
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
File: ZtnYF_hsgts986HE2XDyqoXKrX4.mft (raw, json)
Hash identifier: X6cLMDwffbn3pmJ8RiWiUgpmYIVI4d8iYTEsNkwkIQc=
Subject key identifier: 3B:37:AA:AA:6B:58:9A:46:8F:04:A5:3F:F6:D5:AC:2A:85:84:A8:3B
Authority key identifier: 66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E
Certificate issuer: /CN=A91CB435/serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E
Certificate serial: 015A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
Manifest number: 0156
Signing time: Thu 04 Jun 2026 21:38:32 +0000
Manifest this update: Thu 04 Jun 2026 21:38:32 +0000
Manifest next update: Thu 11 Jun 2026 21:38:32 +0000
Files and hashes: 1: ZtnYF_hsgts986HE2XDyqoXKrX4.crl (hash: UAgX4GoJcpMLBhUkMnsv7cG6jE7rckau0ECSEjDxJys=)
2: ACF3D2085ED011EFA4FAB861C4F9AE02.roa (hash: 4De+ftW6AlydF3aj182yhRL0S4HDbta7pD0izCS8LQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl
rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 21:38:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346 (0x15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB435, serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E
Validity
Not Before: Jun 4 21:38:32 2026 GMT
Not After : Jun 11 21:38:32 2026 GMT
Subject: CN=6a21f058-9e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:22:b5:9d:73:e3:cc:53:c9:b4:c1:12:57:a1:
d5:1f:d9:28:a9:74:36:f8:0a:f9:63:d0:24:03:18:
3e:43:29:f0:73:11:fb:3e:58:7d:af:44:d9:d8:89:
15:09:82:2f:4f:93:d3:4e:42:91:03:80:78:50:1c:
03:f3:5e:88:b0:e1:46:81:95:70:c5:14:22:2e:39:
88:3d:a4:8d:56:31:fe:78:8f:30:82:83:d1:b2:09:
41:4d:52:7c:05:76:87:2d:53:f4:e0:c9:cc:c7:cc:
4f:71:37:20:9f:e5:64:8c:3f:54:52:51:00:f3:79:
43:e7:ac:11:5d:31:58:9e:07:4f:fb:f1:97:e7:d4:
19:37:d7:49:45:cb:5a:72:60:1a:ee:0b:6c:84:9d:
f4:37:ad:12:44:ce:46:cc:cf:b4:67:c1:ae:a8:09:
ba:ee:72:7a:79:80:c2:12:04:61:d3:eb:72:7a:cc:
a9:2d:7b:ab:56:8f:57:00:b5:e8:72:f7:56:59:24:
ab:03:17:68:0d:81:bb:94:17:f8:bb:6c:36:b9:49:
ae:06:fa:d1:2e:96:13:ee:1a:cb:28:3b:e2:a3:57:
62:7b:17:8e:10:8d:6f:95:80:af:94:4f:21:9b:40:
60:44:84:72:ac:30:7e:1f:ba:5f:0b:c9:a3:aa:4b:
b3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:37:AA:AA:6B:58:9A:46:8F:04:A5:3F:F6:D5:AC:2A:85:84:A8:3B
X509v3 Authority Key Identifier:
keyid:66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4c:8a:f6:35:7c:d1:2d:ec:85:a1:5e:7f:d7:81:38:32:28:
b0:9c:fa:c6:f8:cc:ba:99:b0:58:a8:02:9e:ef:18:9f:5e:07:
c5:c8:11:a8:ef:a0:f0:07:e9:e4:47:3b:37:d5:1b:f5:60:28:
5d:a7:97:54:f5:b0:57:10:60:d1:e9:88:20:a9:a8:b5:41:32:
3b:ff:75:0b:21:62:06:e8:8a:02:6f:47:a2:46:fc:5a:29:fb:
38:ec:82:53:e0:85:54:87:8b:d6:20:ec:5c:c3:55:ff:64:48:
df:6d:ea:38:58:fd:05:ed:83:a5:12:4b:0c:3e:fa:3e:f3:c7:
d4:a2:c6:17:fb:46:87:bb:e9:11:9e:ea:f6:4d:20:42:34:d6:
2c:f5:1a:8b:96:d3:08:3b:22:9b:2e:04:97:bc:c4:ee:fc:36:
98:87:3a:c3:ed:e7:be:34:fa:6d:32:e8:34:85:42:ff:ae:05:
a6:30:d4:b4:10:b2:05:7e:ab:cc:b3:b1:14:1d:7d:cd:e5:02:
f8:0c:87:22:ea:36:54:d2:04:2c:eb:bd:e3:4d:2d:fc:cc:46:
1b:43:29:45:76:cd:eb:d8:dc:9c:e5:4f:1f:c3:85:30:f7:dc:
71:8e:ce:59:c1:12:81:ac:af:5c:fa:65:34:3c:4b:0e:f4:f7:
d2:7b:53:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:14:49 2026 by rpki-client