
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
File: ZnYczRtMiDhOakBAKM2an4Cd4nY.mft (raw, json)
Hash identifier: Yxo1MPOrx5yzA7OWM0ErDe8j6vEGvQM4K3BUoTmswTw=
Subject key identifier: E2:98:CE:47:F7:C9:DE:00:24:4F:11:E7:98:6C:71:E1:46:5C:88:1D
Authority key identifier: 66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76
Certificate issuer: /CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276
Certificate serial: 0203
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
Manifest number: 01E9
Signing time: Mon 25 May 2026 03:41:59 +0000
Manifest this update: Mon 25 May 2026 03:41:59 +0000
Manifest next update: Mon 01 Jun 2026 03:41:59 +0000
Files and hashes: 1: ZnYczRtMiDhOakBAKM2an4Cd4nY.crl (hash: oW5X1Um4f5BkFXo+vu1P7JbJYBfrJfZE93JFgOinq1k=)
2: AD0C045C8C8511F0B59F1C60C4F9AE02.roa (hash: HGdDjcoTsUm7kJL5rC6tXKA4D2ZhJnskWqB8F3KifFs=)
3: DD822DE842CC11F18C82326FC6833773.roa (hash: k2rUg/X8WAE8IJpYMJbr70n/z6HpIadKYDYrSsSt/+4=)
4: BD8B68BA42CC11F1BD2C946EC6833773.roa (hash: DBXb6/VeFR/zv0bPvOEf3LFvbD14Qt+KDwY55i+OIyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl
rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 01 Jun 2026 03:41:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 515 (0x203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C09C5, serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276
Validity
Not Before: May 25 03:41:59 2026 GMT
Not After : Jun 1 03:41:59 2026 GMT
Subject: CN=6a13c507-4d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:69:a5:db:04:ee:21:13:0a:0a:ef:c9:23:1b:
d1:42:6a:14:88:75:b8:c1:61:7c:d0:88:14:f8:42:
52:bb:e6:ce:94:4a:ea:4a:2d:57:f0:1e:10:0b:c6:
ce:62:f0:e0:51:af:e2:df:3c:d9:22:41:9a:c2:af:
70:c9:9d:5b:f9:ca:74:89:48:26:e2:e4:66:ce:32:
c2:cd:da:23:97:83:be:56:6b:33:eb:7c:d4:76:ea:
f6:b6:ed:94:79:f0:ee:fc:50:eb:9a:bd:1b:55:d8:
09:ad:86:6a:32:da:06:e9:36:78:c0:23:6b:10:71:
cb:4d:28:dd:e0:4a:17:a3:50:34:c7:56:f4:7c:39:
a5:98:59:99:eb:32:e9:7d:95:40:c8:cf:00:3c:05:
29:4a:65:8e:cb:a7:4e:4a:40:68:9d:eb:fc:78:c1:
b5:2b:06:ff:ea:5e:4b:5c:9f:3c:a7:c2:a6:74:50:
cd:c3:5d:e4:6b:26:15:d0:40:d5:a7:57:5b:12:23:
ae:d3:4c:c0:be:c7:8f:93:d2:58:93:26:a4:11:79:
b0:cd:02:1d:e8:37:8a:01:92:20:aa:3f:29:d0:24:
f9:af:a4:ba:d5:8e:de:a6:af:a2:09:b2:f9:ce:50:
e3:6f:66:a9:a1:dd:4f:5b:0c:c8:98:90:c7:71:0a:
15:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:98:CE:47:F7:C9:DE:00:24:4F:11:E7:98:6C:71:E1:46:5C:88:1D
X509v3 Authority Key Identifier:
keyid:66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:10:dc:a3:8b:50:b7:08:95:51:e5:7c:47:7b:92:74:fc:9b:
85:05:0c:73:e8:06:95:31:5d:29:86:1f:8a:38:81:8f:2f:cc:
8d:1a:bd:01:38:69:f2:5a:c1:7f:9a:c5:e3:74:21:ae:d4:76:
d1:4e:4a:5d:38:cf:66:45:72:fb:20:9b:91:a0:fc:23:c3:5e:
fe:34:b5:b1:31:e5:b9:30:a6:cd:e9:af:64:a3:c3:15:04:57:
ed:39:0a:9d:7b:af:e9:eb:61:7e:ae:9f:6e:51:77:af:7b:8f:
2b:2a:4d:46:3d:af:63:36:45:fb:59:ba:38:3c:13:aa:c1:8d:
3d:d3:db:9b:af:58:f6:5b:4c:59:5c:98:48:4e:94:02:5c:bb:
d9:43:ee:67:fb:74:fc:30:d3:04:7f:43:36:2d:ef:71:fe:ba:
b4:54:9f:8b:9d:64:a7:37:2d:b5:88:ee:44:46:40:e7:f3:e9:
8d:fa:df:2d:38:11:2d:eb:86:a6:4d:8d:7c:97:70:1f:ff:9b:
ec:5b:de:83:3f:1b:98:b2:78:2b:5d:c2:43:f9:cb:47:62:ac:
27:a4:41:94:d6:a3:7a:6b:8e:69:71:23:b0:0b:21:40:5e:40:
48:76:ee:77:30:e3:39:ec:9b:51:7a:c4:cd:6e:d1:ca:b4:c1:
2c:2b:10:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 07:46:30 2026 by rpki-client