
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft
File: l6zd4pEaCfOTXxhg2wV9TP9GssU.mft (raw, json)
Hash identifier: cyBOeCUMA5r2F+4e2gJJJAgt803DeCU5BLwXDh31xDE=
Subject key identifier: B9:F6:4E:54:E5:16:21:D9:C6:34:BF:12:55:CE:B6:82:1C:A3:D0:CF
Authority key identifier: 97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5
Certificate issuer: /CN=A91E7A75/serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5
Certificate serial: 010C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft
Manifest number: F7
Signing time: Wed 19 Aug 2026 06:59:11 +0000
Manifest this update: Wed 19 Aug 2026 06:59:11 +0000
Manifest next update: Wed 26 Aug 2026 06:59:11 +0000
Files and hashes: 1: l6zd4pEaCfOTXxhg2wV9TP9GssU.crl (hash: u/3PXFNYc5j7WMku7TBAxkN1EbdtJpFaQpcf/ihxdfk=)
2: 74B37F24275211F0A14FD328C4F9AE02.roa (hash: F55zjQnFvkTNeRw59Rc/nAQUDsOUxPNiEUce26KcKVc=)
3: 7538A8FC275211F0A14FD328C4F9AE02.roa (hash: wKpTIdTIZRF8pzS9lUnHOrHkh5HchxQFgkek0jpSD6Q=)
4: 9ECB0CF0275211F09DB11A29C4F9AE02.roa (hash: 5ZDy+q95r5zdw+R7DnGV36oaHIDbY23gtfzUTt//mwc=)
5: 9E314E3A275211F09DB11A29C4F9AE02.roa (hash: ouIXTA7nbMIsAmF3ndS+L28s40QPvKUpIo7ArtiHIu0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl
rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 06:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7A75, serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5
Validity
Not Before: Aug 19 06:59:11 2026 GMT
Not After : Aug 26 06:59:11 2026 GMT
Subject: CN=6a85543f-f927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:f3:32:6e:38:5c:4e:87:39:14:1c:76:5b:
6a:d2:30:68:4a:bc:bb:89:ca:01:22:05:6e:5b:84:
35:82:e8:d0:d1:37:9c:4d:bb:0e:93:d3:80:2f:b3:
6e:6e:a8:3d:a6:c3:c7:8a:9e:ab:be:5c:9b:0f:a7:
1e:2e:4d:dc:f5:47:07:05:54:dd:8b:f1:55:09:2c:
aa:4b:37:c7:9d:47:ef:91:c8:c0:cd:e3:ed:f8:ff:
95:ed:da:f0:49:fe:17:f9:fe:5c:04:4a:51:c2:9f:
53:81:30:84:d1:d2:36:d3:34:6f:35:71:4c:e1:76:
29:d7:98:9f:a4:cc:5c:62:a2:63:42:d1:89:b5:c4:
c4:f3:cb:b5:76:10:1e:81:4d:3d:2d:96:0f:d9:f4:
4f:de:74:35:26:cd:3e:ff:1b:78:37:a8:27:d0:91:
3a:fa:f9:7c:ac:4d:8e:55:08:08:d8:39:81:fb:44:
67:9a:27:f0:03:81:31:aa:8c:77:ee:40:a2:b6:65:
55:62:2c:65:ae:be:dc:8e:a2:15:de:5b:b6:00:9d:
93:8b:2e:df:8c:90:c8:da:62:83:3e:28:ce:67:ba:
7e:1f:6e:85:b3:4a:13:eb:92:00:8c:3f:12:51:b9:
de:77:36:cd:ef:9b:59:19:97:2e:01:fa:1a:cd:99:
3c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F6:4E:54:E5:16:21:D9:C6:34:BF:12:55:CE:B6:82:1C:A3:D0:CF
