
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
File: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft (raw, json)
Hash identifier: sa1Uh8PR7sTTfrbgl1WLhBtbhbjbHFP+16PbFts1cNk=
Subject key identifier: BD:0A:AF:D5:4F:9B:B4:85:60:2E:38:C7:BD:2A:BC:7F:F1:E2:E5:44
Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14
Certificate issuer: /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
Certificate serial: 0B7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
Manifest number: 0B56
Signing time: Tue 18 Aug 2026 19:31:17 +0000
Manifest this update: Tue 18 Aug 2026 19:31:16 +0000
Manifest next update: Tue 25 Aug 2026 19:31:16 +0000
Files and hashes: 1: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl (hash: 55L6oTEcu/fc8oC4bIvxnRvK0MzRLNf7d31zYVa5pJ8=)
2: BE633CD283A611EE804BB319C4F9AE02.roa (hash: VEGEjvA8mXlTYgeX41lw6Rhiexaef4whXcV7cTx74tM=)
3: 8AD0E57C8FE311EB89767C78C4F9AE02.roa (hash: 5OKWpLiITpzC82N35iOhZbsAzgBXSVM9wxMVAwNfKSI=)
4: ACFA076483A611EE9C62DE0CC4F9AE02.roa (hash: bmegegPDxR1urUoWVZTcpCbAwDOttLwteVNluF5nkEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl
rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2942 (0xb7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CBD7, serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
Validity
Not Before: Aug 18 19:31:16 2026 GMT
Not After : Aug 25 19:31:16 2026 GMT
Subject: CN=6a84b305-2147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b4:2a:47:59:93:06:d8:4d:95:e7:a6:33:4e:
90:70:e9:38:a6:7d:72:c5:5a:3c:06:9e:6e:f5:56:
2f:53:3c:78:9d:60:94:42:83:11:0d:24:46:91:07:
76:73:75:1a:f0:3a:a7:4a:e2:da:5b:54:a5:fb:2d:
3e:83:b9:e1:e0:2f:91:6e:61:a4:7c:91:14:f2:7a:
b4:18:85:6b:f6:fe:40:6d:31:00:31:e7:2c:c3:d6:
16:da:2a:d8:49:9c:05:e1:b6:c1:ae:83:4f:60:a8:
13:98:0e:68:6c:89:83:f5:7a:6e:62:4b:f5:d8:0f:
90:c9:ed:a4:74:05:d1:69:1a:ab:5a:f7:cb:da:3a:
f8:96:99:ad:2d:36:ca:87:48:a6:56:b0:02:71:1c:
39:c7:ab:87:23:cc:b6:c2:ba:ee:03:86:7d:cd:f7:
9a:31:32:8d:2b:51:b0:8f:26:75:ec:0f:6c:51:24:
ca:65:4e:00:4f:4f:fe:6c:7b:94:f7:03:80:38:e0:
ff:e7:2d:67:4b:c3:15:e8:87:57:5c:75:b7:8a:26:
86:bd:27:54:59:ee:8e:ee:bf:3c:e6:4f:86:4d:f3:
91:3c:6b:55:f5:70:47:e9:27:11:dc:bb:2e:42:83:
e5:65:0a:59:cd:14:0b:b5:d7:f8:b8:92:0b:ed:e5:
7c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0A:AF:D5:4F:9B:B4:85:60:2E:38:C7:BD:2A:BC:7F:F1:E2:E5:44
X509v3 Authority Key Identifier:
keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:b6:52:10:25:19:26:03:5f:19:08:b8:8f:be:5f:8f:a9:50:
7b:46:f4:96:82:4b:c9:8f:2b:ca:27:a3:f2:8d:59:0c:80:6e:
45:51:76:e0:f8:f8:39:f1:9b:53:a2:1b:91:4e:ec:35:64:41:
6f:7c:76:3f:33:12:b0:1d:0d:6f:a7:4e:5f:ac:2c:29:6f:23:
df:60:e6:3f:9a:bf:69:e9:69:40:6d:3d:c3:53:1e:cf:ad:e9:
60:f3:3b:1b:10:7f:cb:00:d9:3a:8c:b8:41:20:f4:63:88:e7:
da:4b:9e:c7:c3:5b:1f:81:76:d2:14:33:1d:34:5b:60:69:6c:
ae:a7:0b:58:bf:b7:91:ff:9d:ac:13:80:1b:73:4e:3c:18:c1:
f6:66:07:06:19:1a:b8:e4:23:93:da:73:65:35:87:5f:38:d8:
5c:00:79:4f:8b:bf:df:ca:f9:6f:01:26:f2:f6:fe:4c:9d:71:
27:52:16:81:1d:c1:61:b2:a7:cd:ac:10:45:84:42:a5:35:56:
68:4f:e0:39:1d:79:d9:57:b5:37:2c:a6:b2:e5:51:53:50:87:
4e:f0:cb:b0:9e:b3:83:0c:f7:18:3e:53:2f:1f:d9:be:84:85:
b2:07:b4:2a:78:58:09:37:6d:36:51:3b:6a:e6:18:cd:35:c9:
25:e3:3b:03
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0NCRDcxMTAvBgNVBAUTKEU5OTIzQkFDMEY1QzU4Q0FCRUI5MzI4NkNBMjAyNjZG
MUY2RUZCMTQwHhcNMjYwODE4MTkzMTE2WhcNMjYwODI1MTkzMTE2WjAYMRYwFAYD
VQQDEw02YTg0YjMwNS0yMTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA57QqR1mTBthNleemM06QcOk4pn1yxVo8Bp5u9VYvUzx4nWCUQoMRDSRGkQd2
c3Ua8DqnSuLaW1Sl+y0+g7nh4C+RbmGkfJEU8nq0GIVr9v5AbTEAMecsw9YW2irY
SZwF4bbBroNPYKgTmA5obImD9XpuYkv12A+Qye2kdAXRaRqrWvfL2jr4lpmtLTbK
h0imVrACcRw5x6uHI8y2wrruA4Z9zfeaMTKNK1GwjyZ17A9sUSTKZU4AT0/+bHuU
9wOAOOD/5y1nS8MV6IdXXHW3iiaGvSdUWe6O7r885k+GTfORPGtV9XBH6ScR3Lsu
QoPlZQpZzRQLtdf4uJIL7eV8rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL0Kr9VP
m7SFYC44x70qvH/x4uVEMB8GA1UdIwQYMBaAFOmSO6wPXFjKvrkyhsogJm8fbvsU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0JENy8xOTIzQkY2ODY0
MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dNcS11VEtHeWlBbWJ4OXUt
eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZaSTdyQTljV01xLXVUS0d5aUFtYng5dS14US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Q0JENy8xOTIzQkY2ODY0MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dN
cS11VEtHeWlBbWJ4OXUteFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB7ZSECUZJgNfGQi4j75fj6lQe0b0loJLyY8ryiej8o1ZDIBuRVF24Pj4OfGb
U6IbkU7sNWRBb3x2PzMSsB0Nb6dOX6wsKW8j32DmP5q/aelpQG09w1Mez63pYPM7
GxB/ywDZOoy4QSD0Y4jn2kuex8NbH4F20hQzHTRbYGlsrqcLWL+3kf+drBOAG3NO
PBjB9mYHBhkauOQjk9pzZTWHXzjYXAB5T4u/38r5bwEm8vb+TJ1xJ1IWgR3BYbKn
zawQRYRCpTVWaE/gOR152Ve1NyymsuVRU1CHTvDLsJ6zgwz3GD5TLx/ZvoSFsge0
KnhYCTdtNlE7auYYzTXJJeM7Aw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:35 2026 by rpki-client