:cc:33:3f:ae:
c4:52:94:1c:2d:a5:f5:bb:01:bb:83:1f:51:ff:42:f0:e1:3f:
28:85:ab:5e:08:7d:87:4a:27:ac:d1:8a:14:71:6f:c7:0f:b6:
27:64:e0:e3:8e:1c:d8:06:4b:de:90:0d:34:7f:49:03:6c:82:
55:95:b6:fb:ed:15:a8:ef:ec:61:29:b1:c6:66:0f:c2:92:ad:
a1:af:a7:0d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTREREYxMTAvBgNVBAUTKEU4NjcxNzUwMzQ0RjE4QzJBRjc0N0ZGQUYyNTU4NTBF
QkM3OUQwMUYwHhcNMjYwODE5MDAzMDI3WhcNMjYwODI2MDAzMDI3WjAYMRYwFAYD
VQQDEw02YTg0ZjkyNC1iMzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApMCsrq+q8k3lOj4rqDEjr1yVwJjK0wLmVAeQf2iGwpLTvhqUBYRKn2NipaQz
d8Y30SNqsFDUGzvLOInDG31TNmlrzpBkZN8WwVB5kwwURg6FfWc90efEcd6WnCvu
R23zMwtPShDJlgnXkwKt7s9425oR4YeKzTxwHIOfhC6a6M7hZFFWLvcQiWFSGXbA
2su1YR2YR0toUrZMtOFygrcxdu8EnnUYeC3n83eX8+UoTwT3on5GTXt0lpYz+aEQ
6Wrp9M28249ZJxe/llbN+mLo2JFHEeLzd2s/FPiHC96DxUgY4tWNWpctNtUKNlcY
u01nVGM9kmakRqaVoCRW3HjWDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKbR/zuO
eFXydAivY6F4KsCDBJW9MB8GA1UdIwQYMBaAFOhnF1A0TxjCr3R/+vJVhQ68edAf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNERERi81QjA2RkVGMkE1
MEExMUVDQjI3NzhENUNDNEY5QUUwMi82R2NYVURSUEdNS3ZkSF82OGxXRkRyeDUw
QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZHY1hVRFJQR01LdmRIXzY4bFdGRHJ4NTBCOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NERERi81QjA2RkVGMkE1MEExMUVDQjI3NzhENUNDNEY5QUUwMi82R2NYVURSUEdN
S3ZkSF82OGxXRkRyeDUwQjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlufXxiGk3T/F/vgzjU9pvS+JVadtcWje9z2ElMIcRw+KaLX7+oNOAiuDhI8k
R61VaPUC9AD+S3RXl6RWFYoCUSqle1pdTcdqC5BM9tSxmF21UectSZYtAnYHJCZd
nq+6ToprcPEni83cjUuyLI99lqRIG5lfoLuihIMqBXhMw11nqoJbQh5XjgYBJ/qz
PaQNp4MhM7X7hVTuOHEJxYlV6y6YUFlmZIG9qdn5c3yjTc/MMz+uxFKUHC2l9bsB
u4MfUf9C8OE/KIWrXgh9h0onrNGKFHFvxw+2J2Tg444c2AZL3pANNH9JA2yCVZW2
++0VqO/sYSmxxmYPwpKtoa+nDQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:38 2026 by rpki-client