
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
File: RziIJrgc68tdWOukEDkWDSR7wX8.mft (raw, json)
Hash identifier: ZEpW3HdUIqE8DggPgNrc9X9uBj4q02DtCWxaO8VkD00=
Subject key identifier: CE:69:04:0D:09:5A:BA:7F:F2:5B:05:8E:F1:88:9F:A8:38:DD:89:D4
Authority key identifier: 47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F
Certificate issuer: /CN=A91B9B37/serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F
Certificate serial: 0532
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
Manifest number: 0527
Signing time: Wed 20 May 2026 23:37:33 +0000
Manifest this update: Wed 20 May 2026 23:37:33 +0000
Manifest next update: Wed 27 May 2026 23:37:33 +0000
Files and hashes: 1: RziIJrgc68tdWOukEDkWDSR7wX8.crl (hash: u7yrKWqbEiGaOJZMzah8WpR7JGil8zSTKsfFJHF+7uc=)
2: 9F0BF8AE48C711ECAA1A222EC4F9AE02.roa (hash: k7pNWs8rxOIJwQwNSf++pyf5UhHis3rC6IchuHrW/pQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl
rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1330 (0x532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9B37, serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F
Validity
Not Before: May 20 23:37:33 2026 GMT
Not After : May 27 23:37:33 2026 GMT
Subject: CN=6a0e45bd-fbe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fc:73:a5:ea:c5:2c:9e:b0:ad:9f:b1:a5:74:
06:ed:74:ab:1d:e9:2b:4e:f8:3e:24:53:84:55:4f:
3d:ca:1a:8e:c1:9c:1f:6e:9a:68:71:98:ec:c1:b3:
a4:d4:32:22:21:5b:28:74:7d:3b:c1:54:65:d4:d7:
5f:79:61:ca:4c:c1:71:4f:c6:1e:02:4e:de:f9:a9:
f6:c8:a2:5f:51:be:9e:a6:3d:78:3e:dd:ed:d2:fc:
86:a1:00:27:7d:cb:3a:da:02:47:f7:d2:37:e4:c8:
a2:bc:b2:b1:4a:98:b7:9e:a8:39:39:e9:8d:4c:0f:
68:5b:85:8e:e2:ec:26:36:20:a1:c5:cd:cf:bc:15:
03:bf:12:8f:58:48:01:55:db:94:4e:d4:da:82:5c:
b0:03:1a:67:7b:61:7f:2f:03:12:f9:94:19:60:90:
6f:a9:7d:e8:68:b4:ee:3d:14:85:3e:14:84:d8:08:
f6:58:64:a4:fd:45:c9:e1:f9:b7:43:4d:f1:dc:5e:
8c:d7:5d:ef:01:85:86:37:d7:b2:72:a3:00:20:a5:
8d:d4:7f:74:35:fc:fa:46:3b:29:55:e7:65:d3:37:
32:7c:32:e8:2b:63:a6:12:e1:71:aa:2d:9a:7c:a4:
f8:17:ee:47:65:9d:34:b7:8c:32:36:47:d1:ef:50:
f0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:69:04:0D:09:5A:BA:7F:F2:5B:05:8E:F1:88:9F:A8:38:DD:89:D4
X509v3 Authority Key Identifier:
keyid:47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:0e:e9:3f:ed:f6:06:7e:42:0b:37:3d:8f:0e:1e:65:89:43:
e1:40:3d:a9:98:77:78:92:82:57:b2:40:6b:db:1e:08:b7:f3:
4a:97:48:08:9f:50:d8:c6:73:4e:af:b5:d9:51:28:52:81:9e:
91:2a:a2:b1:ff:3b:ce:cf:76:28:7a:9e:e5:7b:26:cc:69:6f:
4e:09:2e:46:f7:37:a6:8b:9c:94:d8:53:0f:24:09:df:8a:ff:
da:31:43:b1:40:cd:10:96:76:e7:3d:d7:cb:3e:97:94:23:1c:
7e:f0:f4:05:db:b1:52:0a:92:5c:33:eb:92:58:3a:7a:c9:81:
31:6a:97:bf:50:62:28:84:13:fd:d0:a4:03:8f:e2:48:67:85:
df:1a:c4:ea:09:70:86:d8:b8:2b:fa:71:f5:b4:99:a5:0e:14:
36:6b:bc:84:6c:88:a0:99:52:18:16:06:50:a1:14:48:27:e4:
6c:09:23:4a:de:a9:8c:43:2f:db:21:0d:a9:37:50:5a:09:bf:
27:06:34:72:ef:2b:97:8d:b9:83:7c:73:0f:2b:94:f3:68:b0:
c7:e3:42:46:6a:02:dc:1e:aa:e2:0a:70:87:d6:0c:50:3e:d7:
42:58:16:30:3a:da:32:52:b7:5c:7a:d2:96:97:d9:f1:00:99:
89:67:5e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:15:03 2026 by rpki-client