
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
File: 6XepImIg6MeKHRs74E1gzcyKIYg.mft (raw, json)
Hash identifier: OPqc6fJvQZRVfggg5WzIDwWVXW8m3TYtpDHKj/P7Ul0=
Subject key identifier: 0C:03:9B:17:48:C1:FA:9A:C3:76:E7:C9:83:10:CD:DD:B6:13:21:55
Authority key identifier: E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88
Certificate issuer: /CN=A91FC5BD/serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188
Certificate serial: 01A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
Manifest number: 019A
Signing time: Mon 27 Jul 2026 06:03:17 +0000
Manifest this update: Mon 27 Jul 2026 06:03:16 +0000
Manifest next update: Mon 03 Aug 2026 06:03:16 +0000
Files and hashes: 1: 6XepImIg6MeKHRs74E1gzcyKIYg.crl (hash: B78UlXeW1QG7ZFY1sIzeHbF5qfFiq1S/iKq/YAx7Foo=)
2: 5B6A06725D2C11F080B2DC7BC4F9AE02.roa (hash: luJDZXUCsErEO6dlGQ0NaKVijOt5Fv1/7lPhVmE4g3Q=)
3: 1101B5C01CEC11EFA7CDC085C4F9AE02.roa (hash: P9IZK1ovU783CyWJnT8g69cd8sfR6u3xdDmab8jhoBs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl
rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423 (0x1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC5BD, serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188
Validity
Not Before: Jul 27 06:03:16 2026 GMT
Not After : Aug 3 06:03:16 2026 GMT
Subject: CN=6a66f4a5-d949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ff:d5:73:66:f2:a1:86:5f:3b:b5:be:88:4e:
ce:8d:4e:0c:31:a8:68:d6:48:93:95:28:bb:c0:d9:
eb:23:16:cb:e9:64:64:05:81:a8:71:f3:7c:e9:27:
23:2e:49:89:2a:16:1b:d0:c6:12:ee:fa:90:c5:1d:
b5:43:ef:95:e0:1e:dc:42:02:73:d5:da:3b:2e:a0:
5f:01:79:15:99:63:b0:31:ea:f9:df:76:47:59:11:
0c:6b:03:31:83:68:10:54:bf:25:ba:f1:18:96:02:
7a:0d:b1:7a:2a:f9:0b:4f:ff:c6:43:15:83:7a:8f:
d0:73:f6:4c:7d:c4:2d:97:53:8c:52:e9:36:fe:d2:
bd:66:34:88:c9:37:70:cf:4c:64:1d:c5:c7:13:1e:
85:4d:b2:bc:d8:4f:0a:98:82:59:b1:a1:c9:9f:3b:
34:93:8e:51:c5:b7:bb:48:49:2f:30:00:a3:2d:e6:
b4:fb:32:3e:ea:62:5c:c7:75:07:39:f4:2a:1d:3e:
b7:b7:6f:b3:b5:3f:39:56:07:0a:75:53:48:84:68:
5f:6b:9c:7c:60:62:09:84:f8:42:71:68:a1:8e:ac:
da:a1:94:d8:6b:41:52:08:b4:c7:ab:46:13:4d:08:
1f:d1:09:4f:22:64:a8:6b:04:2c:14:e5:1b:54:0f:
9b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:03:9B:17:48:C1:FA:9A:C3:76:E7:C9:83:10:CD:DD:B6:13:21:55
X509v3 Authority Key Identifier:
keyid:E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:50:56:aa:e2:e0:79:5b:ee:7c:15:75:49:3b:f7:78:4a:bd:
