
$ rpki-client -vvf rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
File: W6jQXcmakxBGLGPF0CafXoheSJ0.mft (raw, json)
Hash identifier: O/Aj1IOsoWAy0BbVKGVp2NRYLCY7q7TPMeBcmH62FUQ=
Subject key identifier: 9D:00:51:5F:6C:F1:F6:0A:9F:AC:6F:62:16:B6:3E:FE:17:75:13:6C
Authority key identifier: 5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D
Certificate issuer: /CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
Certificate serial: 03F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
Manifest number: 03E7
Signing time: Tue 23 Jun 2026 00:35:10 +0000
Manifest this update: Tue 23 Jun 2026 00:35:10 +0000
Manifest next update: Tue 30 Jun 2026 00:35:10 +0000
Files and hashes: 1: W6jQXcmakxBGLGPF0CafXoheSJ0.crl (hash: 6nQzmuN33+GuGiB+e3dvz3cFt/nLcWK2oghe+i9pR/w=)
2: 40C76F3ACC1611EC80603209C4F9AE02.roa (hash: xA0rurA/PEYXlJ3WLFAqJrvgYkaEX5VuqrE31iWX5bs=)
3: 41789B66CC1611EC80603209C4F9AE02.roa (hash: x8CNlILI4xwGzQizPMapiMVh5w4V5MvV0nMmJ++GLls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl
rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 00:35:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1013 (0x3f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91789F9, serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
Validity
Not Before: Jun 23 00:35:10 2026 GMT
Not After : Jun 30 00:35:10 2026 GMT
Subject: CN=6a39d4be-95c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:04:bc:12:fb:ba:db:35:a4:aa:97:eb:66:c2:
ef:2f:6f:22:3d:a7:1a:d0:e0:36:0c:95:5a:7b:6d:
32:19:12:f3:82:3a:5e:8b:08:e7:82:d3:81:3b:63:
84:22:4f:75:a9:5a:2a:a6:b5:9e:4e:51:75:dd:9a:
8d:89:0d:e0:bb:04:ca:7b:e5:c3:11:57:31:cf:b2:
77:65:fa:3a:39:d0:09:86:97:4b:6d:76:42:ac:08:
46:bb:6b:47:74:02:63:20:97:47:aa:f4:25:9d:a9:
0a:34:4b:0e:9f:99:ec:32:5a:ef:f8:ca:da:dd:71:
2f:9d:33:47:98:aa:e9:ea:bf:87:d6:4b:ec:f1:dc:
68:4a:2d:37:75:a6:9d:3c:5a:fd:6a:40:38:22:ba:
d1:4c:73:24:fc:ec:e8:9d:2b:ef:72:bf:ea:f2:66:
a3:cd:73:96:b7:ee:df:c6:13:0f:16:f6:47:52:7d:
a4:ec:d4:b1:00:1a:88:b0:bf:b1:6d:22:e3:5e:d3:
29:3a:d7:c8:0b:25:f3:6a:a7:fc:48:40:1b:79:72:
84:d6:7b:5a:87:93:e6:cf:91:5d:15:50:46:92:e5:
17:c6:a2:34:c9:8b:1d:95:45:3a:ef:f1:04:3e:e5:
a1:e6:e7:15:c6:0c:e8:3d:7c:17:c7:7c:5f:d1:fd:
77:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:00:51:5F:6C:F1:F6:0A:9F:AC:6F:62:16:B6:3E:FE:17:75:13:6C
X509v3 Authority Key Identifier:
keyid:5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:1a:c5:45:e6:2d:fc:4d:67:e5:b9:8d:a9:e0:75:b0:26:1b:
fb:7f:46:c7:f8:6f:62:d0:4a:6d:6f:6c:f3:6a:03:1d:d1:2b:
94:b5:79:04:4d:4f:36:5e:75:57:94:63:82:ef:4a:71:52:63:
22:ad:f1:44:d8:a4:7b:ce:ac:b4:4d:d0:c0:73:e1:6f:de:58:
68:b5:d3:0c:f0:7a:c9:b1:99:f4:2b:a6:f8:8c:75:72:76:b5:
5c:ea:e8:84:fc:f2:a5:25:ba:8d:0b:04:ad:9b:77:e9:91:65:
36:5c:91:a5:5e:74:a6:b7:dd:92:e6:e7:06:dc:cc:ac:ad:01:
24:15:ed:79:10:ba:c5:55:7c:ae:fc:a6:d2:97:9e:48:e2:10:
34:c5:c3:27:d3:04:2c:92:d9:7e:64:b4:d1:d3:0c:56:2d:fc:
d1:31:50:44:89:98:fe:a6:8a:ff:cc:de:30:aa:a3:45:97:33:
15:b2:02:4e:d8:d2:84:94:c3:02:4b:51:01:87:46:11:d2:e9:
75:e2:e7:59:fc:b3:94:cf:10:f5:bc:af:5f:cc:a0:f0:bd:ef:
20:56:83:4a:2f:d1:f9:af:c6:ce:0f:72:59:61:22:53:d9:00:
f6:54:6b:f9:5e:8f:00:e7:a4:e2:d5:5c:fb:36:12:77:ac:3b:
12:1d:1e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:14:13 2026 by rpki-client