
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
File: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft (raw, json)
Hash identifier: 7OW9bW2ighmtKJo6wxD18hxziiNNN4ZaIqPXKsEZ/tw=
Subject key identifier: EE:A1:BA:23:FA:F7:C6:0C:50:DA:33:D5:5C:70:27:5F:33:F5:67:59
Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14
Certificate issuer: /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
Certificate serial: 0B73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
Manifest number: 0B4B
Signing time: Tue 28 Jul 2026 19:31:46 +0000
Manifest this update: Tue 28 Jul 2026 19:31:46 +0000
Manifest next update: Tue 04 Aug 2026 19:31:46 +0000
Files and hashes: 1: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl (hash: P5Jz8CKmRo5fymcbQpxG/ufATlciGb040Tsf5symBZc=)
2: BE633CD283A611EE804BB319C4F9AE02.roa (hash: VEGEjvA8mXlTYgeX41lw6Rhiexaef4whXcV7cTx74tM=)
3: ACFA076483A611EE9C62DE0CC4F9AE02.roa (hash: bmegegPDxR1urUoWVZTcpCbAwDOttLwteVNluF5nkEc=)
4: 8AD0E57C8FE311EB89767C78C4F9AE02.roa (hash: 5OKWpLiITpzC82N35iOhZbsAzgBXSVM9wxMVAwNfKSI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl
rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2931 (0xb73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CBD7, serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
Validity
Not Before: Jul 28 19:31:46 2026 GMT
Not After : Aug 4 19:31:46 2026 GMT
Subject: CN=6a6903a2-5cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:7e:4c:46:2d:11:fb:c0:fe:7a:8c:92:01:
23:c5:fa:8f:88:03:70:05:ea:4d:32:66:c6:58:31:
4b:df:b7:17:3a:65:14:d8:9b:5f:bc:0a:5f:c5:c1:
45:3d:57:81:84:c3:8d:69:7a:92:33:b1:ec:89:f2:
81:c3:21:63:57:41:76:9b:7e:d9:7b:ff:fa:36:26:
e2:42:cb:4c:6b:38:93:23:36:75:d8:8a:80:3c:c3:
36:7f:03:2d:70:69:0f:34:60:9d:9b:bd:1d:1a:8d:
97:01:15:f6:0f:92:c1:de:35:58:fa:e1:02:83:00:
77:01:74:00:a2:de:d6:a4:73:36:7b:94:73:7b:96:
24:42:8d:fe:9d:9e:01:c2:d3:fc:aa:71:5b:a6:ee:
df:66:97:b9:d2:1b:82:f5:40:b8:4f:e6:2d:9f:85:
4e:c0:d7:37:1f:e0:48:ff:df:f3:43:22:e7:93:eb:
96:2a:cf:34:81:82:60:d8:d5:4e:12:0c:82:1b:43:
d4:dd:f6:18:39:5f:e9:de:15:ec:0b:b2:63:8e:37:
a4:32:c4:33:6f:5e:69:df:5a:a0:62:52:6b:85:11:
e2:b0:0f:a8:fe:5f:49:25:34:83:4b:fd:69:79:b0:
fe:01:97:ce:65:a3:44:37:ca:6e:94:00:ee:ac:d6:
9e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A1:BA:23:FA:F7:C6:0C:50:DA:33:D5:5C:70:27:5F:33:F5:67:59
X509v3 Authority Key Identifier:
keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4a:ea:43:df:63:ff:dc:ea:b1:99:c8:30:16:bd:50:4e:01:
54:01:cc:66:e4:39:e9:82:ba:c1:15:25:82:79:f8:9e:cc:39:
3d:41:47:e0:7f:4c:25:ef:fc:c6:f5:54:8e:90:a4:7a:7b:10:
24:94:3c:f3:85:90:e7:ec:a6:aa:8d:c9:ea:23:68:1e:ac:25:
db:b6:a8:3e:bc:48:04:fa:83:18:74:81:b7:97:95:27:f9:3e:
8b:95:a7:22:67:f4:71:a7:11:6e:27:5f:0c:1b:cd:d7:fe:b0:
34:f0:e9:35:df:52:7e:fd:03:29:49:8a:2c:c3:f7:66:bf:8d:
c6:93:47:59:84:f2:e5:6f:22:0a:87:81:12:b2:06:4b:62:1a:
6f:22:e8:e1:51:28:4b:7d:62:5e:7a:48:b4:f5:74:b8:1c:37:
59:30:54:14:76:ac:84:49:14:61:23:a4:6c:74:72:26:b2:ef:
35:18:e8:2a:78:04:7b:a6:23:39:77:9e:fb:1a:af:a9:98:da:
6f:d2:ee:b2:4d:34:dd:64:c9:dd:7b:31:66:c0:20:4d:d4:f6:
7f:bf:b1:9a:a8:71:93:ca:0b:14:25:85:e7:70:c3:0d:4f:15:
cd:68:19:29:0d:81:39:8b:4d:12:2b:b2:86:26:47:ae:8b:45:
9d:eb:84:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:40:04 2026 by rpki-client