
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
File: pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft (raw, json)
Hash identifier: KEPrjUZGGMm7wtoo8aBdapWc3lx7WPPssT+4cqEbxTk=
Subject key identifier: 5D:2A:BE:3E:DF:4F:77:76:85:EF:59:40:A3:BF:25:13:90:A3:D2:29
Authority key identifier: A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF
Certificate issuer: /CN=A91A3AD9/serialNumber=A739387478C8AD9DD5D19553AB4B1DEEF1A961FF
Certificate serial: 6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
Manifest number: 65
Signing time: Tue 21 Jul 2026 09:57:06 +0000
Manifest this update: Tue 21 Jul 2026 09:57:05 +0000
Manifest next update: Tue 28 Jul 2026 09:57:05 +0000
Files and hashes: 1: pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl (hash: ZqP+J7SDLd6H5XZ4RPzI1pDMI5CpO/wE03ApGbjO3LM=)
2: 8B10B888061111F18D858310203D8C67.roa (hash: qh+VyOJbj+ug4XtQyEZqsUr8GU3LhsaDi56G0+/mtA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl
rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 09:57:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3AD9, serialNumber=A739387478C8AD9DD5D19553AB4B1DEEF1A961FF
Validity
Not Before: Jul 21 09:57:05 2026 GMT
Not After : Jul 28 09:57:05 2026 GMT
Subject: CN=6a5f4272-1b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4d:24:95:4a:1d:86:21:14:0d:79:fa:63:47:
59:1a:d0:c2:ae:2f:eb:2b:68:f9:92:90:4f:25:ed:
51:ef:c4:de:f8:de:d4:07:0c:42:ae:26:6e:63:d2:
56:b0:37:22:49:a1:08:4c:34:1d:eb:01:3d:d4:04:
98:fa:1b:78:cc:3e:94:fa:aa:ad:5d:54:1e:35:24:
e7:51:fa:86:4b:67:dc:1e:0c:93:d0:af:94:2e:2b:
c3:dd:22:02:08:63:3b:b2:9c:23:37:59:65:48:45:
b4:09:45:60:a6:4d:8b:f4:a1:b3:7d:51:bb:bd:c8:
27:11:54:cb:37:73:3b:59:37:e7:ba:df:b4:20:27:
ec:f8:ef:26:57:bb:66:19:e3:6b:b2:f8:c1:63:08:
fc:5b:3c:e4:57:1c:c0:4c:61:dd:34:b5:7c:da:cf:
bb:fd:6a:4b:24:80:cc:92:aa:80:bc:2b:94:67:7c:
27:3f:8a:34:8a:e3:11:bd:41:f0:24:40:26:ae:c3:
e9:e1:a2:72:95:cc:8a:28:7f:76:d3:18:57:32:ee:
c0:76:9d:d4:fc:dd:ea:dd:df:4f:fb:2e:ec:d8:e2:
42:75:bf:ee:b0:d5:c1:44:b5:2a:c2:1b:bb:3d:b8:
ca:54:21:15:56:cf:d3:c8:0a:6d:34:e3:37:1b:40:
e0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2A:BE:3E:DF:4F:77:76:85:EF:59:40:A3:BF:25:13:90:A3:D2:29
X509v3 Authority Key Identifier:
keyid:A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:29:9f:3e:68:f1:22:96:4f:fb:d5:a5:c6:b1:cb:49:6f:a6:
3f:c1:cc:a0:21:7f:14:05:b1:96:f7:99:2f:ff:15:78:9b:63:
fc:78:b2:cb:30:08:f4:dd:42:a2:3c:47:b9:2f:a5:19:57:70:
e0:b6:35:69:e4:ae:0e:ff:c7:ac:83:8f:c8:26:1b:e4:61:1a:
a0:fe:a3:5a:b9:6d:97:3d:35:7a:6f:a5:4c:4e:f9:13:2e:c3:
7b:b7:68:ee:01:14:9b:1e:03:73:39:17:d0:87:01:79:10:48:
8d:93:0e:1e:35:97:db:09:32:1f:6f:b6:29:50:95:0b:e2:5c:
e4:69:f3:78:2c:3d:5c:58:9f:68:fc:ef:62:ad:79:58:06:09:
a3:00:b4:8a:5e:48:06:fc:f8:18:60:ee:4d:59:56:7f:36:0e:
e8:3d:96:fb:52:18:d6:4d:ee:9a:d0:c2:de:37:a1:a9:fa:4d:
04:13:11:40:19:3d:ec:a1:3f:3e:6f:f4:95:e8:84:e9:85:99:
2b:94:c0:68:29:27:ce:8b:38:92:b3:40:97:bc:ba:3d:78:d1:
98:6c:9e:7b:35:1d:36:70:5d:43:84:51:f3:03:95:f3:d5:fa:
5d:f0:a5:3f:29:cb:5f:dc:68:94:ab:c6:f1:03:63:df:47:a9:
49:4f:c8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:15:27 2026 by rpki-client