
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
File: zF1c4NwYIQkMvHU417txI3GQguc.mft (raw, json)
Hash identifier: L2/Ay/OKxFgxSY8uRdMZE6IPS4dmcZKzf7Zj+qLpjuU=
Subject key identifier: E7:23:13:C1:3F:8B:C4:4D:74:F5:BB:AD:82:F7:E6:A5:19:91:88:9D
Authority key identifier: CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7
Certificate issuer: /CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
Certificate serial: 0908
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
Manifest number: 08F4
Signing time: Mon 20 Jul 2026 20:47:18 +0000
Manifest this update: Mon 20 Jul 2026 20:47:17 +0000
Manifest next update: Mon 27 Jul 2026 20:47:17 +0000
Files and hashes: 1: zF1c4NwYIQkMvHU417txI3GQguc.crl (hash: +Z4zdfHJb6RwNTYTI2L9rgu6bBALhpwe0AXiLm4HJys=)
2: 3A4918D41DED11F18280100E163D8C67.roa (hash: Juhjiq7zpIGJ2ca6uyWvgKrk4pkgUf8b9Px9rrY5jmY=)
3: A3FFFAF41DED11F18835BD3E163D8C67.roa (hash: 5k8cO87Qj/gNgbt2kI9Eh+2F5/UczXoTj75VoZrq4q4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl
rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 20:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2312 (0x908)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C91A6, serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
Validity
Not Before: Jul 20 20:47:17 2026 GMT
Not After : Jul 27 20:47:17 2026 GMT
Subject: CN=6a5e8956-f7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4c:49:55:3d:93:5a:ec:67:80:08:f4:61:f4:
8f:77:52:fe:fb:83:e3:d9:e9:ee:24:99:85:ca:6c:
de:1b:a4:3a:ef:ee:16:f6:f2:8e:1a:45:1d:2f:6d:
53:52:12:5b:c8:2d:f4:ab:9c:ca:c1:89:d3:b4:af:
82:c7:ad:6c:2a:fb:ed:82:96:18:1c:ec:1e:a9:07:
58:4a:56:98:16:87:a0:06:7b:3c:a4:c9:16:aa:35:
75:71:2b:6f:4e:7a:90:23:db:8d:74:78:cd:df:66:
a7:e1:9b:9a:14:2e:be:35:45:60:d6:54:c0:be:eb:
25:cc:a0:3b:b9:6c:88:c2:87:c9:71:47:54:8d:c3:
45:7c:60:3c:8d:40:4e:a7:97:42:ed:83:6f:60:c4:
f9:ec:f8:57:cc:d5:42:31:93:ce:a9:18:9d:e6:96:
54:cf:05:8d:9c:7c:0f:fc:d3:7a:ae:cd:7e:5c:c9:
19:c3:93:ef:0e:76:ab:79:87:7a:a3:79:b4:a4:6e:
64:a0:cf:47:1f:93:ae:0a:47:c6:00:92:ba:01:c1:
e6:fb:6d:bb:fe:47:5c:e0:c6:52:a0:48:c5:ef:34:
2d:c0:97:a7:fe:4c:b9:ab:de:30:40:18:c1:55:8c:
45:15:e3:0a:db:d9:9c:d9:42:ba:15:86:06:76:02:
bc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:23:13:C1:3F:8B:C4:4D:74:F5:BB:AD:82:F7:E6:A5:19:91:88:9D
X509v3 Authority Key Identifier:
keyid:CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:c0:da:59:20:3a:e0:4b:c8:d7:a4:c4:8e:9f:27:71:68:ad:
2f:9c:d5:f8:27:13:9c:f0:9a:18:08:73:f4:3c:c0:49:f5:e5:
e3:f6:55:10:58:c2:2d:20:f5:d0:24:38:b1:a7:fb:57:9b:81:
bf:93:d0:4e:5c:41:a2:f9:af:90:e7:cb:89:50:3b:d9:36:fd:
86:b9:28:f4:9a:5d:37:c6:8c:32:4f:32:e5:96:f4:95:cb:63:
10:ee:7d:ad:d8:97:7c:eb:98:8f:cf:04:38:0a:6a:58:98:72:
c9:28:5e:f5:ec:03:2f:e3:ae:14:e6:82:0e:70:46:dc:79:fe:
2b:71:47:c5:88:25:8f:db:0e:37:81:7d:99:cd:ae:53:fd:32:
ca:e4:b3:46:3f:1b:a5:bd:97:eb:a0:52:94:14:af:63:b9:00:
d0:1e:95:3c:e9:19:a3:23:e7:37:34:b2:e8:98:ff:3b:f0:ca:
2f:dd:8f:0a:76:49:b0:c1:6a:86:14:17:09:db:03:88:9a:38:
2d:60:b8:8a:e4:c9:31:95:15:96:67:7e:63:40:49:e5:63:71:
69:05:79:c0:53:36:53:36:62:5c:f8:60:4f:85:ed:4a:c7:24:
9f:38:fa:00:bf:c0:38:03:6e:89:8a:e4:98:2c:33:39:b7:2b:
c1:c6:97:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 06:02:06 2026 by rpki-client