
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
File: ZjJswGhaN2NqRbxwlHwhnQtczGA.mft (raw, json)
Hash identifier: b2zZeb1d7lt1WicSKNTN2ViJzRRaSNfFmEkHyOgHTJw=
Subject key identifier: 35:DA:36:43:1C:D6:D0:F9:07:88:C0:0B:09:EA:CF:E1:B1:5E:93:DC
Authority key identifier: 66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60
Certificate issuer: /CN=A91E0961/serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
Manifest number: C1
Signing time: Tue 07 Jul 2026 08:11:21 +0000
Manifest this update: Tue 07 Jul 2026 08:11:20 +0000
Manifest next update: Tue 14 Jul 2026 08:11:20 +0000
Files and hashes: 1: ZjJswGhaN2NqRbxwlHwhnQtczGA.crl (hash: WFgh4BohJedKu8unYaOIcLbQQkwrQnzTmnmucFj4iiY=)
2: E2245D966E8B11F09764751EC4F9AE02.roa (hash: BxOM7SgqdGJtQ0VBZeNqfMKq52lRmXi/Ew1Q7dVeV+g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl
rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 08:11:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0961, serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60
Validity
Not Before: Jul 7 08:11:20 2026 GMT
Not After : Jul 14 08:11:20 2026 GMT
Subject: CN=6a4cb4a8-4cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:4e:45:db:36:ec:4c:47:0a:c0:48:93:8d:
0c:5d:00:d9:82:02:a6:78:84:e4:f8:45:3b:63:84:
c3:53:78:1b:e2:56:8b:6a:ec:b1:b2:b2:cf:66:36:
33:c5:30:97:47:ff:2d:92:45:bd:52:98:59:11:b5:
f0:da:d1:62:25:3a:82:21:3e:5c:a6:8b:9b:3c:0c:
42:03:eb:4a:2f:d5:da:e1:24:48:46:f6:fd:a0:2f:
e8:b3:66:08:a9:32:c3:d0:13:76:06:5e:85:84:20:
ed:85:05:96:ee:93:60:48:3a:82:98:89:00:1a:22:
c9:c5:8d:93:6a:ad:39:e3:6c:2c:70:a1:a8:47:ef:
99:e8:37:d4:00:12:38:fd:06:c0:e2:85:18:14:c4:
44:0f:2b:e0:29:ad:ab:e4:dd:93:6e:52:7e:06:4b:
ff:87:99:8c:91:27:83:fa:ae:72:d6:be:80:49:ae:
87:63:e6:c6:e1:70:fb:8a:71:eb:89:38:65:98:86:
fb:7d:12:57:2b:aa:3c:34:e0:63:27:4c:8a:13:75:
a1:26:da:8b:d1:bd:fd:14:b3:8a:83:66:95:58:32:
b1:1c:fd:c3:d8:f7:f5:f8:b2:15:79:b3:8d:d4:b7:
13:93:7b:c4:c6:b9:fd:5c:b3:6b:4c:ed:99:11:4a:
6f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DA:36:43:1C:D6:D0:F9:07:88:C0:0B:09:EA:CF:E1:B1:5E:93:DC
X509v3 Authority Key Identifier:
keyid:66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:1f:1f:cf:6a:e6:33:1a:d2:7f:bd:de:b3:34:48:a8:97:a0:
c9:c1:f2:3c:61:cd:a9:d5:9b:4c:2b:1c:3d:4a:0d:fb:b0:ea:
