
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
File: ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft (raw, json)
Hash identifier: XnVpgsm2/ilfkipHEqB1PwyyGP3GoSKwFnvv6LH7H3s=
Subject key identifier: 6D:55:AB:F3:84:46:78:59:6C:87:DE:72:ED:3F:B6:B8:92:90:1B:97
Authority key identifier: 66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9
Certificate issuer: /CN=A91A12C4/serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9
Certificate serial: 0140
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
Manifest number: 0140
Signing time: Thu 21 May 2026 05:25:19 +0000
Manifest this update: Thu 21 May 2026 05:25:18 +0000
Manifest next update: Thu 28 May 2026 05:25:18 +0000
Files and hashes: 1: ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl (hash: U9TEK1aZm5XOw7nLjy5XtTZ7S51pM1xpxhVElXGlTDM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl
rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 05:25:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A12C4, serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9
Validity
Not Before: May 21 05:25:18 2026 GMT
Not After : May 28 05:25:18 2026 GMT
Subject: CN=6a0e973f-11f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c5:40:b7:a0:98:66:d4:94:e8:54:11:41:b7:
6e:d2:a3:62:a1:55:5a:ec:7c:b2:35:e8:a0:12:4a:
ed:68:32:98:63:cf:74:f0:b9:af:f2:44:32:ca:d7:
18:e5:11:45:62:05:c7:09:3f:14:a1:d5:ec:41:89:
86:02:4b:3b:7b:5a:70:c7:79:b9:c5:4a:fa:25:dc:
9b:49:e7:64:3d:f1:1b:28:1a:cf:94:34:db:ea:45:
2c:df:bd:5c:8e:be:0a:0f:58:ab:f9:a9:b7:80:7d:
6c:a7:58:02:3c:77:8b:1d:b7:f7:ed:d8:ff:b5:3a:
79:8d:08:e7:86:b5:4b:20:df:60:ba:c3:1e:99:c6:
86:ea:d1:45:95:9d:5a:2e:0d:65:49:e4:9c:8c:e2:
94:58:0f:6f:c4:1e:f1:56:d1:ad:bb:f5:84:5d:e9:
8c:1b:04:9a:87:b4:45:a7:f9:b4:50:33:64:3c:51:
f7:ae:f3:2a:d3:74:b5:3b:79:15:c3:1c:ed:5d:ea:
39:4a:d6:7c:3b:b7:53:bc:44:42:66:4d:5a:8c:42:
41:24:4e:5e:01:ec:be:d5:65:fe:ad:f6:cd:36:21:
a0:1d:5e:ed:d0:55:2e:e9:f7:c9:1b:1f:0f:0f:9c:
12:f8:77:15:f2:4e:a0:b5:06:53:e5:96:4d:e0:a1:
6d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:55:AB:F3:84:46:78:59:6C:87:DE:72:ED:3F:B6:B8:92:90:1B:97
X509v3 Authority Key Identifier:
keyid:66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:f1:53:10:cb:56:7a:1a:e5:fb:5d:ba:5c:b2:d9:ff:1d:64:
f3:31:cd:e1:45:76:f4:98:e8:db:e1:ca:5f:88:7a:4a:7b:c2:
de:e9:ea:9c:0e:8a:14:cb:99:3f:25:f0:7f:a6:a7:bc:0e:95:
87:fa:81:51:2a:53:1a:a6:65:57:61:e6:3e:88:9b:11:5b:d1:
5b:a3:52:86:fb:1b:72:a1:8c:b7:b3:93:e8:a7:50:d1:bb:d5:
7a:34:65:35:b4:22:99:3e:d4:e4:fd:4e:dd:74:19:22:22:77:
f6:c6:8f:98:b8:ce:0f:05:85:1e:63:88:9d:eb:60:d2:86:e9:
f5:e8:ec:8d:24:00:12:13:41:fb:67:79:b7:fe:5b:b3:cf:1c:
4b:2d:16:21:e2:2d:ec:dd:42:4e:0a:71:bf:7b:4e:75:a6:dd:
0d:a2:62:2e:31:23:a9:8a:ed:58:1b:f2:8b:5e:92:4c:98:4b:
4f:39:f3:b7:c7:97:9e:f2:dd:e5:f4:be:2b:ba:2e:c4:94:4e:
75:27:c0:5e:0e:1e:4e:d8:9b:41:a3:64:36:e8:97:23:78:ac:
a8:d3:d7:b9:c8:79:60:10:b5:40:b6:06:a2:7f:a2:03:f4:c0:
fe:28:89:df:67:d2:46:b1:29:87:ee:3a:04:0d:0c:18:b7:6d:
55:bc:28:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:27:38 2026 by rpki-client