
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft
File: l6zd4pEaCfOTXxhg2wV9TP9GssU.mft (raw, json)
Hash identifier: iHJktLyfrRStuxnqSD1XH9ps97rqZeF1NwWvao3mmNM=
Subject key identifier: 03:AC:2C:D6:AD:C2:13:87:55:F5:1A:B9:5F:FF:23:BB:B5:D8:55:95
Authority key identifier: 97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5
Certificate issuer: /CN=A91E7A75/serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5
Certificate serial: 0125
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft
Manifest number: 0110
Signing time: Wed 07 Oct 2026 06:32:25 +0000
Manifest this update: Wed 07 Oct 2026 06:32:25 +0000
Manifest next update: Wed 14 Oct 2026 06:32:25 +0000
Files and hashes: 1: l6zd4pEaCfOTXxhg2wV9TP9GssU.crl (hash: pJbepCebbS3UGiqsd095c8VMggGEz8vMnhhJYp7nFo0=)
2: 7538A8FC275211F0A14FD328C4F9AE02.roa (hash: wKpTIdTIZRF8pzS9lUnHOrHkh5HchxQFgkek0jpSD6Q=)
3: 74B37F24275211F0A14FD328C4F9AE02.roa (hash: F55zjQnFvkTNeRw59Rc/nAQUDsOUxPNiEUce26KcKVc=)
4: 9E314E3A275211F09DB11A29C4F9AE02.roa (hash: ouIXTA7nbMIsAmF3ndS+L28s40QPvKUpIo7ArtiHIu0=)
5: 9ECB0CF0275211F09DB11A29C4F9AE02.roa (hash: 5ZDy+q95r5zdw+R7DnGV36oaHIDbY23gtfzUTt//mwc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl
rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7A75, serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5
Validity
Not Before: Oct 7 06:32:25 2026 GMT
Not After : Oct 14 06:32:25 2026 GMT
Subject: CN=6ac5e779-4c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ab:71:7a:c2:d6:cb:1a:d0:5d:66:8e:13:17:
3d:e0:1b:f6:db:0e:ba:9e:9f:ea:7e:05:b4:b8:4c:
3f:36:10:0e:b3:aa:17:53:86:bc:d6:d2:87:04:85:
3e:14:b9:55:e7:20:37:c8:2b:51:7a:6f:09:02:47:
38:02:17:79:4e:dc:f1:5f:c0:37:b3:3e:0b:84:45:
3c:fc:09:e9:51:c0:a2:83:a5:6f:8e:08:cf:66:4e:
5b:bd:26:a4:7c:09:b7:a7:31:85:be:68:d9:d3:d1:
9f:6b:55:d3:93:c8:b3:b1:8b:33:88:bc:6f:d0:f3:
c5:8d:3e:32:d5:93:ed:4a:2e:bb:17:69:4b:59:65:
78:ae:4f:ad:40:99:66:a5:47:f1:71:2d:2c:9e:74:
f3:48:2f:95:84:bc:65:1f:eb:d3:58:62:92:46:78:
60:cf:7d:b7:3f:14:89:33:9a:a4:cb:3f:a6:ec:2f:
38:e5:83:d5:7e:9b:52:c7:7e:4b:0c:68:53:79:b3:
ce:40:4e:7d:e1:94:29:7a:2d:7d:d2:ed:37:8b:07:
26:30:34:00:2c:ca:41:a2:91:50:b7:75:90:9d:05:
b6:da:94:40:8a:9d:32:c1:04:cb:2a:2f:59:5d:c2:
41:f8:0b:cf:a4:b0:ec:7c:80:02:5c:b8:3d:c9:c8:
68:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AC:2C:D6:AD:C2:13:87:55:F5:1A:B9:5F:FF:23:BB:B5:D8:55:95
X509v3 Authority Key Identifier:
keyid:97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:4b:9a:df:b2:9b:a2:d6:f8:7c:c5:29:b5:07:29:18:3a:8d:
7d:e4:22:cd:98:95:c7:f2:72:ab:2d:03:35:e0:92:29:2a:2f:
c0:a6:a1:a9:c9:1a:f9:55:04:80:b0:fd:ee:f4:b5:42:e6:52:
0d:8d:11:6d:43:b7:dc:b0:aa:51:41:50:39:6a:bd:4d:b9:57:
d4:89:a7:8d:1e:3a:d2:15:51:68:6c:6d:8a:77:f4:b2:f5:ef:
a9:31:e4:34:fb:6a:58:8f:f1:cb:b2:77:7f:0c:62:5d:3b:5f:
90:bc:ee:76:88:ac:7c:ad:ae:aa:50:bf:0a:73:77:e1:99:fc:
66:e4:a7:66:16:4a:78:e0:ba:4a:68:1f:8c:c8:43:93:ac:73:
73:d9:0a:4f:3f:4b:1b:00:30:9c:b7:fc:4a:67:ec:34:c3:b5:
73:5f:3e:4c:6a:13:ab:58:87:15:c4:d6:21:ef:c3:09:13:9e:
93:be:32:c8:5e:4b:71:22:07:05:1c:da:ed:39:11:93:91:d3:
77:64:f2:94:a2:70:c7:f1:14:b4:1c:b3:ce:63:09:81:0d:29:
d4:32:17:ee:db:03:1f:b3:a0:8d:d2:0a:69:c4:f2:af:e0:96:
cb:b0:49:b1:c5:81:e9:4f:83:00:d8:a8:95:98:10:b7:b6:53:
cb:5e:cf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:33:18 2026 by rpki-client