
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft
File: Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft (raw, json)
Hash identifier: Ty+iE0VpJEYMhBGyDRi+1a9KVOT6RatddQ/ATB3Z/Xw=
Subject key identifier: 48:79:12:F3:A9:42:B0:33:B2:0E:BA:A9:05:59:0B:CF:1D:E8:A6:3D
Authority key identifier: 66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B
Certificate issuer: /CN=A91B391F/serialNumber=66F6B844A9F809AE307B1B9CEE4BFD47C3C7771B
Certificate serial: 0190
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft
Manifest number: 0186
Signing time: Tue 11 Aug 2026 04:04:45 +0000
Manifest this update: Tue 11 Aug 2026 04:04:44 +0000
Manifest next update: Tue 18 Aug 2026 04:04:44 +0000
Files and hashes: 1: Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl (hash: 0meNmYhkWaTMmHb1ZM0jwDMgLZDagVIBW5uibx5+v1o=)
2: tj-txcV-bAmPaRAQDkybGIEMR4Y.asa (hash: fh/4haZ5zFyDqVIfSkskrDHWtTzBTH3wSd7vdCTuFsk=)
3: 5069A4E034B311F0B93A6228C4F9AE02.roa (hash: KKmlGMQL/Yj1Q6C2BYjNzgq/BcJTxhL/wy2LcPDVah8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl
rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 18 Aug 2026 04:04:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B391F, serialNumber=66F6B844A9F809AE307B1B9CEE4BFD47C3C7771B
Validity
Not Before: Aug 11 04:04:44 2026 GMT
Not After : Aug 18 04:04:44 2026 GMT
Subject: CN=6a7a9f5d-feae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:90:73:a4:f4:81:20:44:c9:ca:86:a0:1b:
62:4d:93:a2:40:78:fb:25:34:70:40:b1:e3:b4:0f:
40:ce:6e:f8:a6:24:09:f5:c6:ba:56:2c:22:1c:8b:
af:94:4e:a8:82:a8:52:f5:d1:a8:3a:5f:b3:70:4c:
8d:0e:2d:51:ce:9f:79:90:ce:94:15:d9:fc:76:d5:
58:da:fd:d8:5a:ae:82:92:e9:a5:fb:ed:84:ab:37:
01:7a:62:f8:5a:50:82:78:2e:85:97:54:3f:d3:b0:
54:93:25:fe:32:44:b7:b6:32:59:8e:6a:d1:34:d6:
e9:2f:0b:09:45:66:36:33:14:c1:2a:4a:1d:a3:2e:
d0:06:de:20:bc:11:44:78:58:11:db:ab:8d:26:fe:
e5:cf:97:2b:ce:3d:c2:fc:2b:0d:38:d2:e4:7f:d2:
dd:08:e0:07:32:8a:fc:58:1f:ce:c9:9b:51:ff:87:
a8:d1:c9:e0:c9:5d:39:fe:b4:40:f5:af:57:dd:46:
ac:0e:af:5a:d3:fb:44:a9:44:23:53:85:e0:85:62:
ca:c2:be:c9:6b:46:87:a7:cc:c2:6b:9e:4c:e0:f0:
53:fe:91:33:d6:5c:18:0f:b5:77:8a:fb:02:35:71:
03:3f:cb:2f:b9:90:b5:2d:a2:d9:ff:89:37:01:c9:
44:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:79:12:F3:A9:42:B0:33:B2:0E:BA:A9:05:59:0B:CF:1D:E8:A6:3D
X509v3 Authority Key Identifier:
keyid:66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e0:93:5b:1f:e9:62:f0:b9:00:03:6f:8b:b5:50:4b:b9:e7:a9:
36:1c:ea:1f:75:dd:81:f0:3f:ab:af:e2:ad:de:02:0d:21:cd:
12:e6:51:b3:7b:6a:9b:34:0a:73:ee:32:3f:20:9e:13:62:f4:
40:eb:d1:be:2a:31:81:21:0b:c4:1c:03:47:7d:5f:96:be:b5:
f6:b7:4f:b5:4a:f7:b9:5b:21:03:3f:94:bd:f9:41:8e:d0:4b:
64:7b:59:3a:ed:23:7a:14:3d:d6:3a:8f:21:92:e3:cc:6a:93:
bf:9a:c1:a1:88:38:d7:48:4f:22:f5:5d:0b:66:f8:e2:31:d4:
f0:cf:97:dd:fe:e4:e2:ad:f8:9c:4a:32:28:5e:1b:c5:04:c7:
04:b6:27:47:a6:f0:c7:96:4e:f5:61:b2:10:3b:48:59:fe:73:
7b:d6:d4:2b:88:ad:5d:a3:dc:30:4e:62:e5:60:18:25:a1:de:
1f:10:46:b3:a2:d4:35:8d:f2:9a:6a:e9:9c:36:cf:20:05:0a:
b3:12:51:f7:62:4d:f7:4a:21:93:fb:bf:e8:c3:47:5b:c7:4b:
71:6b:f3:65:8b:05:f0:45:5f:86:59:af:7c:75:cb:98:89:7d:
64:4b:52:90:82:97:1d:d4:02:2e:4e:34:67:8c:eb:95:78:92:
9d:6d:62:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 04:16:08 2026 by rpki-client