
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
File: Zye49DPvL-CAhCxu6KbMPcJEYm8.mft (raw, json)
Hash identifier: GAVa+8an0P8uqAY2yrMDbUZJa6ddz2+VbHujiC1Z42I=
Subject key identifier: FD:93:F8:93:A3:A8:13:2D:97:8A:10:04:90:A2:D8:57:CF:DE:05:EB
Authority key identifier: 67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F
Certificate issuer: /CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F
Certificate serial: 0D5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
Manifest number: 0D46
Signing time: Wed 26 Aug 2026 18:02:32 +0000
Manifest this update: Wed 26 Aug 2026 18:02:31 +0000
Manifest next update: Wed 02 Sep 2026 18:02:31 +0000
Files and hashes: 1: Zye49DPvL-CAhCxu6KbMPcJEYm8.crl (hash: RaopXym1PTbfUdhxnZRcToIrOCx0D9IW3leCby8LL2w=)
2: E0BC0B4C011411EAAB0EF153C4F9AE02.roa (hash: hGCYtCOIvO4umfp83BHr43BYp8vvO8LHfZyo0x1hdrM=)
3: E14507F8011411EAAB0EF153C4F9AE02.roa (hash: qiDkvBGA0vQoRNYuuefBl5X6My9S37pGkNHkOEYdfqI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl
rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 18:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3421 (0xd5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4023, serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F
Validity
Not Before: Aug 26 18:02:31 2026 GMT
Not After : Sep 2 18:02:31 2026 GMT
Subject: CN=6a8f2a38-64a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:05:6d:e7:8a:77:5a:05:31:af:21:0f:2a:8d:
bc:4f:5e:c8:83:a3:c6:8b:9e:4b:00:27:fb:ed:94:
fe:cb:00:72:d9:43:27:97:4d:c9:32:fb:af:91:ef:
cc:14:7e:29:04:c7:4f:04:f0:74:62:23:18:0a:a4:
7b:17:7f:96:4c:42:f4:03:c8:60:62:db:b2:52:3a:
d4:8b:7e:16:5d:21:04:11:16:d8:a4:2f:35:c7:94:
a5:3f:20:5d:60:aa:f0:a1:3f:cb:70:74:71:cf:8f:
0b:94:d8:72:77:0a:c9:2a:7b:a3:d2:06:61:90:52:
15:34:52:67:f0:c2:41:78:f5:7d:95:33:9a:69:54:
b8:50:06:1a:c2:62:60:46:d1:8b:2a:56:9c:7c:8b:
2c:50:44:fe:79:d7:77:ee:b3:9d:b2:a5:9a:e2:1e:
13:0f:45:8c:d2:3a:18:10:46:7c:dc:13:d7:8e:53:
15:1b:10:00:ad:5b:93:47:86:92:53:77:a7:36:21:
ea:03:49:42:16:17:14:ca:f7:c6:fb:66:e6:b0:b8:
b8:3e:76:86:93:37:9b:24:48:07:ac:39:0e:54:08:
60:9a:a1:3a:fa:ac:50:aa:42:a6:12:47:9a:01:56:
22:6a:1e:7a:13:8c:1a:db:7e:1e:94:71:ad:79:7c:
68:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:93:F8:93:A3:A8:13:2D:97:8A:10:04:90:A2:D8:57:CF:DE:05:EB
X509v3 Authority Key Identifier:
keyid:67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:b6:ec:63:f5:ef:8f:b1:5f:74:e1:c4:28:21:d2:99:c5:16:
fa:2d:6a:91:83:79:29:2d:c8:43:0e:ef:36:cf:b4:80:ca:35:
ed:25:b9:21:4d:ae:d4:f9:29:b7:aa:73:46:2d:79:0d:60:03:
72:83:57:66:02:42:e1:0a:96:c6:53:79:7c:be:0c:4c:3b:d4:
94:b5:fe:20:8b:30:af:4e:88:10:cc:a4:7e:6b:79:3c:de:40:
f8:71:7b:1a:49:62:64:86:0f:cc:ff:6a:00:ea:25:94:a6:1c:
de:6a:5f:dd:61:30:6b:d9:76:7c:bf:1d:85:be:4d:03:ac:6f:
ce:84:49:56:8d:cb:bf:dc:bd:20:21:04:41:3a:1a:bd:b1:4b:
66:58:98:92:ea:66:99:1c:4b:2c:b7:77:09:63:1c:53:55:73:
69:41:5e:3d:e9:5c:87:b2:0f:97:fa:ed:3d:85:7a:71:d3:4d:
75:13:64:ac:56:80:80:05:44:bb:b2:8e:f0:c9:ff:e1:f3:09:
fe:07:d7:51:25:9b:3d:7f:05:fa:42:d0:e1:a5:7d:be:df:60:
19:50:dd:d7:01:a1:fd:ab:5a:93:4a:f4:3a:b6:e5:af:e0:df:
1d:ae:74:73:9d:ab:53:09:69:90:52:d7:42:1c:2e:40:55:95:
4c:0e:9f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:36:35 2026 by rpki-client