
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft
File: 6mA98ryp7Vu3vSDB9LxR15fApj8.mft (raw, json)
Hash identifier: g1SpqQ6eIKJloLwDhUOGO5hpguZwMuvZGOFFpycpZbk=
Subject key identifier: BA:60:2D:C0:70:70:13:14:8B:2A:03:C2:8A:E9:49:9B:81:C4:F5:FC
Authority key identifier: EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F
Certificate issuer: /CN=A9169E54/serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F
Certificate serial: D5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft
Manifest number: CF
Signing time: Mon 27 Jul 2026 08:53:04 +0000
Manifest this update: Mon 27 Jul 2026 08:53:03 +0000
Manifest next update: Mon 03 Aug 2026 08:53:03 +0000
Files and hashes: 1: 6mA98ryp7Vu3vSDB9LxR15fApj8.crl (hash: 3WscPcFPlEZ29IMjttGa3MWxTNUEwC1x+afx/yZMtA4=)
2: 554EE88487D911F08B837C49C4F9AE02.roa (hash: pSDxkuk7LI5Yr3q5SMg1O4SiOAQsAsy+7oi3xOZRpJU=)
3: C2A46ED64FFD11F085A32C7CC4F9AE02.roa (hash: SE7L9xxDYALISbbgjMK3D5a2XUt+rTLuDYxmXb8JkIc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl
rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:53:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169E54, serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F
Validity
Not Before: Jul 27 08:53:03 2026 GMT
Not After : Aug 3 08:53:03 2026 GMT
Subject: CN=6a671c6f-2195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ef:12:fe:16:df:20:a3:62:44:0d:70:2a:d6:
15:49:9c:87:f5:1d:8b:f0:4d:67:fb:ba:85:b8:7b:
d3:0a:8d:c3:d3:03:cd:7f:de:9f:8f:12:95:6f:4c:
c6:49:8f:c3:47:75:80:ee:2f:aa:16:6d:aa:13:21:
5c:f0:0f:cd:b5:63:e2:e9:5a:c9:49:3f:68:23:15:
3f:a4:bd:e5:f3:9f:57:f1:e2:b7:c7:a7:d2:9a:fc:
9a:e1:a6:20:4b:5b:ca:9c:47:0a:01:d5:f3:b2:78:
6e:74:1a:86:7f:bd:89:8f:44:1d:fc:26:04:a1:1a:
fd:9d:51:b5:e4:95:5c:f5:63:11:da:12:7a:63:09:
b1:28:5a:44:93:99:fb:d8:0f:a6:99:11:d9:99:2c:
96:1f:08:a3:32:8e:3e:59:e9:1e:ee:d0:1f:c4:3b:
15:24:33:02:d7:af:01:13:b5:28:d1:20:5b:46:22:
50:e6:4f:6a:04:ed:27:15:9e:78:19:ff:80:aa:3b:
64:49:d4:34:09:00:e8:83:18:f1:a4:8f:b3:03:c3:
0b:69:0f:53:2f:e9:10:cb:3b:e6:47:29:b8:55:b3:
ab:07:d4:53:b3:fc:d7:69:10:a4:14:67:35:c5:3f:
e4:76:ed:a9:e8:04:a1:7e:40:b2:7c:c2:94:89:ce:
73:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:60:2D:C0:70:70:13:14:8B:2A:03:C2:8A:E9:49:9B:81:C4:F5:FC
X509v3 Authority Key Identifier:
keyid:EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:73:04:51:dc:84:6e:3e:d7:20:bb:e7:9e:c8:a9:14:49:bf:
0b:29:bd:ec:41:92:4b:17:75:ae:ce:7e:85:c1:9f:1f:17:a5:
42:85:2e:23:bd:e7:5d:94:89:37:eb:e5:d9:42:21:7c:01:8d:
49:04:b5:e8:47:c7:25:be:dc:99:4b:37:32:b6:f9:3d:d6:ad:
db:96:43:ef:61:b4:d5:bf:b5:5a:55:e4:60:e2:7e:82:c6:27:
23:05:f8:20:ec:16:53:e2:c3:6a:9f:5d:90:7e:3c:62:09:1b:
1c:a4:3e:78:88:2e:6c:80:4f:97:16:b3:25:d6:0b:81:c9:31:
23:f8:c8:3e:92:2d:4d:f8:ce:9d:58:39:b6:93:d8:f0:9f:a2:
21:6a:cb:49:c2:14:0b:11:dd:d7:e2:85:25:b1:cc:fb:98:b9:
55:2c:55:a3:33:38:b3:2c:28:ad:39:23:6e:a0:db:10:8c:19:
d8:3f:5d:cf:12:b8:6c:e9:78:b0:71:6d:07:66:81:6d:b1:ba:
0d:5c:33:66:58:d0:21:8f:c2:40:88:36:a4:fb:19:8e:08:4d:
f2:d6:fe:4b:3e:3d:ab:53:3e:7f:a9:9f:36:8a:d0:b5:b1:e4:
62:61:ab:1e:ed:cb:ab:ec:d5:dd:07:89:79:7d:5e:63:06:af:
36:4e:af:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:03:46 2026 by rpki-client