
$ rpki-client -vvf rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft
File: Zi7Jore2zkLSOlI4U0xldiIyU3I.mft (raw, json)
Hash identifier: tZcdSw2fEjGxsQeISicdar9YdKhO+STlwzXYtyTjwNA=
Subject key identifier: 49:80:3A:38:EC:B8:3A:6A:D2:8F:86:5C:D7:4A:32:E7:27:FF:89:05
Authority key identifier: 66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72
Certificate issuer: /CN=A91918AB/serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372
Certificate serial: 70
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft
Manifest number: 6B
Signing time: Fri 17 Jul 2026 09:16:21 +0000
Manifest this update: Fri 17 Jul 2026 09:16:20 +0000
Manifest next update: Fri 24 Jul 2026 09:16:20 +0000
Files and hashes: 1: Zi7Jore2zkLSOlI4U0xldiIyU3I.crl (hash: CrGlbnSscSYOhpbyZh38OkfPaGXnfAkPRafT2lv/aOM=)
2: 41527E061CFB11F1BAE9C5A3413D8C67.roa (hash: AA4gBjxlDFvAHeJBtHXm9algpg/YYgqK825E6bjNQcI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl
rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 09:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91918AB, serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372
Validity
Not Before: Jul 17 09:16:20 2026 GMT
Not After : Jul 24 09:16:20 2026 GMT
Subject: CN=6a59f2e4-e91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8b:a2:3a:d3:b2:00:73:e1:e0:0c:62:8c:5b:
5d:ec:f4:49:4e:93:f0:40:93:a8:bd:66:3b:d5:49:
54:19:93:e1:c7:12:78:b0:69:c7:af:58:df:76:47:
d5:05:5d:52:99:1b:73:b8:48:e6:ea:62:6a:60:86:
25:fd:fa:ad:a7:8b:ce:38:75:3c:56:67:6f:ad:47:
38:26:84:c6:a6:bc:07:41:94:11:c3:c4:49:82:bb:
d8:92:c3:40:a1:2f:ee:4d:5c:42:d0:48:43:22:c4:
48:26:33:97:9f:06:e9:79:dc:1f:63:cd:f0:12:25:
b8:c6:ae:f4:b7:4c:14:6c:2e:14:31:df:06:ee:c7:
a6:40:75:11:2a:fd:b3:77:e8:7e:f0:ef:e8:1d:ff:
1d:d9:62:f0:71:d5:5c:63:a2:1c:e6:92:45:74:47:
f6:5a:f3:96:4e:49:56:04:b2:83:50:c9:e2:6a:82:
96:8d:7c:28:15:8a:c0:0e:e4:48:a2:26:0b:1e:c3:
c5:2d:4d:96:86:fe:c0:43:d3:dd:b1:7f:d8:c0:7d:
3b:7a:07:0a:90:87:ee:19:34:b5:c9:c1:af:d4:cf:
84:c2:7a:71:a1:9c:40:36:33:85:85:0e:d3:7c:3c:
ba:26:ac:96:1d:59:72:25:71:1a:f6:2b:2d:82:15:
c6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:80:3A:38:EC:B8:3A:6A:D2:8F:86:5C:D7:4A:32:E7:27:FF:89:05
X509v3 Authority Key Identifier:
keyid:66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:a9:ca:2e:0c:29:7c:22:ca:6e:05:47:b7:05:1e:b4:04:da:
c2:fb:b1:8c:37:cb:b4:ca:04:53:e2:ef:01:bd:03:30:5c:2c:
35:a9:bc:fc:60:9a:50:26:6b:68:8d:5b:5a:33:ce:0d:88:0b:
3b:df:d4:44:47:3a:2d:f1:5b:9c:7c:b7:b3:a6:f3:9e:80:a5:
b7:f6:08:d7:0c:29:e9:75:f6:0a:83:30:72:42:23:ce:44:18:
be:8d:bf:2f:51:11:f6:be:38:03:74:ae:1c:dc:47:7c:41:1c:
08:a0:cd:8d:4f:60:d0:5a:b8:bc:ce:5b:46:ed:eb:2c:7e:24:
e5:01:c3:88:a7:ad:ee:7a:d1:68:6f:b2:22:3c:b7:bd:20:57:
e9:07:da:57:32:58:04:14:f7:bb:fb:e4:35:06:68:79:01:91:
be:25:9f:f1:d2:62:93:5a:11:1a:07:a0:39:7b:d9:31:f6:cb:
6a:a7:26:7e:87:e9:6b:eb:8e:0e:3c:b3:26:a2:ab:36:5e:a7:
7c:28:91:43:b0:81:36:73:49:ca:f9:af:12:a2:61:c1:f3:77:
c4:b0:32:ec:02:f2:8a:06:21:5a:fd:a4:80:55:2a:0b:36:58:
37:bb:36:ba:96:91:e7:91:02:d2:3c:ac:33:52:2b:43:31:95:
d4:48:8c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:20 2026 by rpki-client