
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
File: ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft (raw, json)
Hash identifier: 2/XfriYQZ40McPYrmedmBdrP8MeuB0bL+XvYlENXFSs=
Subject key identifier: BE:F2:64:A4:63:CC:CB:F3:CB:0D:A0:3D:5C:3D:9B:F4:08:E2:5C:82
Authority key identifier: 65:E0:AF:A4:D1:01:BA:A0:5D:42:5D:EB:7C:25:28:96:CB:8D:5A:86
Certificate issuer: /CN=A91E13CF/serialNumber=65E0AFA4D101BAA05D425DEB7C252896CB8D5A86
Certificate serial: BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
Manifest number: B2
Signing time: Wed 19 Aug 2026 07:45:25 +0000
Manifest this update: Wed 19 Aug 2026 07:45:25 +0000
Manifest next update: Wed 26 Aug 2026 07:45:25 +0000
Files and hashes: 1: ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl (hash: Q94rgv7pNtjDrovYstmdWXEE3lx5EnZ+POXxorc4Eug=)
2: D88B7AD48E3511F0A7463923C4F9AE02.roa (hash: uODZblgFbKItTmQLR70yrBmfsX9HkwmHlSn392rNiq0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl
rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:45:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E13CF, serialNumber=65E0AFA4D101BAA05D425DEB7C252896CB8D5A86
Validity
Not Before: Aug 19 07:45:25 2026 GMT
Not After : Aug 26 07:45:25 2026 GMT
Subject: CN=6a855f15-01c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7c:02:82:cf:e8:d2:25:ff:77:54:98:91:91:
00:3e:4b:98:57:c3:d0:05:69:1a:65:80:91:08:cf:
7b:a6:f1:a1:e1:cc:14:fe:69:d1:ce:bf:64:87:d7:
f5:47:b6:23:e3:ab:a6:b2:25:0c:e4:1a:b9:5d:1f:
83:40:87:74:96:7b:e4:44:7d:40:ef:6a:f9:d8:c1:
c7:97:56:42:42:6c:10:2a:67:04:4c:46:d4:9a:d2:
6a:14:d8:44:1b:31:a5:c6:b4:04:42:86:25:6b:3e:
f7:00:90:11:2b:55:86:19:9b:2a:17:3d:a6:3b:f1:
08:b2:21:6c:2a:a3:b8:6f:a3:43:ea:b9:57:42:3c:
ad:94:8a:61:83:0b:50:71:3b:4d:3d:03:6c:34:b8:
0a:ea:8d:d4:85:33:ee:24:3e:6e:62:07:38:23:2b:
78:00:dd:36:e6:ca:88:d3:0b:5e:ba:7d:56:1f:73:
a2:10:e8:db:ea:46:cb:b8:21:c0:61:23:2b:0d:20:
ad:42:1e:83:ab:bd:2d:f0:ff:bc:d3:64:db:ad:d5:
a0:fd:23:ef:b2:0f:92:7b:d8:de:a0:0d:f4:74:41:
a0:ec:d4:bc:1b:9b:b3:7f:29:fc:09:71:6f:f1:44:
05:63:43:e6:50:ed:93:0b:6a:54:74:c0:16:66:75:
f1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F2:64:A4:63:CC:CB:F3:CB:0D:A0:3D:5C:3D:9B:F4:08:E2:5C:82
X509v3 Authority Key Identifier:
keyid:65:E0:AF:A4:D1:01:BA:A0:5D:42:5D:EB:7C:25:28:96:CB:8D:5A:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:54:e5:c2:05:2a:85:2f:fd:a9:16:b8:11:dc:31:4f:51:65:
d7:52:19:fa:0b:95:22:99:09:4d:0a:93:a2:3c:04:9f:64:23:
1d:7c:df:9d:eb:a0:42:4b:68:32:5a:61:70:94:0a:76:aa:48:
29:c3:09:5b:08:ae:db:4e:51:3e:3b:da:5a:5c:78:1c:4a:b6:
58:38:fe:b5:f8:e2:d8:d5:ce:47:ee:5d:88:1b:7b:b4:dd:c3:
ed:6b:07:63:6b:4f:2a:19:e7:aa:f7:b7:5f:c4:a5:40:38:46:
54:a4:5f:d7:2c:8a:35:6b:81:31:f6:e0:5c:40:27:4f:1c:86:
b8:f0:3a:09:05:39:56:8f:50:ce:c1:3a:09:5a:78:ec:16:31:
ca:bc:59:a3:dc:ef:3a:f3:6c:85:8f:bf:50:6f:19:ba:86:59:
46:f0:57:f8:9a:65:08:cf:f0:e4:0d:9f:b5:64:5e:c8:28:2d:
32:09:6a:f3:d0:60:35:b9:6b:86:58:6a:9c:dc:36:7a:38:81:
c6:64:6a:ae:ab:d2:4c:60:62:ae:f6:06:a8:d2:52:5c:35:4f:
8e:52:d8:f4:9b:76:90:85:9d:77:bc:65:ae:c0:83:02:88:4f:
7b:08:a9:18:95:77:28:33:88:44:25:d3:11:f6:47:64:08:36:
26:88:34:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:46 2026 by rpki-client