
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
File: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft (raw, json)
Hash identifier: bjkhiouHtrRjgZEEtq+PsIVrrYOZQStTmVwxNO4pSww=
Subject key identifier: FF:31:62:D1:A0:3A:DB:5B:56:78:33:54:56:BB:0B:0A:7F:06:53:73
Authority key identifier: EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E
Certificate issuer: /CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
Certificate serial: 0B8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
Manifest number: 0B6F
Signing time: Thu 16 Jul 2026 19:23:19 +0000
Manifest this update: Thu 16 Jul 2026 19:23:18 +0000
Manifest next update: Thu 23 Jul 2026 19:23:18 +0000
Files and hashes: 1: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl (hash: g17VfdfYF7M+6UhAbG2mJfYtq67Z6dVKBkTMsADrUXY=)
2: 2996029C591611EA86D2A42DC4F9AE02.roa (hash: YoQLzF1Lm5yCnjPw539aGKaVVb5igGFfhZc6/2536gM=)
3: 144D1F865F7F11EBB5C08239C4F9AE02.roa (hash: a98jB4MSjv/smFnJ8Lz82VIPKbQpi9CPszl7PwTNJ3k=)
4: 45A83CC809EE11EBAD92B66BC4F9AE02.roa (hash: zxbNBeuYEf6c+f0pWWpGgn67zb1hnSTjyBGEz1Av9Hk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl
rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 19:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2954 (0xb8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154B7E, serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
Validity
Not Before: Jul 16 19:23:18 2026 GMT
Not After : Jul 23 19:23:18 2026 GMT
Subject: CN=6a592fa6-ea5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:01:33:0b:c3:03:82:67:26:1d:2c:ad:72:2d:
5d:ce:2b:52:15:ef:42:43:7f:88:ce:a6:9a:8f:4d:
22:76:59:19:4f:1b:47:4c:cd:5c:19:9e:c0:78:c1:
6d:d8:95:73:1b:84:eb:f4:7e:51:2c:03:6b:69:41:
35:a8:0f:d8:03:07:9c:28:dc:12:5f:5d:0b:93:7a:
ab:36:00:78:69:58:44:74:6b:52:12:58:d6:0c:56:
0a:d8:0d:3f:98:e1:6f:72:98:c3:e6:93:dc:1e:01:
3c:c0:32:84:75:a1:0a:f7:3b:ac:8b:ef:e2:7d:0c:
0a:8f:9d:96:6e:b0:d6:8f:f1:d2:87:67:8e:21:54:
a4:13:e2:41:6c:fe:54:39:b9:8d:06:4a:85:99:c2:
4d:b6:6d:bc:8a:69:fc:88:2e:14:6f:91:49:b0:d3:
21:9f:be:dc:15:3d:cc:36:87:2a:e7:06:65:bc:31:
ab:ce:b2:e3:3c:be:3b:e8:b4:91:c5:29:72:49:59:
87:47:19:47:ac:13:81:11:b7:d4:eb:87:28:f2:15:
7b:13:39:ef:3a:34:bb:df:43:e2:ec:5d:39:7b:f5:
e6:de:d8:f2:65:3c:ab:3d:fb:0b:34:c8:f4:4b:a4:
c9:04:fd:e0:ae:24:83:f5:6f:85:c6:fe:18:32:36:
43:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:31:62:D1:A0:3A:DB:5B:56:78:33:54:56:BB:0B:0A:7F:06:53:73
X509v3 Authority Key Identifier:
keyid:EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:7b:e4:f9:8e:80:ec:53:30:b8:8a:86:4d:1c:db:6d:f4:d2:
d3:e9:14:97:26:25:b2:d9:7e:fb:5e:13:9a:d9:49:fc:c7:b4:
28:01:ba:26:e5:af:fe:f0:5f:85:c3:9e:a6:16:81:a4:49:d7:
e9:d5:8e:49:e9:f5:f1:93:2d:83:40:bd:ab:d7:4b:e5:07:9e:
e3:12:3b:22:83:11:72:bc:fc:2b:21:bc:7b:73:cd:36:8b:87:
1e:6c:77:51:ee:66:11:4c:55:50:46:3b:dd:67:79:88:b6:ee:
df:5e:e7:18:f7:88:03:a0:91:59:a6:a7:70:32:42:8b:93:f7:
fe:45:df:5a:74:2e:52:ad:a0:a5:14:25:53:1b:ba:f9:c0:d4:
32:d5:c3:8b:5e:8e:8b:9f:e4:a9:a3:05:f7:2f:b5:5f:77:7f:
54:c9:30:d3:da:12:12:80:3c:c5:95:d5:ed:86:51:fd:5f:f1:
59:25:63:ca:b8:f1:09:13:0f:40:06:96:b0:43:fd:9b:8d:be:
2e:38:aa:fd:5f:15:80:66:57:1c:41:e0:eb:2f:68:e8:0b:a5:
0e:a5:f7:1a:ca:ef:5e:63:a0:b8:8d:2a:4b:25:fd:2c:f4:b1:
59:5c:88:1d:0d:c1:e2:58:82:9b:2c:3e:ad:06:3f:e7:cc:0a:
16:5b:fc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:56:36 2026 by rpki-client