
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft
File: zxWtEC7t37zKaFhab1w4F_6KGNU.mft (raw, json)
Hash identifier: JHn0dHyBLjvhxezImXsXcpuLPJrXqrh52DEVvTu1phY=
Subject key identifier: 65:06:48:92:33:45:76:2F:16:C1:01:AD:21:2B:D0:01:1A:2D:54:28
Authority key identifier: CF:15:AD:10:2E:ED:DF:BC:CA:68:58:5A:6F:5C:38:17:FE:8A:18:D5
Certificate issuer: /CN=A91B8D56/serialNumber=CF15AD102EEDDFBCCA68585A6F5C3817FE8A18D5
Certificate serial: 0523
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft
Manifest number: 0518
Signing time: Wed 19 Aug 2026 00:00:28 +0000
Manifest this update: Wed 19 Aug 2026 00:00:27 +0000
Manifest next update: Wed 26 Aug 2026 00:00:27 +0000
Files and hashes: 1: zxWtEC7t37zKaFhab1w4F_6KGNU.crl (hash: IAVo10sj3FJqZu4QUL1HwMIw7jltodpFIxO4UAL1Avk=)
2: 70638510630E11ECB30DB557C4F9AE02.roa (hash: nDKlIV5XCKKFEVpkwUv/eg1d2ekpQE5TiySuHisuD2Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.crl
rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1315 (0x523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8D56, serialNumber=CF15AD102EEDDFBCCA68585A6F5C3817FE8A18D5
Validity
Not Before: Aug 19 00:00:27 2026 GMT
Not After : Aug 26 00:00:27 2026 GMT
Subject: CN=6a84f21c-e141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:83:c2:ff:a6:af:bf:33:53:a0:96:18:d9:df:
27:a6:a9:82:cc:4b:f3:a5:fb:ed:97:5d:2d:8d:b8:
53:b2:e8:fe:98:47:ab:f9:0d:c5:57:8d:67:6d:66:
d9:31:5f:2f:86:4f:7a:fc:63:48:6c:20:87:f1:c8:
fc:7d:4c:25:58:73:b2:af:92:45:88:25:00:fa:a5:
b6:b0:1e:1f:f3:28:8a:28:4c:4c:0a:63:09:12:82:
88:dc:5b:12:38:e4:19:1e:c7:45:73:8b:34:21:4f:
7d:b0:f4:99:1b:32:f0:e7:26:1d:f7:02:ba:a2:ff:
59:36:73:9b:41:a7:39:ca:56:64:98:9c:dd:fc:a0:
9d:c1:68:59:c5:7c:98:e3:36:4a:26:76:90:8b:ae:
4b:78:6a:98:25:e4:0d:7d:1e:b9:06:04:f5:a8:e3:
2f:07:5d:fe:b3:e1:2d:77:0b:d6:1d:d2:ba:86:50:
0f:00:bc:d8:37:9e:8b:99:2c:31:55:aa:75:7d:ce:
33:b8:5c:ae:85:84:2c:72:f2:b4:a9:48:9c:7f:f4:
d4:c6:fd:9e:f7:97:db:97:e1:d4:a6:c0:02:db:0d:
ec:1e:a0:6c:1e:d1:b3:48:6d:49:46:bb:c6:27:73:
ef:f8:5b:2f:ff:1f:a9:3c:25:80:0b:76:96:8b:14:
26:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:06:48:92:33:45:76:2F:16:C1:01:AD:21:2B:D0:01:1A:2D:54:28
X509v3 Authority Key Identifier:
keyid:CF:15:AD:10:2E:ED:DF:BC:CA:68:58:5A:6F:5C:38:17:FE:8A:18:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:2e:80:7f:fe:f7:4e:63:30:13:0e:54:8f:20:8f:0e:f0:99:
ce:35:e5:a7:27:94:10:cf:59:54:f2:1e:06:8d:12:ec:74:fa:
e0:12:27:87:4c:e9:2f:8b:ca:2a:bf:e9:6d:c6:3d:ba:30:5b:
ff:c3:fb:95:72:d1:e8:07:bc:4c:77:a2:46:d8:61:02:9a:d8:
89:d6:a7:21:59:c3:43:95:5f:3e:9d:78:6b:cf:5b:64:3d:f8:
0a:4b:8b:33:b6:54:25:fd:cb:e9:3c:35:0e:03:3e:22:e6:65:
ef:79:31:2f:cd:6a:e4:14:5c:70:f1:5b:f3:c2:1d:dd:7b:fe:
a8:8f:a8:e5:58:1d:37:4f:70:06:48:48:d1:f2:76:44:24:15:
5f:9a:69:10:a5:0d:fe:7c:a4:b8:80:3a:83:4b:7c:20:0a:69:
b5:fd:35:14:ac:84:cc:6e:c7:38:87:e9:43:4e:6a:db:42:d6:
a5:b3:aa:08:59:a3:9a:c9:19:74:5c:44:51:2b:5a:ea:ae:32:
ed:7b:61:2b:9c:35:60:a3:5a:a8:fe:c0:62:30:fb:37:24:cd:
9a:28:6d:d7:1b:a3:55:d9:32:da:f3:91:bf:c1:48:51:47:1e:
d0:2a:b9:6a:18:d0:3e:8c:bb:1c:ea:da:da:b7:03:01:32:32:
fc:e3:25:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:07 2026 by rpki-client