
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
File: zl8rQ5utW-vicqch6qzDj6rdSbQ.mft (raw, json)
Hash identifier: w2CGSgPNaTiq3wWfVYkT58wsc3TBay2CL0Aqjzvzw/c=
Subject key identifier: 5A:90:0A:07:C9:5A:B7:F3:F7:4D:4C:07:4C:D6:9E:3F:F3:68:CD:59
Authority key identifier: CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4
Certificate issuer: /CN=A91AB9A1/serialNumber=CE5F2B439BAD5BEBE272A721EAACC38FAADD49B4
Certificate serial: 0707
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
Manifest number: 0707
Signing time: Wed 20 May 2026 14:40:54 +0000
Manifest this update: Wed 20 May 2026 14:40:54 +0000
Manifest next update: Wed 27 May 2026 14:40:54 +0000
Files and hashes: 1: zl8rQ5utW-vicqch6qzDj6rdSbQ.crl (hash: vjAXE8KhKlfrTJWOzU4poRqoiPIptPRNio8rw7pv1qQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.crl
rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 14:40:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1799 (0x707)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB9A1, serialNumber=CE5F2B439BAD5BEBE272A721EAACC38FAADD49B4
Validity
Not Before: May 20 14:40:54 2026 GMT
Not After : May 27 14:40:54 2026 GMT
Subject: CN=6a0dc7f6-3917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cc:3a:23:1c:f1:0e:f8:57:93:8e:8f:74:01:
ea:e2:ac:a5:a5:d8:6b:25:64:04:83:d2:e7:3a:18:
5f:e0:58:57:68:9e:3e:02:61:0d:31:39:7f:4e:7f:
82:99:3e:20:95:05:fe:9b:91:3c:a1:3d:9b:ee:32:
87:f9:ce:be:0b:67:f4:4d:5b:b8:2b:bc:35:38:d4:
cc:8c:0d:4e:20:f3:03:00:0c:81:1d:32:27:7c:4b:
3e:0f:62:41:76:ef:3d:e5:9b:5d:6a:38:0f:8d:c3:
30:3c:5e:b4:12:34:a5:a5:21:62:e0:03:ff:dc:6c:
fd:70:44:f4:b7:97:52:96:fd:9b:1e:99:52:62:96:
87:ba:7e:28:c6:aa:96:93:c4:1e:84:4d:91:01:7d:
ae:94:4f:21:35:60:03:60:a7:b1:30:f4:6c:cc:01:
63:5d:a0:b2:31:a5:28:43:39:f6:74:08:00:df:4b:
13:9f:20:1d:93:8e:36:c6:c2:45:9e:1f:c8:ec:7a:
97:6d:4a:be:08:c5:d4:fa:e8:b1:08:a6:d4:c6:75:
65:e5:db:5e:0e:d7:61:0a:32:5e:e4:a9:09:2c:75:
e0:cf:5e:6f:0d:68:8f:e2:2a:24:4e:4a:fe:2d:b9:
db:ad:5b:ce:d5:11:85:68:18:12:ac:a9:02:c2:c3:
60:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:90:0A:07:C9:5A:B7:F3:F7:4D:4C:07:4C:D6:9E:3F:F3:68:CD:59
X509v3 Authority Key Identifier:
keyid:CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:4d:87:bc:2b:58:dd:87:63:48:d5:78:72:48:dc:73:3a:9b:
f6:46:e3:45:3a:dc:4d:c2:7f:79:20:5c:66:19:4c:6d:37:f7:
5d:62:ab:e4:a0:41:cc:fc:57:1c:fe:a2:c1:95:d7:14:de:88:
15:24:21:77:42:31:bd:a0:5e:4f:b1:ba:64:cf:72:f0:ee:52:
1e:e1:ef:a4:70:2a:83:fe:43:bf:76:6c:93:ce:4b:54:1f:dc:
f8:db:64:12:89:c4:13:b5:12:b2:0a:12:6e:9c:b2:e4:cb:7b:
b9:ba:97:78:8d:ba:c3:24:58:e7:74:54:01:7e:f7:1c:84:d5:
07:dd:03:da:46:15:5b:2f:b1:e6:38:4a:1e:2f:a2:7d:8a:39:
d1:9c:df:fb:95:23:d1:76:5c:24:5b:97:9c:8d:2c:01:c6:da:
58:7d:49:08:d2:fb:83:48:c6:29:3f:4f:ca:d3:61:40:52:47:
1a:87:8e:61:ef:bf:2a:89:32:1d:fc:27:e3:7e:29:aa:aa:f7:
77:67:ce:0c:3c:86:39:28:26:20:49:9c:a3:f6:43:19:b7:92:
f6:20:4f:08:62:bc:ba:e1:a9:49:f7:b4:76:04:e1:9f:87:bd:
68:20:cc:ce:55:63:a5:cc:91:0d:2e:5a:4d:8a:5c:0d:3d:78:
d8:8b:1e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:16:32 2026 by rpki-client