
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft
File: l6zd4pEaCfOTXxhg2wV9TP9GssU.mft (raw, json)
Hash identifier: f6VtGi6eBzlUsSkVoEslJ2BpTVYMlhtIs6VOeOS/+cM=
Subject key identifier: FA:43:E5:9B:AF:3E:0B:5D:B9:75:39:5A:87:7D:25:F4:0B:68:F5:6A
Authority key identifier: 97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5
Certificate issuer: /CN=A91E7A75/serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5
Certificate serial: E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft
Manifest number: D4
Signing time: Thu 11 Jun 2026 09:03:29 +0000
Manifest this update: Thu 11 Jun 2026 09:03:29 +0000
Manifest next update: Thu 18 Jun 2026 09:03:29 +0000
Files and hashes: 1: l6zd4pEaCfOTXxhg2wV9TP9GssU.crl (hash: T/hCT6pYBs2JGvuPfzKptkGNZh6K5+te/t7eVW1hYzk=)
2: 7538A8FC275211F0A14FD328C4F9AE02.roa (hash: wKpTIdTIZRF8pzS9lUnHOrHkh5HchxQFgkek0jpSD6Q=)
3: 9E314E3A275211F09DB11A29C4F9AE02.roa (hash: ouIXTA7nbMIsAmF3ndS+L28s40QPvKUpIo7ArtiHIu0=)
4: 9ECB0CF0275211F09DB11A29C4F9AE02.roa (hash: 5ZDy+q95r5zdw+R7DnGV36oaHIDbY23gtfzUTt//mwc=)
5: 74B37F24275211F0A14FD328C4F9AE02.roa (hash: F55zjQnFvkTNeRw59Rc/nAQUDsOUxPNiEUce26KcKVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl
rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 09:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7A75, serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5
Validity
Not Before: Jun 11 09:03:29 2026 GMT
Not After : Jun 18 09:03:29 2026 GMT
Subject: CN=6a2a79e1-a077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:44:ea:f1:13:5b:87:87:56:4b:9b:c4:38:
8e:5e:cc:d3:ae:04:73:b9:8d:90:d8:87:96:08:96:
fc:cd:4c:a1:79:3a:6e:69:e9:0b:02:a0:a3:f2:6b:
2c:f2:8d:5a:d4:5a:bb:3e:96:29:08:38:42:7f:f1:
a7:10:b8:e3:f1:eb:33:d2:5c:7b:4f:dc:fd:88:c0:
13:81:40:fb:0a:a6:9e:83:ba:48:1c:34:d9:3d:bc:
db:96:d7:1e:a2:83:ea:2b:02:40:ac:b8:27:30:63:
b0:fa:d9:e4:2b:0b:3b:fd:78:07:d0:70:a2:6e:ab:
a9:f3:b3:f8:65:66:6d:27:ba:39:41:b9:2c:15:69:
10:4b:2f:da:f4:ed:18:45:64:10:00:12:41:25:dc:
de:f0:de:09:be:c1:e3:3b:13:f7:14:3a:60:c8:e8:
95:4f:e9:5a:57:31:a7:20:e3:21:41:c8:bf:aa:33:
e0:fc:7d:e3:86:40:4e:64:29:5c:4b:7b:81:ab:fc:
f2:da:43:a1:7c:50:41:d6:3c:97:ac:55:c0:6f:8d:
c9:9f:91:4c:10:29:62:50:0a:28:f9:dc:20:6b:6b:
0a:48:ac:65:50:d3:4d:ce:61:e0:29:70:2a:59:fb:
b8:e8:d6:ab:53:af:41:f2:98:09:72:67:62:55:6b:
ad:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:43:E5:9B:AF:3E:0B:5D:B9:75:39:5A:87:7D:25:F4:0B:68:F5:6A
X509v3 Authority Key Identifier:
keyid:97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:2b:e2:f4:ee:f0:11:c0:b1:5d:ee:3c:04:a2:5f:1f:04:51:
e7:f5:40:a7:77:59:4e:8c:d7:3b:c2:a9:48:a3:d1:6e:b6:22:
76:68:3c:30:22:86:d6:92:57:f1:6e:58:c2:01:f3:7f:a0:bb:
f3:09:73:d9:6f:a0:fd:d0:bb:96:8b:6a:4e:09:1a:0d:a4:2b:
4d:91:39:5c:85:53:f5:1a:d6:7d:94:78:f4:af:80:db:00:ab:
61:9f:59:39:0f:5f:8a:25:0f:63:c1:2f:e3:ca:8e:90:e2:33:
0c:55:4a:c6:c3:0a:e7:35:fa:a5:9f:72:fe:bf:3f:96:04:d9:
37:e1:e8:d0:13:e4:a7:b6:e2:4f:e5:75:a3:8a:50:65:4a:9e:
43:a8:4f:d9:1b:a6:15:eb:56:92:11:f8:5f:43:93:1d:ca:ad:
95:95:df:41:f2:26:a9:14:ef:2a:8b:56:2f:fc:ec:8a:c2:af:
38:4b:b9:9a:23:f4:f4:91:ab:25:18:e3:e5:ac:8f:d1:b0:70:
b3:44:73:dd:c2:67:22:ce:7c:13:86:dc:41:dd:e3:f1:76:06:
3c:29:cc:f0:5b:e7:3b:4c:7d:66:12:46:17:8e:3a:83:22:bf:
86:12:3a:d1:0d:76:5c:05:2a:21:bb:89:00:fb:58:04:dc:a2:
1a:e4:b4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:10:29 2026 by rpki-client