
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft
File: 6ZqAcw0LqQUR27LRx_XdTaylJdo.mft (raw, json)
Hash identifier: ryybTVUg/8Uagd121rMsBUDwBLtcaVpty+isAWDr5zc=
Subject key identifier: 37:33:13:AE:B1:FE:82:6A:00:39:37:CB:32:33:2F:33:6C:EE:27:EF
Authority key identifier: E9:9A:80:73:0D:0B:A9:05:11:DB:B2:D1:C7:F5:DD:4D:AC:A5:25:DA
Certificate issuer: /CN=A91DD064/serialNumber=E99A80730D0BA90511DBB2D1C7F5DD4DACA525DA
Certificate serial: 43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft
Manifest number: 3F
Signing time: Sun 05 Jul 2026 09:15:13 +0000
Manifest this update: Sun 05 Jul 2026 09:15:13 +0000
Manifest next update: Sun 12 Jul 2026 09:15:13 +0000
Files and hashes: 1: 6ZqAcw0LqQUR27LRx_XdTaylJdo.crl (hash: jEGIc6WAPB6ST3sRY99IC0Te2ctRzh7Rv9hb4xtTCtI=)
2: C85C12E01D0011F1A9EEE03B033D8C67.roa (hash: fYSO4EkACFFF5hAoMPUl96CHjFMY11d2KjA4W0FFZmw=)
3: 3E9C9BD81D0011F1815CC9FC023D8C67.roa (hash: xxCP5LVeK0WM9e+xhYEwm/syG4ynEc+P05z25IyWt+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.crl
rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 09:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD064, serialNumber=E99A80730D0BA90511DBB2D1C7F5DD4DACA525DA
Validity
Not Before: Jul 5 09:15:13 2026 GMT
Not After : Jul 12 09:15:13 2026 GMT
Subject: CN=6a4a20a1-5033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5f:15:30:84:1d:df:30:8d:ec:08:be:55:18:
b1:91:63:7e:6c:3d:b7:4b:39:1d:c3:68:3b:c1:f2:
b4:39:df:08:51:ee:f7:0c:09:2e:58:6e:11:a5:da:
f2:23:d5:43:77:1e:59:91:18:bc:73:22:15:5a:d8:
2c:e7:b9:6c:a5:d7:6a:1d:35:34:de:ff:fc:8c:3c:
63:24:99:83:f0:a1:b1:b3:1a:21:b2:39:c9:51:84:
3a:5d:2e:55:1b:fd:ea:1d:d0:87:d3:c7:39:e0:04:
67:9a:38:b1:ed:8f:a8:5f:63:57:53:41:61:06:7c:
b0:dc:e8:23:fa:47:49:54:3e:7f:9d:61:ce:bd:c9:
e4:d0:f7:2a:42:48:5c:ec:e6:0e:6e:74:18:60:b7:
25:ad:fd:6c:61:51:8d:27:c9:90:ff:f8:f0:0e:4c:
ac:f6:bb:d1:27:93:36:43:95:76:76:2a:a6:ff:19:
de:1d:a6:de:67:e4:3b:51:da:77:81:2b:c7:d0:fb:
0b:b4:73:9d:7b:0d:4a:5b:63:29:d9:ea:ac:f4:4e:
39:79:e0:a5:a2:e4:13:61:4e:d4:41:a0:73:18:14:
73:9f:ae:ab:25:6e:26:5f:45:20:d7:22:8b:2e:ff:
1c:bb:64:46:d6:0f:1e:90:d4:92:e7:ad:82:68:6b:
54:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:33:13:AE:B1:FE:82:6A:00:39:37:CB:32:33:2F:33:6C:EE:27:EF
X509v3 Authority Key Identifier:
keyid:E9:9A:80:73:0D:0B:A9:05:11:DB:B2:D1:C7:F5:DD:4D:AC:A5:25:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:69:14:5c:e3:6e:17:35:b4:00:af:27:66:8d:f2:d1:03:87:
71:fa:43:dd:18:5f:25:9a:23:a5:6d:08:80:d7:1f:24:5a:94:
47:f0:2d:f2:cd:f4:3b:46:95:06:6a:38:be:0a:4c:9c:5b:a5:
89:70:73:72:97:63:96:eb:a3:54:64:1a:d8:83:45:a8:75:dc:
12:63:11:7e:f4:0f:78:c3:f5:58:31:89:0f:03:c0:0b:3c:16:
05:b9:7b:6a:2e:66:bf:a2:e8:e1:90:aa:3f:fd:38:29:41:02:
a8:60:0b:1e:9e:1c:00:ff:eb:85:fe:f5:a8:0b:cb:8b:28:53:
27:ab:a4:ea:08:dc:8c:af:73:c1:27:80:2b:9c:d6:ca:67:90:
e0:df:c3:b7:66:f5:76:91:fb:32:fd:50:71:c6:8e:2c:f3:6f:
66:0b:bc:3e:83:27:60:c9:32:98:a2:9b:62:ed:3a:48:fd:d0:
55:b9:f8:24:ed:b6:40:1f:c7:c7:0f:c0:d6:5f:75:23:ac:9b:
b1:fb:41:af:ab:8d:f0:c8:43:13:f0:bb:84:2d:4c:a5:f8:37:
7e:91:0d:61:a7:18:e9:9b:5e:d5:d4:cf:5f:1d:9a:e9:78:1a:
67:06:9c:17:3f:06:f6:ee:64:6e:5d:9f:84:3c:8f:6b:73:76:
b9:9f:8b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 14:09:54 2026 by rpki-client