42:3c:62:16:f4:8f:fc:d9:e3:22:6d:49:86:50:f4:a4:48:fd:
67:31:d4:70:1f:57:e0:7f:d8:10:5b:a9:bc:1a:3a:74:18:ff:
9a:a3:26:99:a1:ce:2e:ea:d4:e3:cc:7d:ad:7b:ae:3c:22:70:
d8:85:a9:59:62:a1:35:d2:4c:c2:98:ae:3f:55:f7:a8:b4:f6:
c2:c6:45:59:8d:64:8d:7e:19:4f:64:5a:bf:4d:05:91:83:79:
e7:74:b6:a3:5a:46:72:45:fc:07:98:4b:65:3e:fd:85:6f:b6:
e4:38:66:43:9c:85:e4:8c:46:5b:e7:68:f8:ca:71:fb:cf:de:
3e:9e:60:6d:f4:96:e6:4c:58:b0:55:e3:95:00:0a:bb:64:a5:
77:22:45:8e:96:77:7c:ea:aa:32:8c:09:d6:17:20:67:2b:6f:
85:d9:0f:63:e5:1c:1c:af:86:fe:39:6a:fc:59:db:0a:06:07:
ba:94:22:8a:66:fe:f4:97:44:c2:19:bf:dc:18:25:8c:bc:a5:
38:f1:93:c1:be:c6:53:f4:7d:ec:fe:8b:79:17:ee:78:b1:74:
96:e2:e9:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTA5NjExMTAvBgNVBAUTKDY2MzI2Q0MwNjg1QTM3NjM2QTQ1QkM3MDk0N0MyMTlE
MEI1Q0NDNjAwHhcNMjYwNzA3MDgxMTIwWhcNMjYwNzE0MDgxMTIwWjAYMRYwFAYD
VQQDEw02YTRjYjRhOC00Y2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqpJORds27ExHCsBIk40MXQDZggKmeITk+EU7Y4TDU3gb4laLauyxsrLPZjYz
xTCXR/8tkkW9UphZEbXw2tFiJTqCIT5cpoubPAxCA+tKL9Xa4SRIRvb9oC/os2YI
qTLD0BN2Bl6FhCDthQWW7pNgSDqCmIkAGiLJxY2Taq0542wscKGoR++Z6DfUABI4
/QbA4oUYFMREDyvgKa2r5N2TblJ+Bkv/h5mMkSeD+q5y1r6ASa6HY+bG4XD7inHr
iThlmIb7fRJXK6o8NOBjJ0yKE3WhJtqL0b39FLOKg2aVWDKxHP3D2Pf1+LIVebON
1LcTk3vExrn9XLNrTO2ZEUpv1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDXaNkMc
1tD5B4jACwnqz+GxXpPcMB8GA1UdIwQYMBaAFGYybMBoWjdjakW8cJR8IZ0LXMxg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk2MS84RTU5OTZDNDYw
M0QxMUYwQjE1MDVCMjFDNEY5QUUwMi9aakpzd0doYU4yTnFSYnh3bEh3aG5RdGN6
R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pqSnN3R2hhTjJOcVJieHdsSHdoblF0Y3pHQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDk2MS84RTU5OTZDNDYwM0QxMUYwQjE1MDVCMjFDNEY5QUUwMi9aakpzd0doYU4y
TnFSYnh3bEh3aG5RdGN6R0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJB8fz2rmMxrSf73eszRIqJegycHyPGHNqdWbTCscPUoN+7DqQjxiFvSP/Nnj
Im1JhlD0pEj9ZzHUcB9X4H/YEFupvBo6dBj/mqMmmaHOLurU48x9rXuuPCJw2IWp
WWKhNdJMwpiuP1X3qLT2wsZFWY1kjX4ZT2Rav00FkYN553S2o1pGckX8B5hLZT79
hW+25DhmQ5yF5IxGW+do+Mpx+8/ePp5gbfSW5kxYsFXjlQAKu2SldyJFjpZ3fOqq
MowJ1hcgZytvhdkPY+UcHK+G/jlq/FnbCgYHupQiimb+9JdEwhm/3BgljLylOPGT
wb7GU/R97P6LeRfueLF0luLpdQ==
-----END CERTIFICATE-----
Generated at Tue Jul 7 11:56:19 2026 by rpki-client