
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft
File: zIQ-FAouPvvguUneDtgDg5BgVB0.mft (raw, json)
Hash identifier: JLmxdjW3q933sMqeqYBrHCM6OOIlf3EAK19O6wju/Qo=
Subject key identifier: E2:A9:FD:E7:82:A8:6B:93:CC:0A:EE:BC:C6:E6:61:B5:08:91:24:4A
Authority key identifier: CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D
Certificate issuer: /CN=A91C1A37/serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D
Certificate serial: 3197
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft
Manifest number: 317C
Signing time: Tue 18 Aug 2026 15:29:04 +0000
Manifest this update: Tue 18 Aug 2026 15:29:03 +0000
Manifest next update: Tue 25 Aug 2026 15:29:03 +0000
Files and hashes: 1: zIQ-FAouPvvguUneDtgDg5BgVB0.crl (hash: hEIBgHT2xGZoxvHKA/w06rUF90RUshqoRKM/qRuUS+s=)
2: C3F53A0654F011E7BE4A6431C4F9AE02.roa (hash: QVg7IcJ6NSx06X4qAnqppvTi4+Hmlx/WcbnAXz16lOU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl
rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 15:29:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12695 (0x3197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1A37, serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D
Validity
Not Before: Aug 18 15:29:03 2026 GMT
Not After : Aug 25 15:29:03 2026 GMT
Subject: CN=6a847a40-befb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ac:be:4f:d4:e3:eb:5f:d8:b2:77:c9:a1:7f:
2a:e3:ae:d3:ba:07:10:a2:0b:8a:c3:49:82:42:df:
f6:e0:23:16:09:e6:08:b7:0f:36:2d:2d:2c:11:4f:
0c:7c:bc:d4:a0:47:c2:82:a6:1b:9b:f8:74:6c:02:
64:ff:8b:05:d0:85:27:ff:41:68:86:98:39:60:a8:
93:0d:6f:79:06:fc:f5:9c:2e:27:9e:7d:75:62:9e:
aa:bf:98:16:fb:e9:b2:4a:b1:06:e5:74:73:4e:5d:
ef:57:37:58:40:70:0e:10:15:17:6a:66:cf:bf:3e:
52:76:98:ee:e9:5b:94:4c:06:24:3e:4c:a3:15:90:
5a:0b:85:3a:c1:0c:a3:18:3c:72:6c:2b:ca:2f:f2:
72:56:d6:ac:20:0d:8d:67:b8:e7:a8:5c:8a:2b:70:
c9:e2:e5:aa:62:a6:d5:d0:e7:90:c9:ac:75:e2:ea:
00:c4:8a:25:62:37:8c:d1:10:92:75:84:1b:d4:ad:
2f:2e:26:40:fd:36:bb:57:bd:61:94:48:12:5a:d4:
f7:4e:bd:ad:36:d0:2c:2c:8d:50:44:e9:d6:19:99:
05:1d:78:65:54:cb:51:01:f1:03:f4:cc:7b:e0:ed:
d4:4c:8e:57:c4:c7:95:cc:b9:aa:06:f3:cf:7d:f4:
61:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A9:FD:E7:82:A8:6B:93:CC:0A:EE:BC:C6:E6:61:B5:08:91:24:4A
X509v3 Authority Key Identifier:
keyid:CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:5d:e3:ba:03:53:db:44:8f:1b:ed:48:77:89:e8:99:19:aa:
62:a5:d7:aa:5a:20:8c:a7:db:1b:36:97:23:ca:08:22:27:de:
7b:2c:98:07:fb:96:02:57:bd:e2:3a:d7:47:d0:2a:df:40:23:
1b:39:b9:c1:bb:0a:98:c1:ed:0f:19:f8:68:8e:10:45:69:f0:
c4:da:ec:27:9c:95:47:bb:ee:c0:b8:dd:cb:9b:a8:c8:b7:71:
6f:3d:c9:b5:05:70:96:b7:27:84:e8:f8:e2:14:b9:ba:fb:12:
e7:a8:f5:11:67:fb:73:1c:51:e8:20:4e:14:d3:86:f4:23:eb:
06:4e:1b:d6:57:cd:24:af:cb:1f:f8:a7:be:72:f3:b6:f9:71:
d7:db:05:2d:a8:c1:32:10:eb:da:68:6d:9b:cb:c9:52:af:36:
84:94:18:39:c1:88:aa:76:e5:ab:33:e9:59:f5:39:44:f8:10:
2b:c3:14:3e:a0:c5:2c:74:8a:49:d1:a2:71:ab:23:8e:c8:56:
f6:82:88:fa:26:ff:e7:e9:1f:4a:92:2f:e1:98:00:47:98:9a:
fb:fe:7e:15:d0:a5:a5:2f:3c:97:10:28:a4:5a:fe:50:55:e7:
bf:50:cf:c0:1e:c5:66:e5:7e:9c:93:dc:a0:23:7b:9c:a9:0d:
33:e6:75:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 05:46:00 2026 by rpki-client