
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
File: zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft (raw, json)
Hash identifier: T4Y161804qkm/DICYR2vTbAPtZQx+1otaYW4NMfkQWY=
Subject key identifier: 10:8B:FC:C9:09:CB:F5:B5:DB:3E:E5:1D:21:79:6D:94:60:93:E0:13
Authority key identifier: CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71
Certificate issuer: /CN=A91AAE63/serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71
Certificate serial: 025B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
Manifest number: 0257
Signing time: Mon 01 Jun 2026 03:00:40 +0000
Manifest this update: Mon 01 Jun 2026 03:00:40 +0000
Manifest next update: Mon 08 Jun 2026 03:00:40 +0000
Files and hashes: 1: zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl (hash: GrzfRtetWRi8Tu5XF3hlHm69cOLA5nVMQP1GnMnpBvw=)
2: 5DCF3814CA0E11ED9251861DC4F9AE02.roa (hash: jvV2Z+fiyEhetDjklhcAMgGtL3vvbGgKgdynXMsgt90=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl
rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603 (0x25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE63, serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71
Validity
Not Before: Jun 1 03:00:40 2026 GMT
Not After : Jun 8 03:00:40 2026 GMT
Subject: CN=6a1cf5d8-daef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:94:32:d9:0b:df:06:ce:d0:f8:82:19:a9:c5:
a9:a7:7e:42:24:a2:a5:1d:f3:3c:79:d7:46:bc:9c:
cb:2a:81:3c:90:c2:af:f2:eb:f7:50:bb:56:0e:26:
f8:6b:da:b6:2d:09:14:db:ae:5e:62:2b:c7:f8:94:
48:3b:3b:d3:b7:ca:25:32:c9:ea:4d:14:e6:09:d4:
66:ea:1d:c9:49:fb:fb:1a:a0:5b:78:2f:7c:fd:8b:
13:3d:40:14:26:8b:2c:14:e8:f6:da:08:5d:3c:98:
e6:c8:ac:53:e3:fb:90:54:b0:11:71:5e:07:25:a1:
09:70:01:16:73:bd:a8:9a:4f:90:f8:a6:84:45:82:
26:24:fc:f1:b7:d1:e5:9f:b0:98:15:80:55:58:26:
e6:7c:73:85:26:db:96:d4:b9:19:a2:98:4d:3a:d9:
b8:c9:b4:38:2c:96:26:32:fe:f1:ec:10:02:44:29:
b3:12:a7:14:27:93:9d:27:f6:4a:a4:c2:e6:66:77:
44:7d:bc:57:c1:f0:86:15:bf:31:ef:97:f4:30:bc:
ca:5d:66:e5:e5:b8:ef:2f:9d:33:00:d4:a6:c5:35:
89:d6:da:6a:8d:e7:f3:35:17:94:07:89:e7:52:59:
84:be:e4:f4:58:44:bc:bf:1a:55:a9:da:2d:cb:c7:
43:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8B:FC:C9:09:CB:F5:B5:DB:3E:E5:1D:21:79:6D:94:60:93:E0:13
X509v3 Authority Key Identifier:
keyid:CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5e:62:e2:8d:77:42:20:a7:61:d6:11:1f:88:55:00:15:06:
de:08:88:5b:2d:56:7f:1e:d5:e1:11:29:16:74:cb:70:e3:51:
32:b6:39:cb:d8:bb:13:81:f1:dc:5d:7f:34:3c:3d:ff:51:77:
da:e7:5c:42:40:64:2a:bf:e4:36:a7:7d:82:d4:71:45:85:bd:
69:9c:6a:96:e3:78:f5:10:9b:d9:29:01:fc:e5:39:e1:c3:f1:
a3:b0:63:f4:00:21:75:ef:a3:45:b3:f7:92:b0:65:62:ff:f7:
d0:97:88:e0:00:05:91:a7:e0:5a:03:4d:ee:3d:f0:b9:66:72:
9b:8c:bf:80:b1:d0:e4:b7:03:be:c8:06:bb:ef:56:ac:05:9e:
c6:6c:c9:3e:c6:bb:6b:54:cc:38:28:e4:b4:cf:55:93:6a:51:
1a:56:c7:1e:23:e3:e4:d5:c7:22:0b:53:a4:5b:2d:34:ff:e9:
12:37:0a:f1:86:57:f7:10:c2:c1:45:c7:e1:4e:bf:c0:79:02:
73:3d:75:42:45:38:05:c6:c7:d3:3e:3c:df:d0:92:bf:62:6c:
e2:d3:eb:8f:19:6b:9f:34:e9:f0:d9:c3:46:c2:1f:54:63:cb:
2a:84:9f:e0:f0:00:25:41:52:06:e1:8d:62:a3:db:d2:fa:23:
0b:a7:30:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 19:14:27 2026 by rpki-client