X509v3 Authority Key Identifier:
keyid:97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:17:d4:ed:90:03:49:80:a3:25:40:03:ac:66:37:56:2b:db:
8b:4c:97:7b:f3:45:75:1c:34:44:c1:19:04:36:84:78:ec:23:
24:ec:56:5b:bb:e3:b5:c7:b5:57:af:3a:8f:e5:52:8d:c5:5a:
9a:f2:ce:39:0e:ce:d9:be:7f:aa:f1:91:24:9f:e5:da:e2:5b:
5e:89:8f:62:16:d8:29:02:8f:80:ad:17:3c:ef:83:f7:28:1b:
b2:84:2f:ba:63:bf:a5:9e:2e:4f:2f:c2:fa:d3:4f:29:9c:bc:
46:e9:0d:7a:f3:5f:d8:ae:be:95:8c:2e:9d:83:27:10:e9:48:
62:a1:24:19:d5:5e:3a:92:33:c8:52:c0:d9:a7:1a:50:9f:aa:
2b:86:43:fa:f4:b6:c7:d9:08:f9:af:1b:ee:0b:2a:c9:c4:12:
19:93:9c:cb:fc:f4:33:45:db:a3:33:fe:12:bc:a6:38:39:8e:
85:f2:47:c2:68:f9:60:9f:bb:f9:9a:6e:e5:1c:aa:18:ca:7c:
a3:99:ae:37:b6:bb:ed:4f:5e:81:f6:7e:f3:da:15:42:a7:e1:
92:12:77:ed:39:54:ae:28:a2:77:44:8e:6e:88:bc:c9:37:e4:
fc:f6:97:bb:ad:78:9f:23:fa:11:ec:1c:9b:89:31:50:44:91:
90:3c:57:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTdBNzUxMTAvBgNVBAUTKDk3QUNEREUyOTExQTA5RjM5MzVGMTg2MERCMDU3RDRD
RkY0NkIyQzUwHhcNMjYwODE5MDY1OTExWhcNMjYwODI2MDY1OTExWjAYMRYwFAYD
VQQDEw02YTg1NTQzZi1mOTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAymzzMm44XE6HORQcdltq0jBoSry7icoBIgVuW4Q1gujQ0TecTbsOk9OAL7Nu
bqg9psPHip6rvlybD6ceLk3c9UcHBVTdi/FVCSyqSzfHnUfvkcjAzePt+P+V7drw
Sf4X+f5cBEpRwp9TgTCE0dI20zRvNXFM4XYp15ifpMxcYqJjQtGJtcTE88u1dhAe
gU09LZYP2fRP3nQ1Js0+/xt4N6gn0JE6+vl8rE2OVQgI2DmB+0RnmifwA4Exqox3
7kCitmVVYixlrr7cjqIV3lu2AJ2Tiy7fjJDI2mKDPijOZ7p+H26Fs0oT65IAjD8S
UbnedzbN75tZGZcuAfoazZk8OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLn2TlTl
FiHZxjS/ElXOtoIco9DPMB8GA1UdIwQYMBaAFJes3eKRGgnzk18YYNsFfUz/RrLF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0E3NS9FNkY0QjZEQTI3
NTExMUYwQUNGMEFGMjRDNEY5QUUwMi9sNnpkNHBFYUNmT1RYeGhnMndWOVRQOUdz
c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2w2emQ0cEVhQ2ZPVFh4aGcyd1Y5VFA5R3NzVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
N0E3NS9FNkY0QjZEQTI3NTExMUYwQUNGMEFGMjRDNEY5QUUwMi9sNnpkNHBFYUNm
T1RYeGhnMndWOVRQOUdzc1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAshfU7ZADSYCjJUADrGY3Vivbi0yXe/NFdRw0RMEZBDaEeOwjJOxWW7vjtce1
V686j+VSjcVamvLOOQ7O2b5/qvGRJJ/l2uJbXomPYhbYKQKPgK0XPO+D9ygbsoQv
umO/pZ4uTy/C+tNPKZy8RukNevNf2K6+lYwunYMnEOlIYqEkGdVeOpIzyFLA2aca
UJ+qK4ZD+vS2x9kI+a8b7gsqycQSGZOcy/z0M0XbozP+ErymODmOhfJHwmj5YJ+7
+Zpu5RyqGMp8o5muN7a77U9egfZ+89oVQqfhkhJ37TlUriiid0SOboi8yTfk/PaX
u614nyP6Eewcm4kxUESRkDxXnw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:43:44 2026 by rpki-client