
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
File: zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft (raw, json)
Hash identifier: NZR/XzVEL/h1YDEQxrNytTeTLQ8iEDVVmZ+vrSG0T/Q=
Subject key identifier: F6:0D:C8:6C:FB:63:66:DB:DA:A6:C1:3C:25:41:66:6A:99:4A:F3:AD
Authority key identifier: CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48
Certificate issuer: /CN=A91565C6/serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
Manifest number: 0121
Signing time: Mon 31 Aug 2026 06:14:20 +0000
Manifest this update: Mon 31 Aug 2026 06:14:20 +0000
Manifest next update: Mon 07 Sep 2026 06:14:20 +0000
Files and hashes: 1: zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl (hash: rYgqk+d6xXcrU2DWivjKdMguWuy5WrXmXEP2wbeBsQw=)
2: 7B2FAA3C209711F196D22F2D3A3D8C67.roa (hash: 46jInQJtabZ7v+bShiZhomvrokC8+lMJ4HP9JqEdr94=)
3: 37783B4E20CC11F18B0BA4B30A3D8C67.roa (hash: U3KVjwUBLUlPVHRa+0vAy5Ai0f/M4Fs7JbPDlUfLDwE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl
rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 06:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91565C6, serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848
Validity
Not Before: Aug 31 06:14:20 2026 GMT
Not After : Sep 7 06:14:20 2026 GMT
Subject: CN=6a951bbc-e551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1b:3b:83:31:61:b9:ee:7b:38:f7:99:0b:e8:
78:dd:42:8c:15:77:1c:8d:d8:86:11:1d:63:bf:48:
04:77:71:5f:b4:d1:2e:dd:ac:67:f3:2a:7f:38:ee:
4f:16:64:bf:56:78:7e:9b:58:a4:bd:cc:52:c6:9e:
c5:f3:fe:3e:2d:38:33:84:a1:63:90:c6:9b:83:44:
f0:46:f0:38:f4:c9:79:62:b3:53:44:d0:2c:e3:67:
8b:ab:84:cd:35:6a:cc:f4:29:b5:9e:e1:bc:0d:04:
02:eb:0d:6c:bb:cf:e8:b2:29:78:53:62:80:63:dd:
bb:7b:21:f7:c2:5b:94:f0:1e:5f:f8:53:47:79:41:
42:c3:b4:e4:b0:5f:46:f4:0d:e1:1d:e9:05:d5:7b:
b6:cb:8b:09:1c:65:c8:eb:73:a0:07:95:f2:37:a8:
e3:26:e3:e2:9b:16:d7:c3:a3:98:2b:da:ba:be:40:
c0:ab:7a:ac:ad:17:61:4d:61:91:a8:e4:7c:4d:35:
9f:77:7c:30:82:7d:77:56:7f:7a:5f:fb:e0:49:f8:
5c:e5:06:6a:49:a6:5a:a9:29:b6:dd:b7:cc:40:1f:
d4:cc:c2:07:28:d3:d5:a2:cd:0c:1d:f2:7f:5e:19:
09:ba:09:1e:3d:71:7d:c8:22:c1:6c:c0:a2:3a:3d:
6e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0D:C8:6C:FB:63:66:DB:DA:A6:C1:3C:25:41:66:6A:99:4A:F3:AD
X509v3 Authority Key Identifier:
keyid:CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:46:6a:12:d6:cb:5c:bf:36:18:d8:33:bb:7d:cb:1b:91:14:
20:43:9f:a0:9b:b8:63:95:b5:18:2f:00:7a:29:0f:8e:f2:b4:
1d:d5:fd:c1:36:40:43:a2:43:b6:ca:54:d2:ff:b3:dd:cc:cd:
4b:93:7d:ae:da:dc:25:18:49:6b:2d:6f:de:f6:33:e9:eb:9d:
5e:32:33:4b:f7:c5:0a:d5:f9:30:81:20:1c:e5:ac:96:a5:07:
81:d4:2d:df:45:b4:40:14:e2:66:98:55:9d:29:72:5e:6f:fa:
31:2c:73:39:cd:51:a2:5f:e3:d1:55:7b:64:a4:37:ae:e5:e4:
83:89:6f:60:05:1a:17:dd:68:de:fb:e9:33:5b:f7:13:1f:df:
b9:25:a5:52:a6:96:a5:c5:94:11:e4:04:6b:22:94:bf:00:73:
95:a5:9b:00:dc:60:d0:62:62:4c:91:d0:2a:bd:d9:6c:ce:a9:
61:3e:8a:7b:62:03:1e:78:45:64:1c:61:9d:72:78:c5:c6:a0:
f0:88:7a:95:c0:d9:a8:6d:9c:2a:98:39:90:cc:43:c7:25:75:
35:76:64:6e:61:c7:b5:09:ed:b1:e1:38:8a:49:2a:5c:3e:8e:
68:c2:55:ff:86:10:65:53:01:e6:d2:29:e2:44:2d:c4:0d:da:
b3:95:ad:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:51:49 2026 by rpki-client