
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
File: zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft (raw, json)
Hash identifier: +gavtxGUWNenq51NIf7v78nA1faBdYcXe2nep7qmpmE=
Subject key identifier: E6:92:78:21:CB:FC:87:D6:1D:68:51:D4:A6:95:E2:64:ED:21:29:EB
Authority key identifier: CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71
Certificate issuer: /CN=A91AAE63/serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71
Certificate serial: 023D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
Manifest number: 0239
Signing time: Sun 05 Apr 2026 02:06:28 +0000
Manifest this update: Sun 05 Apr 2026 02:06:28 +0000
Manifest next update: Sun 12 Apr 2026 02:06:28 +0000
Files and hashes: 1: zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl (hash: gCVVeoaiUHLfO+2lzKV/RP41JU98Gj6GO/RXdb7b31g=)
2: 5DCF3814CA0E11ED9251861DC4F9AE02.roa (hash: jvV2Z+fiyEhetDjklhcAMgGtL3vvbGgKgdynXMsgt90=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl
rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 573 (0x23d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE63, serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71
Validity
Not Before: Apr 5 02:06:28 2026 GMT
Not After : Apr 12 02:06:28 2026 GMT
Subject: CN=69d1c3a4-346b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4e:84:8c:56:06:5d:66:dd:c7:8d:97:e7:65:
a2:1f:1d:85:01:1d:b3:14:ef:ed:ff:fa:a4:7d:6e:
fa:46:23:b1:23:9f:a2:08:75:1a:f1:ad:fb:1c:9e:
aa:f8:07:6e:a9:1e:88:1a:05:e8:cd:9b:ae:ae:c5:
08:8d:44:a0:5b:4c:af:cf:e2:32:fc:71:e6:fb:f0:
f2:1e:68:13:70:1a:fd:1d:18:b3:cb:ee:61:3b:71:
0b:b0:91:b0:c8:6b:bc:ba:45:de:ea:c2:d1:c1:03:
f3:66:f1:6f:08:20:d9:9d:47:cc:f6:a9:9c:85:1b:
07:81:77:c4:fd:6b:05:28:a6:5d:ec:23:68:00:c7:
7b:dd:85:f9:21:c8:22:e9:2a:6c:7a:bd:da:ba:1b:
d4:bf:cf:47:89:19:7e:73:dd:bc:e8:c0:59:43:ca:
fa:26:b5:c6:46:53:73:55:6d:2c:e2:2c:24:c3:01:
4b:fe:c7:b1:c1:34:41:ae:f1:7e:d9:b4:d4:f3:2b:
97:51:eb:cb:ae:ac:34:2e:00:01:b3:14:10:a8:0d:
21:00:31:3b:46:01:2f:7c:1b:e5:42:d3:25:8e:9c:
e0:47:7c:87:c0:3d:2c:55:68:da:22:12:2a:2f:c7:
4e:96:ff:eb:e6:9b:ba:a5:b8:d0:28:1f:a8:e1:c5:
97:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:92:78:21:CB:FC:87:D6:1D:68:51:D4:A6:95:E2:64:ED:21:29:EB
X509v3 Authority Key Identifier:
keyid:CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:3c:82:11:64:44:cf:b7:bc:a9:b8:3e:14:85:b9:48:ee:bb:
0c:00:67:40:03:73:4a:14:e8:2e:41:ca:fb:ca:dc:e3:a4:5e:
19:39:1a:63:df:75:19:2a:00:f7:cd:ca:d1:e7:0d:3a:ba:2d:
0f:76:81:26:a7:6c:6d:52:70:a2:02:e1:1b:61:f9:bf:c4:0b:
88:26:f0:3c:a5:1e:4f:8e:2a:92:27:7b:32:a7:43:76:f7:54:
d7:23:d4:70:43:7b:0f:2f:21:6b:9b:20:22:5e:b7:bc:a7:ed:
c0:5d:0a:46:7f:11:c8:ca:5e:cb:47:55:d8:01:4f:20:42:46:
0d:bb:64:f4:0c:03:79:31:9d:3c:26:db:ea:f4:28:3c:e1:86:
62:c4:19:e1:3f:54:33:93:82:07:6a:d3:d8:2a:55:de:08:7b:
bc:9f:83:bc:8c:5d:32:af:26:b6:15:bb:b2:3b:45:4c:ec:4e:
34:71:1c:e2:de:2f:ae:4b:94:13:74:4d:c9:f1:37:0e:4d:7b:
fb:61:2a:14:fa:9d:2b:80:ba:43:bc:ce:da:69:df:3c:60:b1:
96:aa:d3:7b:56:46:a5:df:87:26:6e:3e:2d:17:82:32:28:9b:
57:86:5a:b9:ff:d3:64:f8:93:ea:2a:df:46:97:d1:5b:e0:26:
25:a9:88:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:45 2026 by rpki-client