
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft
File: ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft (raw, json)
Hash identifier: IWDdXm4EhIQN0Sh7uK5l5FvcUe14TTAr6PokXA/GJqY=
Subject key identifier: C7:A7:B8:5F:3E:53:02:2A:D6:0A:47:C2:F7:1F:75:7F:72:81:2C:75
Authority key identifier: 65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E
Certificate issuer: /CN=A91D58F6/serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E
Certificate serial: 0EEE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft
Manifest number: 0EDF
Signing time: Wed 20 May 2026 17:39:36 +0000
Manifest this update: Wed 20 May 2026 17:39:36 +0000
Manifest next update: Wed 27 May 2026 17:39:36 +0000
Files and hashes: 1: ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl (hash: hU8h1d26Fk4KqvdMwZWru52UFXMlOUeT1CgV1ap4AuE=)
2: C0743AE8A6B611E9AB731B69C4F9AE02.roa (hash: iihOs73vGdIvHbM2jbGXnunoWi4oTaT680dFjp4s8/Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl
rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 17:39:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3822 (0xeee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D58F6, serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E
Validity
Not Before: May 20 17:39:36 2026 GMT
Not After : May 27 17:39:36 2026 GMT
Subject: CN=6a0df1d8-9077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bc:62:d7:f2:4f:e4:de:fb:4d:8e:12:94:56:
bb:52:3c:36:09:b0:f3:12:11:82:92:e1:fb:fb:1f:
56:f6:6e:8b:5e:56:a7:9f:d7:60:1b:08:63:08:49:
7a:12:dc:8e:f3:c7:65:1d:31:9b:e4:95:6e:1f:ef:
b1:b6:09:a1:68:88:f6:0c:9d:45:9c:86:95:a7:08:
0c:cf:f0:1d:fe:07:cf:19:3e:72:32:df:18:18:c8:
32:c7:cc:b5:3a:f9:bb:ee:62:9b:fb:4f:1a:bc:75:
0a:85:7a:14:a0:d9:32:89:36:5b:cb:1b:2b:2e:94:
91:1f:0c:e2:43:fd:d6:2a:a5:e9:84:f6:fa:3c:db:
eb:bd:31:f4:ff:eb:8b:eb:ed:89:01:3a:4b:4e:39:
e7:c5:d4:94:74:8a:f1:68:d0:99:7e:56:24:fd:e6:
df:69:4a:03:4e:fe:b3:2a:6b:e5:41:37:cc:d3:75:
09:c3:eb:c9:24:45:ce:c7:0e:21:87:a9:05:b4:19:
ce:e5:4e:c9:24:84:93:e9:7e:65:60:63:14:fb:02:
8c:4a:25:2b:a6:35:db:d4:fe:5d:a5:01:e0:5c:ef:
00:b3:d3:2b:d4:b0:61:94:47:60:80:55:60:df:57:
10:44:a6:6e:a6:a1:ae:4b:84:3d:34:2e:e1:07:bd:
c9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A7:B8:5F:3E:53:02:2A:D6:0A:47:C2:F7:1F:75:7F:72:81:2C:75
X509v3 Authority Key Identifier:
keyid:65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:76:b2:a2:38:bb:e6:39:bb:72:79:f8:39:83:57:f3:6f:d5:
f8:93:c9:6d:bc:d5:47:d4:b6:d0:82:66:24:27:91:0f:73:a2:
ed:85:40:c5:92:fc:eb:ca:0e:d0:11:ad:ce:0b:0f:64:5f:9d:
1e:06:a8:a4:3b:2e:eb:94:0d:36:b4:92:36:e2:fb:ae:40:d8:
3c:d8:24:15:fb:8a:62:95:6a:3d:46:fd:d2:40:99:a7:ca:2e:
ae:ee:c8:5b:84:73:9c:1f:9b:ca:c1:52:b2:60:cb:fa:07:ba:
62:1b:e9:bd:d2:26:3b:58:52:84:83:36:3e:61:d3:24:69:cd:
f1:d8:3c:a2:e7:f5:f0:88:7d:b5:99:32:63:10:e6:56:36:1c:
9a:1e:0d:4d:9d:33:2d:ab:30:80:c4:ea:e0:d0:45:0f:3f:ae:
93:65:4e:4c:09:12:80:53:39:8e:5b:bd:71:78:91:5f:11:03:
1f:f9:09:57:6f:37:75:13:31:c2:f1:12:f8:f9:ec:ed:e1:a2:
24:82:bb:56:d6:5c:ea:ad:f8:ea:12:a1:a5:f2:b9:f6:8b:c8:
67:11:96:79:14:57:01:43:da:4f:03:2a:b6:27:9a:0a:90:b0:
b2:34:9b:60:c6:ee:46:88:48:2c:d6:bc:be:ad:92:f5:15:da:
32:9d:4b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:03 2026 by rpki-client