
$ rpki-client -vvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
File: ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft (raw, json)
Hash identifier: dqxfGltfRMHC+OH8MspDIcNjJS562cu0iY2ZPUzNk5s=
Subject key identifier: 09:C7:CC:C1:5E:CF:8A:AB:53:88:05:54:4B:75:C7:AD:01:36:24:AD
Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A
Certificate issuer: /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
Certificate serial: 2435
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
Manifest number: 2422
Signing time: Mon 20 Jul 2026 15:52:32 +0000
Manifest this update: Mon 20 Jul 2026 15:52:31 +0000
Manifest next update: Mon 27 Jul 2026 15:52:31 +0000
Files and hashes: 1: ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl (hash: 4Yc02sVosQHiOtqRTiO28GENcpZJwXjszY4j6t4W82E=)
2: 844E61B635B811EE96EDCC53C4F9AE02.roa (hash: FMM9PWbU/oYp9w4GxmMR0Bnc2OElJZUE63nkK8Lt4YE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl
rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:52:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9269 (0x2435)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91269B8, serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
Validity
Not Before: Jul 20 15:52:31 2026 GMT
Not After : Jul 27 15:52:31 2026 GMT
Subject: CN=6a5e4440-8617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:02:4d:ad:7c:be:ad:78:2b:0f:fe:bd:1d:90:
14:4e:c6:8b:e6:23:77:cb:e1:4f:78:73:a2:8e:77:
08:a6:b4:28:79:01:75:65:ad:d8:18:3b:6c:9a:23:
2e:89:b3:55:ab:8b:20:e0:04:11:4e:05:79:97:a2:
ca:62:53:46:a8:9d:6b:ae:06:da:51:f4:24:9b:e7:
c6:ec:6f:d8:22:e2:89:42:78:ff:16:6d:9c:01:5f:
94:ac:a4:4d:c5:bc:be:a9:03:b6:a3:01:93:db:2a:
4b:c4:8b:e8:fb:b2:4c:31:f2:88:36:60:65:a9:5f:
2b:dd:bf:07:04:17:b6:1f:95:2e:87:aa:ba:6a:ff:
66:25:d9:de:5c:45:3e:2a:56:ea:dd:0b:b2:98:be:
20:e2:a7:0b:d3:06:27:bc:03:5b:d4:f1:4d:6d:85:
1d:62:c7:ed:64:89:0f:73:b0:bc:f4:f5:9f:28:cb:
33:b7:3a:a4:4b:1c:e0:f8:7a:92:4b:5f:9a:c6:d9:
94:72:72:7c:55:ba:be:8e:ff:d2:ae:9b:de:39:c7:
d9:38:ce:0d:fb:e8:d4:24:cf:a2:28:90:26:a3:d4:
6c:3b:08:4e:66:c0:d7:dc:b3:76:51:6b:e4:c7:5d:
42:0f:e3:38:42:0b:82:9f:16:11:db:f3:0b:d1:62:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C7:CC:C1:5E:CF:8A:AB:53:88:05:54:4B:75:C7:AD:01:36:24:AD
X509v3 Authority Key Identifier:
keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f9:c1:09:3f:8b:f5:e9:53:e5:3a:f9:1b:b7:00:77:86:af:
af:21:6d:92:ab:78:48:07:b2:fa:05:5a:4b:3c:cc:6b:fd:40:
cc:e1:ad:7f:93:07:3b:00:a2:f1:56:3e:ba:3a:b9:25:d2:8f:
7c:74:46:8a:69:6d:48:8e:dc:90:11:e7:ab:2d:34:8c:94:fd:
ba:04:4f:6e:ad:c1:91:47:cd:6a:88:f7:f8:90:53:f2:f9:af:
50:bd:fe:e6:39:cd:35:65:74:be:a7:a0:14:bc:31:aa:c8:59:
8d:75:92:8b:ad:70:24:22:e8:03:90:7d:21:c8:d0:8c:0d:2e:
62:3c:e2:f5:56:0d:40:3e:0d:a4:f2:57:3f:be:fc:20:cb:9c:
93:c3:81:fa:d7:59:4b:dd:de:70:02:00:a7:b5:16:fd:8e:c7:
c2:a3:8f:f0:8f:5b:ee:11:48:8a:6f:4c:ff:33:05:93:4a:77:
9d:cf:3b:3d:a2:39:79:fc:be:76:ad:9e:22:da:14:a9:9e:4e:
a8:4d:5d:dd:8d:79:cb:ea:3e:d3:df:85:80:0e:bb:d2:ac:73:
6e:77:fa:e3:b9:f7:d0:35:80:96:c3:ee:4c:b4:a9:01:80:95:
36:2c:d7:2d:50:5c:82:8e:f6:e7:da:b9:a0:72:fb:02:06:7a:
a5:0c:0d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:20:25 2026 by rpki-client