
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
File: Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft (raw, json)
Hash identifier: twK2cmiYGuK12DGi74xooLokitwpEOMmyZcrrQGixvg=
Subject key identifier: 8D:36:15:37:9A:2F:90:6D:B6:C0:8F:DC:C4:FE:CE:14:0F:B0:59:93
Authority key identifier: 66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A
Certificate issuer: /CN=A91C146D/serialNumber=664E59A000B91E72F803E6D86841154C8056B88A
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
Manifest number: EC
Signing time: Mon 01 Jun 2026 07:16:31 +0000
Manifest this update: Mon 01 Jun 2026 07:16:30 +0000
Manifest next update: Mon 08 Jun 2026 07:16:30 +0000
Files and hashes: 1: Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl (hash: xmVHDcJcZD4aTJroPLbceX1dfSOh7wdHCiVkW39uZyo=)
2: 992A7358004211F0AC90656CC4F9AE02.roa (hash: p1iNzs7m8iHrfQ8AnJhFGKvDY9F4t1QWaHIUzSsJTWE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl
rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:16:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C146D, serialNumber=664E59A000B91E72F803E6D86841154C8056B88A
Validity
Not Before: Jun 1 07:16:30 2026 GMT
Not After : Jun 8 07:16:30 2026 GMT
Subject: CN=6a1d31cf-436e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7a:fe:d2:fb:a7:84:58:32:f9:b9:0a:64:97:
b4:b1:4c:89:c6:84:e8:31:69:b6:84:51:16:80:f7:
6a:35:e7:a9:01:81:df:c9:2c:dd:04:a1:93:2c:c0:
22:57:b6:c0:d9:82:88:e5:bc:f2:03:84:ea:5d:09:
31:e1:72:7d:85:f9:82:2f:60:8b:51:72:bb:89:80:
d3:d6:28:83:2b:30:f8:ed:3c:48:fa:b4:d8:a0:b9:
bf:57:6e:a0:9b:c8:27:0a:f9:10:23:95:bb:bc:3e:
ea:d1:26:b4:7b:a5:25:61:a1:54:89:74:2e:99:df:
e7:c9:c8:f4:ab:93:df:79:20:59:d9:54:53:ef:30:
b3:68:cd:69:b0:ab:08:fe:a8:1f:6f:67:1c:9a:1b:
5e:77:3a:9c:3a:66:e2:78:59:71:29:87:d0:86:af:
0b:50:50:f2:e5:dd:65:55:98:7d:3c:28:4b:1b:be:
70:0d:31:78:9b:55:ce:df:7b:e5:c4:1d:03:49:e6:
f7:53:19:9a:d9:cb:91:88:7a:b8:85:87:9e:d0:20:
49:c5:7d:a0:ad:b8:bf:3c:57:6b:bf:2f:aa:f1:5d:
a4:72:9c:a2:97:fc:1a:37:01:af:e1:de:1c:5a:2f:
3e:84:e7:85:9c:01:c8:81:dd:5c:4d:a1:dc:7b:92:
c1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:36:15:37:9A:2F:90:6D:B6:C0:8F:DC:C4:FE:CE:14:0F:B0:59:93
X509v3 Authority Key Identifier:
keyid:66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d8:d9:17:bf:4d:55:ce:69:f8:fe:8a:fe:ea:c3:fb:b1:9e:
75:64:45:07:f0:e5:25:08:f7:4e:f7:f2:8d:c0:4b:82:f2:11:
22:62:94:6c:b6:af:40:09:2f:15:72:b7:65:09:d2:36:e8:f4:
a0:07:fe:dc:a1:d1:98:e2:e0:20:6d:22:bf:0d:2b:f6:6d:19:
3c:fa:d4:18:ea:d6:6b:9d:5a:91:9d:30:90:37:44:0d:ba:cf:
e9:30:35:e6:b2:9d:ba:b7:20:d3:d6:b1:9e:de:5b:50:65:43:
ca:e0:50:bb:66:bc:25:82:26:94:cb:13:81:ef:7d:5f:0f:aa:
b3:cf:d7:5d:71:13:73:b7:d0:f4:05:2a:e0:94:12:be:27:87:
d3:01:9f:f3:30:57:f4:f5:e6:a4:98:98:ab:bd:b3:20:2c:fb:
15:9a:46:c1:67:01:47:e2:96:84:92:4e:9f:73:6d:28:5e:37:
12:4f:3b:d9:12:26:db:98:48:c3:7e:8f:f8:c0:66:b0:cb:11:
27:8a:16:fb:3d:4f:66:23:8e:18:d4:59:83:ce:6f:31:4c:7f:
5a:d4:b5:a6:71:5f:97:7b:29:ba:ef:77:8d:70:7a:21:1a:b4:
1d:9a:08:68:03:92:4e:29:01:8e:b1:aa:3c:4c:10:bc:3a:fe:
42:5d:4a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:38 2026 by rpki-client