
$ rpki-client -vvf rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
File: ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft (raw, json)
Hash identifier: x11mcytX2fKgaWqt92zbAD9FAIQALdlyNSjT9topnHY=
Subject key identifier: 17:FB:D7:A7:C0:33:42:84:74:1B:82:CF:F5:28:3A:8B:04:50:6B:6F
Authority key identifier: 65:F6:16:1C:73:6D:1A:9C:41:91:FD:FC:C7:A4:F8:24:CE:11:23:2D
Certificate issuer: /CN=A91899BB/serialNumber=65F6161C736D1A9C4191FDFCC7A4F824CE11232D
Certificate serial: 073A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
Manifest number: 0735
Signing time: Tue 18 Aug 2026 22:14:36 +0000
Manifest this update: Tue 18 Aug 2026 22:14:36 +0000
Manifest next update: Tue 25 Aug 2026 22:14:36 +0000
Files and hashes: 1: ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl (hash: u+bY9l9oj3g9Y5uPDQUS6v4Dg++Fjwc+WBKCvGtlR+Y=)
2: 54CB555C57A311F09664E82DC4F9AE02.roa (hash: 8zSq/rqaKjpysVvvXWgHeKeayL3TVMK2Emf1uVmygFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl
rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 22:14:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1850 (0x73a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91899BB, serialNumber=65F6161C736D1A9C4191FDFCC7A4F824CE11232D
Validity
Not Before: Aug 18 22:14:36 2026 GMT
Not After : Aug 25 22:14:36 2026 GMT
Subject: CN=6a84d94c-4fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:2c:d9:11:5a:fa:52:8f:db:6e:b7:bd:48:
d9:f7:51:c2:70:d6:52:01:1e:6a:9f:48:f0:7b:bb:
2c:ca:d0:84:03:f6:85:ed:0c:7b:97:79:17:44:40:
64:0d:1e:f0:f3:27:f2:64:69:80:8e:53:db:55:7e:
06:e1:e9:55:ad:5b:ae:41:25:31:d4:27:a2:68:fc:
91:39:d5:37:83:dc:15:d4:dc:16:02:c7:82:b1:ce:
af:f6:8f:ed:f6:70:25:ae:5e:49:ef:04:41:9a:4e:
62:84:02:f2:b4:75:4a:8e:03:df:31:e0:59:94:eb:
43:88:11:89:1b:e6:42:54:5a:7f:da:ec:c7:a4:cf:
1a:85:85:49:82:7f:ce:b6:6e:a7:66:71:d3:7f:ce:
9f:06:c6:7d:58:73:46:02:e3:0d:71:15:0f:76:5f:
63:38:9a:2c:0d:29:56:2b:d6:6a:7c:2b:56:37:dd:
2d:d3:6b:b1:ce:37:5b:f4:54:68:ff:71:00:80:15:
87:01:78:1f:d0:69:f2:c8:70:c7:59:bf:32:c1:08:
df:a6:9a:04:82:87:de:2e:23:d6:b7:31:9d:26:61:
cb:95:2d:2f:d1:64:1d:18:3e:d4:1b:a4:20:06:b4:
76:59:c2:08:46:0b:f9:27:91:16:fa:e3:a3:36:4d:
e9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FB:D7:A7:C0:33:42:84:74:1B:82:CF:F5:28:3A:8B:04:50:6B:6F
X509v3 Authority Key Identifier:
keyid:65:F6:16:1C:73:6D:1A:9C:41:91:FD:FC:C7:A4:F8:24:CE:11:23:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:4d:72:64:f6:a8:13:06:ed:9f:4e:de:89:77:e9:0e:a4:59:
51:94:70:7b:ad:ee:fe:88:8e:5b:99:51:89:21:a9:18:76:88:
93:df:64:9f:bb:2f:80:d2:75:6d:0a:30:b1:8c:17:6a:55:a3:
41:5d:cb:cb:fb:04:fe:05:aa:8f:da:32:40:88:d2:cd:eb:f4:
ea:74:f4:8c:f7:4a:bb:3e:0b:c5:e8:5d:59:e8:61:84:96:4b:
f8:17:f2:85:f5:4a:28:69:4c:8f:5c:c3:7a:50:51:68:13:fb:
86:f9:f2:01:c8:89:4d:97:27:ec:df:92:07:18:9e:3b:8d:5d:
06:55:10:22:3e:2d:1c:99:04:1d:18:99:27:23:85:0f:11:98:
f5:69:5a:4c:59:4f:a1:d2:ef:a0:2c:7a:6f:03:b6:73:06:73:
31:c7:30:6f:86:34:c0:61:63:6f:9d:1d:b4:49:69:5c:cf:a8:
c4:9a:69:c0:3b:1d:71:2c:24:62:5e:6d:f4:7d:c5:42:0b:1b:
fd:d2:c0:26:68:03:07:18:47:73:24:40:dd:4b:a4:18:9d:48:
f6:45:c4:75:b0:79:35:1e:b3:05:52:3a:74:43:28:af:d2:82:
cb:5e:cf:d6:65:dc:f1:ed:c7:15:62:43:b5:6b:e6:bd:99:64:
40:9f:de:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:47:07 2026 by rpki-client