
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
File: D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json)
Hash identifier: K5eln4NQhiyZLbS204HLWwipcY+qXtA90FQF5s/qv4M=
Subject key identifier: 61:E7:50:B5:4F:BD:12:A2:87:C7:CD:56:01:BE:8A:32:CB:73:E2:BD
Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE
Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE
Certificate serial: 0241
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
Manifest number: 0230
Signing time: Thu 21 May 2026 02:38:55 +0000
Manifest this update: Thu 21 May 2026 02:38:55 +0000
Manifest next update: Thu 28 May 2026 02:38:55 +0000
Files and hashes: 1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: ubmWe0K/yRj7bJ4IE7WwIEV9WLrEVwkHhcHCWHDB9L8=)
2: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: d03oC9NyvqRx8U/l5SE7fqdhkjTewkYgCSF6lgvXCMc=)
3: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: weDayyeYutvx0b8e1SLUbhE0mFruNtfvUzk0Kx4AkzY=)
4: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: hT0A2KRW/3QOLTyxBn8Un7aA6iluT3rc/l0TDSw8688=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl
rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:38:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 577 (0x241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE
Validity
Not Before: May 21 02:38:55 2026 GMT
Not After : May 28 02:38:55 2026 GMT
Subject: CN=6a0e703f-c0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dd:bd:76:2c:cd:bd:f7:b4:b9:86:48:bd:f4:
f3:3d:91:80:b8:72:89:0e:57:10:ee:d1:ce:f0:f6:
64:11:58:10:01:93:dd:9d:34:1e:3c:78:17:ad:5b:
c7:f3:a3:28:11:0d:da:31:64:71:16:0a:d0:f2:7a:
b6:01:c2:11:93:48:08:b4:e8:7e:3c:43:5d:c5:a3:
e1:08:4f:ee:08:ee:f0:24:13:c5:0c:0e:ee:0d:35:
2c:42:4b:b4:ac:f4:87:f8:9f:55:da:48:82:56:9c:
8d:7d:39:9a:cf:6d:c7:1b:51:54:70:a0:53:6e:6b:
ff:33:92:5d:b0:22:57:89:32:03:d5:0e:d4:6f:4a:
c9:a2:fd:23:16:4e:27:61:37:9b:c2:81:94:f1:d3:
06:41:b0:6f:48:90:b2:e2:9f:b1:36:63:f0:0c:b5:
50:7a:f1:51:4f:0f:75:23:dc:46:2d:5a:68:31:c6:
9a:b7:9a:77:be:e2:b7:0c:25:a0:43:57:48:47:3b:
50:1f:03:f4:85:81:60:c2:12:43:60:14:bf:a8:b4:
bf:3d:0a:49:06:d2:7d:f2:8c:49:6c:08:1a:c1:21:
1d:5f:9c:48:42:b0:06:a9:60:b6:81:d3:e5:da:10:
3c:89:45:b7:9f:83:72:aa:31:1c:5b:64:99:bc:e9:
ee:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E7:50:B5:4F:BD:12:A2:87:C7:CD:56:01:BE:8A:32:CB:73:E2:BD
X509v3 Authority Key Identifier:
keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:67:7f:3a:36:4c:2e:f0:a7:dd:6e:de:a5:f5:14:c2:52:66:
79:62:33:2b:27:c4:56:2a:f6:26:aa:6a:45:53:df:06:82:30:
93:94:b1:2e:1e:41:26:f0:ef:01:cb:63:bc:0e:19:50:0b:b0:
0f:18:22:bd:aa:70:89:08:e3:af:07:19:d5:88:78:12:90:ba:
11:3f:00:15:22:1e:35:4a:dd:e8:27:d2:8b:7f:f0:d7:27:76:
5f:a4:42:93:c7:46:1a:c0:8e:ec:14:0c:db:b4:68:42:11:ca:
1f:33:08:01:d5:bf:cc:bb:4a:e9:4f:68:fe:52:44:34:a1:ec:
c3:e5:c0:33:1a:3b:07:31:9d:8e:cc:62:b6:4b:c7:d9:67:21:
df:22:9d:a5:b9:11:6d:d7:06:61:78:0d:e7:be:9f:47:c1:d5:
1a:7d:5f:14:83:2a:da:54:22:df:c0:13:85:08:17:50:bc:fe:
21:88:e2:2b:6d:9e:99:8b:7c:1c:e3:fa:33:85:db:ae:b6:40:
23:5a:75:fc:f3:e7:51:07:9f:b8:99:2c:92:3a:19:5f:92:fd:
07:b6:61:1e:c5:57:d2:2b:e2:9e:5a:e4:0e:67:05:df:a5:bc:
b8:ed:36:9f:5f:61:55:aa:73:2f:0e:8d:7a:ad:67:90:ff:d9:
9c:04:5f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:12:03 2026 by rpki-client