
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
File: cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft (raw, json)
Hash identifier: 0Ica9ufrYblta9sosdxeLwgEbLZpbzaW3R80ywKgBIs=
Subject key identifier: DE:D9:EF:CE:04:F7:F2:61:F4:77:59:D9:A7:4E:1C:5A:BD:CB:4E:3D
Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Certificate serial: 0618
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
Manifest number: 05DA
Signing time: Sat 20 Jun 2026 23:12:19 +0000
Manifest this update: Sat 20 Jun 2026 23:12:18 +0000
Manifest next update: Sat 27 Jun 2026 23:12:18 +0000
Files and hashes: 1: cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl (hash: KBj+1p1cHuDjVqu/JQ7fZ0+0wdDhCuWSwGVWUDvzMC0=)
2: C2D59C44559811F196E9B1D195833773.roa (hash: rPQ29Js0otbpC2kfjei1QmK5a7iDC6noRtlg8ljKwUg=)
3: B3110B8E5D6F11F181938A5ABF833773.roa (hash: 88VWidR+c8KxMwBLDiaixZqZwAYAjFYw2RjtohjUp1A=)
4: C6EB59A8514811F18C98F063A3833773.roa (hash: +M6AGrSBwc8D2/Ub0BOuDHUMRKDibhdsw0NIJ/WIkdQ=)
5: 345F56F87FE311EF80C0F71FC4F9AE02.roa (hash: qDBbxutM6whAYRqUGL23M9IPWqduEyKAvV9efNJXIMw=)
6: 45A587CE540911F181B8BB5591833773.roa (hash: tHX02Ge/HSWD6wrR/8JkpM5CyXcYX10IE87OI0QCTUo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Jun 2026 23:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1560 (0x618)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Validity
Not Before: Jun 20 23:12:18 2026 GMT
Not After : Jun 27 23:12:18 2026 GMT
Subject: CN=6a371e52-1ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:47:f6:64:c6:f1:96:07:61:7b:14:96:e7:07:
fb:db:03:90:48:26:3e:01:45:e5:0b:cd:98:1c:b8:
a2:55:90:ec:98:67:b5:b4:5d:ea:f4:0e:1a:5a:0f:
71:ac:94:a6:39:e6:b0:13:57:fa:b2:38:b1:7f:45:
3d:67:95:8a:a4:34:08:0b:73:91:f4:16:58:76:16:
83:ff:0a:ed:c5:ca:ce:5a:ce:d7:ca:c1:d1:77:88:
47:39:45:1d:69:a8:f8:51:fc:dd:56:4a:59:bb:46:
aa:a2:c2:a1:e1:b4:76:93:c3:cc:80:f3:ec:35:be:
9f:c0:e1:d8:85:8b:56:f2:13:d8:cd:e9:11:40:e8:
57:25:00:19:9b:66:bf:fc:d5:2c:24:a6:9d:4c:49:
1e:8e:ea:e3:07:dd:a8:ee:3e:5b:73:68:d4:f8:3a:
60:ad:be:84:e5:ff:96:60:81:f8:76:0e:96:5d:2e:
df:1d:89:6c:1f:8b:62:58:35:9a:8f:ca:41:4a:03:
45:6f:33:53:87:9d:8a:90:60:12:30:47:f3:1c:21:
38:9c:79:0b:d1:88:f3:3a:9d:cc:ca:57:b9:d9:4a:
9d:7f:3f:8a:bf:7c:9b:84:00:a4:70:b8:63:06:f0:
59:e4:04:b1:14:f7:07:d5:af:6f:7c:e3:43:d5:8e:
7b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D9:EF:CE:04:F7:F2:61:F4:77:59:D9:A7:4E:1C:5A:BD:CB:4E:3D
X509v3 Authority Key Identifier:
keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b7:c2:b6:44:f5:03:08:d7:cb:0f:12:d1:81:83:12:10:52:
1e:a3:46:94:67:dd:4f:15:bb:ee:3a:1f:9e:77:0e:de:db:3c:
54:f3:39:28:e9:81:7f:30:eb:f2:31:91:a2:c9:4a:26:2d:bb:
86:28:1a:c2:8d:bb:5e:a9:70:aa:60:ec:55:8f:a7:ae:e2:9c:
cb:bc:6e:5b:37:b4:84:eb:cb:77:13:9f:65:4d:b2:30:54:1f:
3f:67:49:88:4d:04:5b:52:13:c0:75:52:90:1f:25:ee:30:d3:
fb:a9:b3:d4:23:0c:7a:4d:19:59:0a:84:7a:28:cd:67:62:48:
fa:c9:fe:f2:fd:df:c6:7e:b4:03:c5:8f:6a:dd:eb:2c:63:a8:
71:3b:b3:aa:d9:1c:10:cf:c8:cc:3f:ed:32:bf:9c:7a:17:83:
58:95:c4:6e:59:d3:72:4e:89:69:93:e0:70:59:8e:13:b9:05:
ed:59:dc:d2:72:b4:8c:32:5d:b0:72:ff:4a:01:aa:10:12:d0:
85:1c:27:9b:69:87:be:83:5b:d7:6c:4d:88:50:55:76:71:0b:
8d:5a:95:7a:cc:f0:cd:ea:07:4d:c1:4e:94:5a:f3:e9:af:fc:
34:e5:b0:76:56:3b:76:0b:85:5e:e4:a1:79:05:c6:6f:19:4d:
53:4e:85:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5
RkEwNjA4QTcwHhcNMjYwNjIwMjMxMjE4WhcNMjYwNjI3MjMxMjE4WjAYMRYwFAYD
VQQDEw02YTM3MWU1Mi0xZmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz0f2ZMbxlgdhexSW5wf72wOQSCY+AUXlC82YHLiiVZDsmGe1tF3q9A4aWg9x
rJSmOeawE1f6sjixf0U9Z5WKpDQIC3OR9BZYdhaD/wrtxcrOWs7XysHRd4hHOUUd
aaj4UfzdVkpZu0aqosKh4bR2k8PMgPPsNb6fwOHYhYtW8hPYzekRQOhXJQAZm2a/
/NUsJKadTEkejurjB92o7j5bc2jU+Dpgrb6E5f+WYIH4dg6WXS7fHYlsH4tiWDWa
j8pBSgNFbzNTh52KkGASMEfzHCE4nHkL0YjzOp3Myle52Uqdfz+Kv3ybhACkcLhj
BvBZ5ASxFPcH1a9vfOND1Y571QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN7Z784E
9/Jh9HdZ2adOHFq9y049MB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx
RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD
S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MEQ4Ny9GNjgzQ0VGMjIxRUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3
cVpNX0tVUGNKcE9mb0dDS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHLfCtkT1AwjXyw8S0YGDEhBSHqNGlGfdTxW77jofnncO3ts8VPM5KOmBfzDr
8jGRoslKJi27higawo27XqlwqmDsVY+nruKcy7xuWze0hOvLdxOfZU2yMFQfP2dJ
iE0EW1ITwHVSkB8l7jDT+6mz1CMMek0ZWQqEeijNZ2JI+sn+8v3fxn60A8WPat3r
LGOocTuzqtkcEM/IzD/tMr+ceheDWJXEblnTck6JaZPgcFmOE7kF7Vnc0nK0jDJd
sHL/SgGqEBLQhRwnm2mHvoNb12xNiFBVdnELjVqVeszwzeoHTcFOlFrz6a/8NOWw
dlY7dguFXuSheQXGbxlNU06FqA==
-----END CERTIFICATE-----
Generated at Sun Jun 21 19:14:10 2026 by rpki-client