
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
File: ZjJswGhaN2NqRbxwlHwhnQtczGA.mft (raw, json)
Hash identifier: z6+dqnYG7xJ5skgycQzhnDURXzG2c9V5jN5IidCJJTU=
Subject key identifier: C1:9D:6D:6A:D2:C7:07:C4:8C:AC:4A:DF:D7:2A:C2:07:6C:B2:A4:F5
Authority key identifier: 66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60
Certificate issuer: /CN=A91E0961/serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60
Certificate serial: AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
Manifest number: AA
Signing time: Thu 21 May 2026 07:24:03 +0000
Manifest this update: Thu 21 May 2026 07:24:03 +0000
Manifest next update: Thu 28 May 2026 07:24:03 +0000
Files and hashes: 1: ZjJswGhaN2NqRbxwlHwhnQtczGA.crl (hash: CAzfcXTZ9QdspOQZjb9BuJATuEx1BteXNbQ8Mat1pVA=)
2: E2245D966E8B11F09764751EC4F9AE02.roa (hash: BxOM7SgqdGJtQ0VBZeNqfMKq52lRmXi/Ew1Q7dVeV+g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl
rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174 (0xae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0961, serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60
Validity
Not Before: May 21 07:24:03 2026 GMT
Not After : May 28 07:24:03 2026 GMT
Subject: CN=6a0eb313-5156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6a:8e:07:cb:d6:8a:f9:6d:39:22:d7:ba:51:
e1:e6:d3:d3:0d:3d:cc:3d:f5:ee:b0:1b:85:6a:d1:
a9:61:4c:04:75:36:17:76:a6:49:db:16:54:f6:51:
95:ff:db:84:3e:7a:36:03:be:75:be:c8:6c:26:96:
7b:f2:b9:c6:12:ed:11:30:c7:7b:c4:bc:05:67:f9:
78:89:5f:dc:39:98:08:84:58:b3:c9:50:82:d6:25:
73:11:d9:28:01:de:34:41:e7:79:71:24:87:89:69:
7f:e4:0c:50:fa:5a:6f:e1:62:03:a7:29:95:5d:9e:
94:67:75:a3:1d:e7:c4:d2:da:6b:28:27:6b:4c:fb:
c3:e0:44:ee:a6:d8:d1:08:b4:9d:02:0a:c3:dd:dc:
25:7f:a6:16:1e:90:64:8d:f8:bf:1a:ee:b5:e7:c5:
35:f1:e8:ec:6c:08:9c:25:d2:e6:c3:4c:14:13:21:
31:ab:a6:4f:9d:20:5a:ea:1d:9a:a2:8f:0f:bb:78:
93:f9:7e:11:e5:e0:41:a7:b2:a3:d6:73:d3:eb:4b:
d8:df:3e:4f:94:99:b4:6a:cb:de:01:f6:46:bb:ea:
89:59:98:33:f6:30:a2:86:04:46:50:ee:f9:e6:a4:
fd:ef:19:8a:77:3f:b0:86:8a:d4:fe:ae:48:2d:2e:
09:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9D:6D:6A:D2:C7:07:C4:8C:AC:4A:DF:D7:2A:C2:07:6C:B2:A4:F5
X509v3 Authority Key Identifier:
keyid:66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:de:d9:06:9e:9c:f7:8a:64:28:ba:a0:15:62:64:38:88:70:
c1:d4:fc:61:ca:81:67:14:3f:05:49:c4:ad:3b:83:2a:34:e3:
b6:dd:af:3f:50:38:55:7d:da:d8:81:f4:42:f9:28:97:b9:5b:
21:f2:9a:ff:65:f7:8c:b4:12:a4:66:cc:6d:2a:d1:fd:92:b8:
af:bd:be:1f:06:a2:57:52:57:ed:1a:cd:3a:4d:ac:af:fd:09:
a0:41:e5:7f:b0:80:e7:69:6f:ed:df:45:5d:f9:a6:86:b2:ed:
d8:32:5b:14:56:79:56:0a:5e:e0:82:38:e0:51:27:bb:f1:fd:
50:a5:01:84:3f:4c:0c:ae:36:8b:d9:55:65:d4:85:8f:3f:9f:
d3:48:c6:e4:67:9b:76:f5:6a:d2:ab:72:10:44:f8:21:d6:7f:
86:ba:16:00:f4:de:24:93:ce:7f:7b:d0:cb:a7:f2:2a:da:c0:
d0:3d:cd:7a:e0:6e:d7:f7:95:54:ac:ac:1a:ea:8e:09:ce:dc:
7c:c5:bc:d6:30:22:2b:b9:05:d4:07:75:d9:fc:69:1a:1d:69:
2a:4d:fc:b3:c3:03:15:6b:d6:f9:2b:61:42:12:9f:fb:f2:ba:
bb:b8:e9:de:91:23:bb:65:60:b9:de:e9:33:e7:73:7c:cc:61:
ce:8b:b9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:48:51 2026 by rpki-client