
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
File: 6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft (raw, json)
Hash identifier: 4oDJCCBJkgQrsRuWK+R456w7fpzj3nU6WTW+i8qUC4I=
Subject key identifier: 6D:19:F7:A8:D7:F2:BA:F4:ED:0A:15:72:82:E8:AA:63:21:CE:31:5C
Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
Certificate issuer: /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Certificate serial: 0C4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
Manifest number: 0C09
Signing time: Tue 18 Aug 2026 19:10:05 +0000
Manifest this update: Tue 18 Aug 2026 19:10:04 +0000
Manifest next update: Tue 25 Aug 2026 19:10:04 +0000
Files and hashes: 1: 6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl (hash: uphdStrTIAUWSxBNPZ3Z0ZHB4tokt/Sa8oWq39Jla6M=)
2: 1FCC64AC719511F090F7F83BC4F9AE02.roa (hash: HDz+1GzuPpUTidanGB4G4ykVBkwdTS/Q6fpag6ihvfc=)
3: 6386643C8D7711F1A08E75473311F970.roa (hash: rY2ImM00O8nNXsqAOk5TK3NiPhHTAKt2HMSL9mEi0LM=)
4: D5955AB6975511EF94255C5EC4F9AE02.roa (hash: JVd2FG3UkH9H5B617YmFMPIf/lKVb8TVBIpvLq/w07A=)
5: 9838FE1A8D7711F1A55DF04E3311F970.roa (hash: T+KRQV/dB8Hd2xlGQ+yU1W0dlIAwzoKR9V8LIy0HV4c=)
6: 6DADCA1C2F1C11EDA3E29B09C4F9AE02.roa (hash: IxMPHfcO4FMJHXeamW9Ntxik/OpowXLrenedL/WZ9v0=)
7: 65AE18E08D7711F1A08E75473311F970.roa (hash: t46Iad5IKDgkUQWsQkVOGeZs8TaWKbpSe+5Yv00pD6Q=)
8: BF298F4A8FBF11F1A58CF95C6811F970.roa (hash: TXnS1wgMzdsHK//NBv2o4dJxtrP2qDhE6dk5MgyfgUk=)
9: 46D0A6A8BDDA11F086EB9613C4F9AE02.roa (hash: huORanbeeLTQyC8vfHVhR2qi15Mp9g0ge9RJFONvZrM=)
10: 648B3E5C8D7711F1A08E75473311F970.roa (hash: KSLF+3Cp6b50j3nKRsuJ2U0pgtXSQWOvxY7L/NsvFDA=)
11: 6B3307CE4D8411EFBAD45B86C4F9AE02.roa (hash: zhvQ2OwFKuDGlesdZErwFsvm54e1zw6iRxJQhNg3+u4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:10:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3150 (0xc4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Validity
Not Before: Aug 18 19:10:04 2026 GMT
Not After : Aug 25 19:10:04 2026 GMT
Subject: CN=6a84ae0c-8dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:c8:81:8f:23:34:06:8e:78:5b:15:f7:23:
68:89:71:4c:d2:39:b5:f5:a2:62:8b:7f:87:e9:6e:
13:65:e7:f7:bd:2b:33:02:e6:b9:d3:69:6c:a8:b4:
04:0d:a6:58:4f:1f:35:09:72:2b:14:e5:36:4c:11:
7a:48:45:cd:3d:21:e0:92:d4:20:4e:5c:2c:f2:b4:
24:07:3d:6f:8b:78:c1:19:ff:3d:44:af:94:92:c7:
44:d3:09:d7:9d:34:ef:11:8c:66:0e:c0:14:fc:0e:
75:09:78:f4:c0:6a:bc:15:0b:d4:a9:2a:86:5c:45:
e8:5e:f6:c9:3c:92:7a:1c:e1:6f:6c:6b:dd:a3:96:
63:44:93:a8:7d:21:30:91:bf:b6:8a:4c:15:de:f6:
ea:40:f9:15:c0:9d:38:50:20:19:60:23:65:dc:f0:
21:82:57:5a:50:fc:87:f2:ea:4f:fa:bd:fb:6b:0a:
f9:46:19:7f:26:ef:5f:c4:80:b5:40:46:dd:8f:80:
f6:af:ee:be:79:39:9d:cc:16:3a:ed:81:e6:53:3c:
24:60:3a:f8:a0:0b:8a:44:42:62:d1:00:f2:5e:bb:
ae:81:4a:8a:bd:16:58:b3:60:95:de:45:4d:78:18:
d8:9d:be:61:3a:1a:dd:bd:a1:05:6d:37:e9:0d:57:
3c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:19:F7:A8:D7:F2:BA:F4:ED:0A:15:72:82:E8:AA:63:21:CE:31:5C
X509v3 Authority Key Identifier:
keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:7c:2e:40:5f:06:f2:bf:6d:4c:2d:72:93:30:23:fc:44:03:
63:9d:82:24:f0:ac:a0:13:19:c5:95:88:71:2f:bf:b5:fc:df:
0f:bd:7b:9c:1c:de:4d:9f:0e:8a:3b:48:8c:d0:0b:3a:3d:38:
57:c8:cc:6f:9c:97:4c:3e:0c:2b:79:b9:5a:e5:3e:6e:d1:a0:
6b:a9:b2:a9:35:f9:2c:b6:cd:1e:75:78:2d:e3:df:6b:a8:86:
ab:0d:e4:3e:ca:54:53:96:8f:17:15:7e:09:5b:17:3e:07:28:
5f:8b:ba:50:9c:65:51:33:fd:a0:de:43:7c:aa:df:9f:95:8a:
ea:84:17:5c:6a:fe:d9:b0:6b:f0:a2:47:70:13:96:a8:72:38:
bb:7e:d5:cd:cc:ed:65:18:67:b3:a9:6a:39:ed:e3:87:ea:da:
e0:96:e9:b9:46:07:30:0d:22:e0:b6:13:0a:33:61:0a:0f:9d:
cd:19:80:63:3d:88:21:ed:44:7d:7a:4b:0f:e4:5f:92:69:dc:
1e:5f:a8:d7:f6:80:bc:e8:47:5f:a3:36:14:3f:46:7c:ec:5e:
c1:b6:74:fb:a9:bd:49:6a:78:4b:1e:2d:9f:f8:4b:3b:56:7d:
e5:44:0c:d7:a9:2d:9b:48:2e:c7:41:ae:7d:e7:ea:41:b1:08:
d0:d6:8b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:35 2026 by rpki-client