
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
File: R6cRTih-sdyDXQfpgEXvRvU-fFc.mft (raw, json)
Hash identifier: JLc1U9T3wtUq59+4grbsUKrKjmOjSY9FvanbtEz9Ihk=
Subject key identifier: 41:89:A2:FF:1F:10:30:71:D9:D4:5C:D8:20:55:84:82:D9:B1:66:CB
Authority key identifier: 47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57
Certificate issuer: /CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
Certificate serial: 1E56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
Manifest number: 1E40
Signing time: Tue 28 Jul 2026 16:09:52 +0000
Manifest this update: Tue 28 Jul 2026 16:09:51 +0000
Manifest next update: Tue 04 Aug 2026 16:09:51 +0000
Files and hashes: 1: R6cRTih-sdyDXQfpgEXvRvU-fFc.crl (hash: GwgT3EtPC0xIYUl3VN3ns+M8mnzAIlrcOk50B3eodgY=)
2: B7BA9860DB8A11F09F03163163D3641D.roa (hash: O53sGlqKt1W1OA/6Skh5fLhJK6tOZwiFqxR6V2JMvYc=)
3: B842F0DEDB8A11F09F03163163D3641D.roa (hash: ks313B+YVez30ZvOkXppIDe7jBhr+JL2wzA7+C6C6as=)
4: A264F35C8BAC11E7AFBAB71AC4F9AE02.roa (hash: SlJiezfKVA682d59XvPf2AbS2jgh+2UE1l8E3xESDCc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl
rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7766 (0x1e56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C16B5, serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
Validity
Not Before: Jul 28 16:09:51 2026 GMT
Not After : Aug 4 16:09:51 2026 GMT
Subject: CN=6a68d450-8a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d8:23:0e:d7:bb:2c:52:16:33:b1:e7:45:6f:
54:b7:34:ad:35:07:1b:d4:27:4d:8e:80:eb:a5:fd:
cc:c0:cc:db:da:1c:10:5f:f6:59:7f:d5:b9:46:6b:
f1:fb:88:2d:cb:35:6b:7d:b4:33:d0:cb:ee:39:26:
9b:7d:77:b4:c5:cc:e0:d9:53:31:88:5e:03:39:f1:
4f:86:10:c6:59:7e:50:90:01:18:cd:90:bc:b6:63:
12:a1:3f:19:a8:f8:5d:64:77:7b:2c:1f:e0:8c:bd:
3a:8f:62:31:9f:17:7d:7c:2a:ab:64:e8:95:5c:b3:
c6:90:cf:51:f2:aa:3a:ec:76:fb:cd:87:76:95:09:
0e:15:12:df:19:71:20:c4:39:58:c5:ca:83:42:5d:
e8:39:68:20:9b:84:a7:f8:b0:51:f9:75:d6:d2:de:
3a:2b:0a:d6:96:14:46:eb:43:a0:0b:d9:cb:cb:b8:
a4:a2:55:ad:44:ff:39:65:bf:9a:a6:8d:e8:94:a4:
c6:71:2a:c4:4e:7d:21:32:70:ef:32:56:6d:9c:71:
c1:52:f9:0e:a1:3e:1d:57:b9:20:30:b3:fa:73:3e:
25:1a:35:66:1f:ff:b6:82:24:ef:f9:15:e4:83:1e:
34:9e:32:5e:22:75:a3:43:e6:8d:d2:87:71:63:65:
a0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:89:A2:FF:1F:10:30:71:D9:D4:5C:D8:20:55:84:82:D9:B1:66:CB
X509v3 Authority Key Identifier:
keyid:47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:6b:00:ca:61:db:db:75:c1:f4:7b:81:0e:a1:b8:06:1c:80:
56:0a:61:53:a9:43:b4:9a:89:ed:06:b6:f0:23:98:c2:56:8a:
90:af:5f:a3:6d:c1:ef:1d:4d:e5:dc:16:76:a6:83:a8:40:7f:
2d:fe:77:1a:38:9a:ae:e4:aa:b7:31:fa:12:d7:2f:d7:e6:71:
f2:65:07:78:87:ee:89:d0:ee:8d:2a:b2:76:53:6e:dd:db:8d:
78:0c:75:d0:88:fa:0f:c1:a1:01:0b:4f:a7:59:fe:6c:54:13:
ab:04:7d:75:bf:fc:37:25:f3:19:ec:d4:87:c7:1f:2b:96:14:
27:d5:f5:cb:e3:d8:c4:8d:78:40:45:7d:78:85:3f:d3:a0:55:
f9:07:cf:55:83:81:51:01:be:02:f3:c5:d8:f8:1c:00:6e:e7:
9b:85:43:d7:80:f3:63:cc:38:ec:98:80:05:cf:79:fc:3c:3e:
f6:4e:c7:50:9e:68:71:01:76:bd:23:35:fb:27:f9:95:90:83:
d3:42:74:af:e6:88:ec:dc:fa:1c:f8:4a:20:24:db:ee:86:3e:
c3:1c:a3:e8:fa:d1:bf:c8:03:98:6a:40:cf:d1:0a:2c:3a:d8:
83:4a:1f:e5:f7:6c:b7:b7:41:67:0e:fb:bd:25:4e:e5:1d:f3:
4d:a8:17:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:27:25 2026 by rpki-client