
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft
File: zIO7bQqhd53qFp7bpKQCKN4hvXs.mft (raw, json)
Hash identifier: v0KiP3OQ40x+Cj2sXyLEqQu+vFbkd3d26XCT2p6jDQo=
Subject key identifier: 99:C2:1D:C8:5C:13:64:1C:3C:36:68:9B:EE:9C:BB:05:5F:DC:3A:48
Authority key identifier: CC:83:BB:6D:0A:A1:77:9D:EA:16:9E:DB:A4:A4:02:28:DE:21:BD:7B
Certificate issuer: /CN=A91D493B/serialNumber=CC83BB6D0AA1779DEA169EDBA4A40228DE21BD7B
Certificate serial: 0412
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft
Manifest number: 040B
Signing time: Wed 19 Aug 2026 00:45:15 +0000
Manifest this update: Wed 19 Aug 2026 00:45:14 +0000
Manifest next update: Wed 26 Aug 2026 00:45:14 +0000
Files and hashes: 1: zIO7bQqhd53qFp7bpKQCKN4hvXs.crl (hash: lQKFJKwT6JdqLe0cmMjKA8x0qmfsX0RG/3wgJpyevGQ=)
2: 684DDD32CAB311ECBBCE9843C4F9AE02.roa (hash: 9Qc71tRXjbo6SI5tLjNMPaseC4lt8mw3nTisxYF0bHw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.crl
rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:45:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1042 (0x412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D493B, serialNumber=CC83BB6D0AA1779DEA169EDBA4A40228DE21BD7B
Validity
Not Before: Aug 19 00:45:14 2026 GMT
Not After : Aug 26 00:45:14 2026 GMT
Subject: CN=6a84fc9b-a157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:2b:62:19:3c:4f:84:23:92:78:b1:e3:fb:
6c:25:f7:7e:fc:43:85:7d:84:7f:e8:3d:e7:f6:d3:
41:67:17:f2:b7:2e:dd:8c:e1:19:35:71:9e:5e:a0:
2b:86:53:c9:f5:d2:c1:8a:f5:0d:87:4a:f9:0f:5f:
28:e0:a4:e6:4b:9b:66:11:37:4e:1a:85:43:91:db:
dc:d4:d9:d6:75:b5:78:70:48:5c:08:78:96:7c:00:
a3:1b:2c:d7:8a:f3:69:8d:e4:a0:9c:d5:8c:54:9b:
25:8d:6c:19:96:28:12:de:c1:50:6e:56:64:8b:a2:
c8:f9:08:ae:5f:0a:31:da:25:c9:ca:d2:1e:e6:19:
ba:a9:e1:db:58:29:40:df:38:4d:91:c6:f8:75:7c:
dc:cd:44:4e:20:ff:1f:43:df:e1:e0:c3:c9:4f:d4:
44:12:aa:3a:be:00:86:78:ab:49:6c:17:31:8e:00:
76:17:59:4e:12:c7:1e:7d:6c:18:c7:32:d6:30:19:
20:79:20:d6:78:a2:99:b1:a6:a0:47:b9:32:93:18:
46:25:87:eb:43:20:b8:cf:21:fd:c7:f5:cd:88:95:
40:e9:5a:f5:38:b2:a1:e7:2b:93:ef:77:b6:b2:e6:
9b:eb:73:b3:0d:f1:98:cd:fa:07:10:eb:01:7f:e3:
02:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C2:1D:C8:5C:13:64:1C:3C:36:68:9B:EE:9C:BB:05:5F:DC:3A:48
X509v3 Authority Key Identifier:
keyid:CC:83:BB:6D:0A:A1:77:9D:EA:16:9E:DB:A4:A4:02:28:DE:21:BD:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:b2:ad:a2:b1:7d:f2:6a:5a:e9:b0:80:59:bf:ca:56:0e:27:
70:a2:55:d2:35:e8:c2:91:7c:10:ce:2b:bf:14:a2:83:a6:2e:
03:8a:c9:fc:7f:c8:6e:7e:4b:19:b0:84:30:40:cf:3f:c8:67:
f3:24:45:e2:4f:f4:8b:b4:58:14:f6:b8:f2:a4:6e:4e:91:b0:
0f:f7:82:6d:37:fa:87:3e:91:17:17:ae:49:c5:c9:d0:10:66:
65:bc:2c:5f:f0:5e:a5:44:5d:6d:ce:da:25:4c:f5:0e:ee:49:
96:f8:79:50:ee:a0:51:69:f8:88:26:9a:dc:87:0f:66:bb:45:
b2:48:b0:03:5d:b9:e5:31:14:6c:b0:a2:98:69:79:27:ca:69:
fa:a7:ee:1c:8c:bb:76:c6:24:17:21:a5:70:d1:17:0e:67:6a:
ca:69:c7:05:c5:eb:a2:7a:0e:be:8e:36:f3:16:3a:b5:40:16:
f2:8a:62:c6:c5:55:39:07:ac:1f:6c:51:af:0f:c6:4b:8c:a0:
3c:a3:77:61:e4:ba:84:c0:ac:26:a7:51:99:59:a8:89:64:fe:
0e:a2:bb:13:d6:ed:38:ad:20:ea:f3:14:4a:c1:d1:0b:43:d0:
02:41:a1:dd:09:38:24:64:b9:97:76:d1:61:9e:79:b0:fa:9c:
92:69:ab:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:39 2026 by rpki-client