e7:a0:a2:c7:e5:65:8e:aa:39:07:0d:cd:69:8b:fc:e6:eb:c7:
b0:16:ce:e2:78:71:fa:6d:d3:94:5f:97:ea:91:15:01:37:51:
18:c7:4b:49:9b:bc:a3:df:08:82:67:9b:97:2a:43:24:5f:b7:
23:fa:6a:b1:bf:7f:99:7a:44:c5:04:7d:5c:1b:0f:46:fc:4c:
1c:d4:10:d2:27:63:94:ef:98:e1:30:f1:1f:c7:11:ba:43:0c:
97:a9:b4:f5:0c:9f:e6:b0:e3:11:22:3b:d1:99:0d:2d:af:e3:
c8:ea:18:5e:b0:1d:9f:10:2e:1e:7c:8b:3a:3f:70:52:ef:2f:
7e:ca:c4:fc:b5:20:82:c7:18:e7:b6:7b:c5:e1:b9:3b:cf:ab:
26:03:01:21:cf:34:a9:25:47:50:a1:11:21:71:12:49:32:89:
1a:78:79:b3:ee:23:11:53:5b:b7:f5:f8:ad:a9:ef:01:e2:34:
41:74:d7:1e:79:cd:bc:7d:c3:de:9c:e7:30:db:d9:8c:44:d5:
32:1c:ca:22:64:b5:e6:5d:d1:30:6b:7d:18:59:06:f4:d5:d0:
65:2f:15:91:34:aa:9b:84:bd:a6:89:21:32:61:fe:cf:b0:a7:
eb:da:98:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkM1QkQxMTAvBgNVBAUTKEU5NzdBOTIyNjIyMEU4Qzc4QTFEMUIzQkUwNEQ2MENE
Q0M4QTIxODgwHhcNMjYwNzI3MDYwMzE2WhcNMjYwODAzMDYwMzE2WjAYMRYwFAYD
VQQDEw02YTY2ZjRhNS1kOTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkv/Vc2byoYZfO7W+iE7OjU4MMaho1kiTlSi7wNnrIxbL6WRkBYGocfN86Scj
LkmJKhYb0MYS7vqQxR21Q++V4B7cQgJz1do7LqBfAXkVmWOwMer533ZHWREMawMx
g2gQVL8luvEYlgJ6DbF6KvkLT//GQxWDeo/Qc/ZMfcQtl1OMUuk2/tK9ZjSIyTdw
z0xkHcXHEx6FTbK82E8KmIJZsaHJnzs0k45Rxbe7SEkvMACjLea0+zI+6mJcx3UH
OfQqHT63t2+ztT85VgcKdVNIhGhfa5x8YGIJhPhCcWihjqzaoZTYa0FSCLTHq0YT
TQgf0QlPImSoawQsFOUbVA+bZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAwDmxdI
wfqaw3bnyYMQzd22EyFVMB8GA1UdIwQYMBaAFOl3qSJiIOjHih0bO+BNYM3MiiGI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzVCRC83NkMyQzcyRTFD
RUIxMUVGODVERkQ3NzZDNEY5QUUwMi82WGVwSW1JZzZNZUtIUnM3NEUxZ3pjeUtJ
WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZYZXBJbUlnNk1lS0hSczc0RTFnemN5S0lZZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QzVCRC83NkMyQzcyRTFDRUIxMUVGODVERkQ3NzZDNEY5QUUwMi82WGVwSW1JZzZN
ZUtIUnM3NEUxZ3pjeUtJWWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAu1BWquLgeVvufBV1STv3eEq956Cix+Vljqo5Bw3NaYv85uvHsBbO4nhx+m3T
lF+X6pEVATdRGMdLSZu8o98IgmeblypDJF+3I/pqsb9/mXpExQR9XBsPRvxMHNQQ
0idjlO+Y4TDxH8cRukMMl6m09Qyf5rDjESI70ZkNLa/jyOoYXrAdnxAuHnyLOj9w
Uu8vfsrE/LUggscY57Z7xeG5O8+rJgMBIc80qSVHUKERIXESSTKJGnh5s+4jEVNb
t/X4ranvAeI0QXTXHnnNvH3D3pznMNvZjETVMhzKImS15l3RMGt9GFkG9NXQZS8V
kTSqm4S9pokhMmH+z7Cn69qYXg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:14:31 2026 by rpki-client