
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft
File: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft (raw, json)
Hash identifier: 3c8HqNnfmz9MqspZCZs96l9Fm1Ox8KYxtJk1i7fs2bk=
Subject key identifier: 35:CD:EF:E2:35:82:FA:51:A0:11:28:EB:4F:79:58:E7:5C:4D:36:C8
Authority key identifier: 64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00
Certificate issuer: /CN=A91C5ED0/serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200
Certificate serial: 0EF5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft
Manifest number: 2BDC
Signing time: Wed 20 May 2026 16:53:19 +0000
Manifest this update: Wed 20 May 2026 16:53:18 +0000
Manifest next update: Wed 27 May 2026 16:53:18 +0000
Files and hashes: 1: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl (hash: B9zjZtj2Xfa9uA32F1fe787AJtFx+YPI7DJlNnuck90=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl
rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3829 (0xef5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5ED0, serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200
Validity
Not Before: May 20 16:53:18 2026 GMT
Not After : May 27 16:53:18 2026 GMT
Subject: CN=6a0de6fe-d89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:25:8b:1d:6f:aa:ad:30:70:36:ba:6a:5a:be:
9e:b7:9d:6d:7a:a8:1f:cc:a2:cc:f1:4e:79:e0:36:
80:62:28:b4:fe:38:d8:a8:fc:88:ae:54:cf:94:04:
dd:6c:8b:ca:a5:c6:a7:be:bd:f5:37:10:60:e1:1a:
cb:6f:16:4e:d0:ad:c8:58:de:39:0e:e6:be:86:4d:
c8:ca:9e:bf:1d:0c:ca:32:45:b7:35:a5:0e:ae:8b:
33:2e:41:11:ac:e5:ea:71:a5:2b:b7:a1:ae:cf:5f:
64:59:56:1d:52:d2:a7:3b:df:97:0c:ec:54:6d:34:
47:37:06:d4:8e:53:8f:b1:48:46:c3:18:a4:b1:0c:
ee:f4:31:13:09:ea:c0:f9:18:d7:a5:65:f4:ce:9b:
a8:f2:4b:56:fe:bf:97:4f:a8:f4:e4:de:ee:e7:ee:
97:7a:0d:f9:08:3d:7e:f1:df:6c:2d:b5:da:94:44:
e3:08:71:c2:88:83:f1:e8:ac:91:e4:56:76:0e:9f:
48:e6:57:78:7e:90:b5:3c:66:5e:33:2d:84:05:4d:
84:a3:bb:94:8b:de:b0:a6:3d:8a:b0:d6:aa:2c:08:
1e:8e:94:7e:7f:dd:bd:6a:64:95:e9:b5:ca:bc:9c:
96:4f:32:bf:a4:94:dd:d9:86:69:ff:9b:35:09:81:
8d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CD:EF:E2:35:82:FA:51:A0:11:28:EB:4F:79:58:E7:5C:4D:36:C8
X509v3 Authority Key Identifier:
keyid:64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a5:fc:00:6b:8f:3e:4c:d9:39:51:66:aa:90:95:0f:92:4a:
70:08:6f:23:eb:8f:9d:c0:93:c1:70:36:f9:eb:90:c1:6e:91:
c0:2f:60:7c:1e:0e:74:a5:9c:f3:3b:e5:fb:26:32:93:88:81:
3b:a1:ca:dd:4f:fa:dc:ab:88:d4:0c:66:74:4c:06:76:16:55:
ba:17:23:b8:03:8c:c9:4d:93:8a:bc:cd:a9:4f:c1:3a:5d:fe:
fc:e0:b9:c6:58:cb:5c:60:42:45:9c:5d:09:30:04:7b:10:ff:
8e:d5:32:f7:38:d8:7b:9e:26:e2:aa:86:5f:b8:f2:6d:76:5c:
22:fb:ef:f5:90:26:c0:7e:37:44:25:e4:8b:dc:b6:d0:89:28:
8b:71:78:98:a2:64:eb:64:c4:25:ec:f2:47:62:4c:d2:5e:e7:
3c:39:2a:0c:be:7c:9f:7c:3b:29:05:58:9a:3c:38:3f:1b:f2:
07:16:dc:98:0a:00:c3:fc:3f:f0:8c:b8:9f:5b:d3:99:bb:63:
d3:c5:e2:eb:5e:1c:ee:a0:7a:85:43:9d:3b:aa:1d:8e:97:b4:
67:e7:94:b6:2e:7b:d3:45:36:df:c8:c8:42:99:99:e0:71:b8:
09:6c:22:20:59:8a:c4:7b:4c:47:a6:03:14:2a:a2:cc:83:fe:
c6:15:4c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:37 2026 by rpki-client