
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft
File: ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft (raw, json)
Hash identifier: z1t9rAyLJYgKTZMrSz38sr+imPhC+19EyeSJ37lGyjo=
Subject key identifier: ED:13:F7:24:E2:16:92:F5:69:B4:F2:7D:EB:99:59:59:9B:09:21:AB
Authority key identifier: 64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61
Certificate issuer: /CN=A91CE0FB/serialNumber=64B1BB87024DDFBDB4415A901D807E3DDD8A7361
Certificate serial: 0588
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft
Manifest number: 0580
Signing time: Wed 20 May 2026 23:19:23 +0000
Manifest this update: Wed 20 May 2026 23:19:22 +0000
Manifest next update: Wed 27 May 2026 23:19:22 +0000
Files and hashes: 1: ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl (hash: 899sZx7MuZQbsqyvzp/XwIxWmBzyKhuyOPB9N/aGadg=)
2: 47170244259D11ECA74AC10AC4F9AE02.roa (hash: TifDEeF2JOdL8j7fTV6ymoUhmjRmDa6hW57MtSf6qzw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl
rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1416 (0x588)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE0FB, serialNumber=64B1BB87024DDFBDB4415A901D807E3DDD8A7361
Validity
Not Before: May 20 23:19:22 2026 GMT
Not After : May 27 23:19:22 2026 GMT
Subject: CN=6a0e417a-a073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:64:5c:a9:f2:7f:f4:a3:53:0f:b3:4e:59:d5:
58:20:04:d1:6a:65:39:36:2c:9e:84:6d:f0:de:81:
2b:52:b6:66:47:4a:06:85:5a:1e:c6:8a:85:cf:24:
a6:10:d5:da:0c:b3:45:07:46:fd:d1:f8:37:d3:0b:
f0:0e:9b:8c:ad:5b:ae:4e:2a:61:ec:18:31:48:9d:
9b:a0:86:a8:c7:9e:12:a1:c6:2a:ea:57:be:11:98:
39:90:5a:20:a3:8e:8c:40:ac:ec:5f:6a:00:4a:fb:
a0:22:ad:f8:e5:86:9c:7c:47:80:8b:9b:aa:67:ff:
56:61:7b:f0:9c:14:6f:c2:22:c7:ba:4a:ab:79:0b:
db:a8:fb:a1:fa:a8:69:06:f9:d9:56:02:a5:e9:0b:
7f:04:2c:da:f7:ca:83:9a:94:dc:a6:4e:70:85:e0:
ff:87:29:ee:cc:22:47:4d:f0:4a:f5:12:a5:c9:21:
f0:7d:07:74:26:8b:f7:47:33:22:38:3a:41:76:6f:
17:04:4a:71:19:c6:a0:63:d7:d1:81:e2:dd:df:27:
d0:35:3e:ff:33:8e:19:80:49:9f:25:66:2d:9a:6d:
f3:64:a8:62:bf:76:98:19:f8:37:3e:3a:63:4e:cd:
3a:1e:0a:0f:d8:64:8d:5c:62:09:10:8e:b4:9b:ee:
73:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:13:F7:24:E2:16:92:F5:69:B4:F2:7D:EB:99:59:59:9B:09:21:AB
X509v3 Authority Key Identifier:
keyid:64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:f4:48:ed:c5:dd:04:24:6c:f4:5e:db:09:86:3f:ee:4c:52:
8e:55:e9:59:3f:a8:5e:96:fc:5d:1b:2d:7e:ee:15:23:88:3d:
25:f3:c8:9a:e0:59:44:f3:36:88:c5:4e:63:8f:d7:8b:10:0b:
d4:f5:a4:66:23:ef:3f:c1:b1:bb:01:5f:e7:79:94:26:0c:41:
7c:51:c6:f6:0e:90:c1:ce:a8:93:78:b5:f1:c8:d2:0e:89:cc:
f8:c6:48:03:d9:40:dc:1f:51:ed:43:d7:c7:0d:f4:05:36:12:
e5:08:3d:36:78:90:63:a0:14:21:d7:c2:17:3d:a0:ac:a3:14:
b0:b8:51:26:5d:23:d9:f0:0b:3e:29:fd:9b:77:f0:05:12:24:
fe:dd:ab:39:f6:4b:63:9c:f5:92:9f:e5:6e:54:8a:53:5e:0d:
1f:fb:8a:1b:46:e7:f5:a2:fe:5f:9d:af:0f:81:6d:d2:e0:61:
73:bd:53:69:02:11:bb:1b:33:1e:3d:e9:8e:76:a6:b9:cb:61:
30:3e:5c:9d:ad:68:20:04:a1:ca:f0:55:fe:b6:97:32:d7:c9:
b9:a6:7b:30:c5:48:14:bd:2a:43:04:0e:44:25:e5:db:ce:8c:
96:c2:9c:d2:a9:7d:60:a7:b8:70:2b:ac:24:50:d1:3f:1b:a4:
3f:e0:b1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:26 2026 by rpki-client