
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft
File: 6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft (raw, json)
Hash identifier: YSCqChl9oG8A5D40pwfyCCeSaOth3mgZ6UNhd0Divro=
Subject key identifier: ED:25:05:9E:AE:BE:EF:57:2D:1F:CE:2E:FA:F0:2B:7A:9C:A7:2E:5F
Authority key identifier: EB:2B:0C:6B:9C:8B:7F:09:47:71:82:67:46:AF:7D:46:0E:DC:47:AA
Certificate issuer: /CN=A91A13C2/serialNumber=EB2B0C6B9C8B7F094771826746AF7D460EDC47AA
Certificate serial: 059F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft
Manifest number: 0596
Signing time: Mon 27 Jul 2026 00:09:27 +0000
Manifest this update: Mon 27 Jul 2026 00:09:26 +0000
Manifest next update: Mon 03 Aug 2026 00:09:26 +0000
Files and hashes: 1: 6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl (hash: q5+QQJ2bNkw/9f9QsVW5TMmgY61gwsHwoCnVI7Z9YWk=)
2: E11714EE89E711F0B91AE62DC4F9AE02.roa (hash: OIPAl0Bqgfl85H4MlL10ohXTIT0hCHN5qv5/jcubhwc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl
rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1439 (0x59f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A13C2, serialNumber=EB2B0C6B9C8B7F094771826746AF7D460EDC47AA
Validity
Not Before: Jul 27 00:09:26 2026 GMT
Not After : Aug 3 00:09:26 2026 GMT
Subject: CN=6a66a1b7-e027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:73:9a:e0:a4:b0:0c:66:7f:fa:f4:cf:ec:4c:
62:62:7b:0c:84:52:46:b6:26:a9:e2:38:a5:f6:ed:
1c:a0:ea:85:75:f7:22:e5:1f:d1:45:f4:7c:62:1e:
ce:27:b0:a5:6d:c8:77:96:a6:7a:c4:dd:c4:bf:a5:
78:4d:62:66:62:57:e1:85:ac:65:e6:57:b0:ad:08:
f1:fa:d1:84:ca:f8:02:63:c6:aa:f8:a5:94:fa:94:
e5:1e:36:3f:19:29:00:65:d5:cb:6e:4e:bb:64:54:
23:0c:ac:80:a2:f7:7f:74:de:b0:a3:f3:f6:c2:1a:
29:b5:b9:3e:e7:b0:e0:28:1f:33:22:d8:90:57:15:
f7:75:12:6f:12:0f:85:2f:59:9d:c0:00:05:90:f9:
24:33:b0:43:79:1f:ad:82:ea:12:1b:47:94:4f:cb:
c1:f6:c6:f6:77:53:9c:6e:65:d3:51:be:50:5b:b1:
e1:35:65:74:4e:1c:b8:38:ab:09:8e:53:de:bf:33:
4a:af:b5:e3:05:0f:94:79:f1:71:a1:43:40:c4:74:
27:68:5c:ed:3f:5d:1c:67:84:fd:9c:c6:88:dd:11:
68:08:bd:6d:5c:73:93:31:81:d3:76:3b:9e:2f:6a:
48:00:50:fb:a4:b2:fe:83:ea:f9:81:b8:84:68:d4:
88:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:25:05:9E:AE:BE:EF:57:2D:1F:CE:2E:FA:F0:2B:7A:9C:A7:2E:5F
X509v3 Authority Key Identifier:
keyid:EB:2B:0C:6B:9C:8B:7F:09:47:71:82:67:46:AF:7D:46:0E:DC:47:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:71:02:28:dd:ce:c2:5e:62:f5:67:8b:0d:8b:f8:7c:db:a1:
1c:31:82:a5:eb:4c:61:1c:3b:c6:42:fa:b8:c9:d1:82:f4:eb:
e2:9f:2f:40:89:33:c4:16:e8:b9:7e:e5:44:f6:90:91:14:09:
c2:4b:79:69:23:d6:13:ae:f9:d8:0a:bc:b4:00:ae:d4:9a:e7:
36:96:62:79:94:94:71:1c:cb:46:35:99:c0:43:e1:59:b0:73:
fa:45:fe:7f:b1:4a:46:9e:6b:e2:7f:b9:00:65:56:73:40:18:
30:18:0c:1f:e0:57:4c:a3:ec:ab:f2:98:c6:8d:45:26:d4:19:
b5:c9:1e:74:cc:9e:42:cd:2b:b0:29:47:13:a7:55:d6:97:fe:
9d:cb:fe:f0:12:3a:a3:36:f6:ac:52:a5:bd:49:bf:1b:b4:ce:
bb:fb:0b:1c:d4:a3:4f:62:79:2c:2b:ca:31:1c:0e:8b:f0:3b:
3a:d8:ed:92:8f:92:28:5c:c1:f1:ed:a7:27:02:1c:3c:55:23:
36:d0:83:73:25:1c:83:e4:bb:c1:02:9f:62:4d:53:eb:41:79:
d9:19:d0:e9:55:ee:19:46:89:38:a1:1b:c1:31:3d:e9:ee:21:
35:28:45:5e:2b:db:d6:ef:ca:cf:9e:72:ae:dc:43:bc:2e:78:
ed:fd:93:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:36:07 2026 by rpki-client