
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
File: Zw46BnIWhKtHO7vlzCLPBdAkv20.mft (raw, json)
Hash identifier: HGEnx/8yp/Ut6iljAlFF6cWLzkui78tuuoJ+v5EyPgY=
Subject key identifier: A2:5B:F5:17:D0:A1:67:4F:FD:25:5A:EC:D2:E8:CA:AC:C1:77:3F:A1
Authority key identifier: 67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D
Certificate issuer: /CN=A91EAE0A/serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
Certificate serial: 0125
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
Manifest number: 011B
Signing time: Mon 01 Jun 2026 06:41:31 +0000
Manifest this update: Mon 01 Jun 2026 06:41:31 +0000
Manifest next update: Mon 08 Jun 2026 06:41:31 +0000
Files and hashes: 1: Zw46BnIWhKtHO7vlzCLPBdAkv20.crl (hash: besYypygaqMs+o9/H5DBQBTpVjA6oV3rH3y5l1dVPgA=)
2: C491ED725A7A11F083B3F885C4F9AE02.roa (hash: 7WBAHsig/Kovz/pUrk3p+Cxc7oQA5m4kNqg7vSnWYU8=)
3: 2018750A5FC411F0ACE3A087C4F9AE02.roa (hash: R8o39adrmBVnGQ0//ScQ4qDFf9KvWQlMZLY/6u7Uyoo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl
rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:41:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE0A, serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
Validity
Not Before: Jun 1 06:41:31 2026 GMT
Not After : Jun 8 06:41:31 2026 GMT
Subject: CN=6a1d299b-eafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:08:6b:d9:c7:16:7e:fe:05:5b:4b:ed:dc:7f:
36:8d:b3:49:c1:52:ab:fa:bf:2e:de:be:9b:91:ff:
3f:2d:8e:05:6b:3d:1b:05:2f:6c:16:56:1b:4f:0b:
ba:2b:16:f0:e2:95:88:da:e0:cc:ca:fd:2a:ca:d7:
7a:ae:d7:3d:09:9c:db:ed:33:5a:9a:ce:05:a6:bd:
d5:4f:f5:fa:3c:96:1b:99:0f:87:af:20:54:03:39:
87:1b:d9:63:e4:ba:a3:24:73:f3:ad:ba:db:c2:f9:
75:a4:b2:2a:2e:22:b9:be:c8:97:c7:bd:d1:c8:87:
8b:03:30:ec:ae:f0:d6:63:33:a1:9c:ed:48:f1:de:
4f:02:b0:55:dd:85:7d:96:74:02:85:5b:c1:ba:bc:
8d:32:dc:27:13:6d:0a:5b:93:0d:9e:25:a5:29:ca:
68:32:98:56:62:78:68:11:7d:49:76:a4:b1:bb:ce:
f7:d0:fc:d3:f4:7e:3a:71:a7:11:90:bf:cf:72:d6:
61:2c:e4:f7:08:b7:db:56:2c:ef:df:3d:e8:fb:65:
ac:dc:64:9b:cc:f7:b2:68:19:b5:8a:b5:b1:60:69:
8c:e1:ae:c6:1e:cd:a9:6c:74:20:5e:f6:30:7f:57:
a6:18:59:72:df:89:9a:41:57:5d:c2:9f:df:d5:0e:
e0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5B:F5:17:D0:A1:67:4F:FD:25:5A:EC:D2:E8:CA:AC:C1:77:3F:A1
X509v3 Authority Key Identifier:
keyid:67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:32:f1:74:02:a6:f4:79:48:d9:38:37:75:69:7f:83:db:a0:
b4:5b:9e:ab:a5:69:32:7d:db:dd:78:64:ac:ac:c0:52:3b:ec:
83:ea:a1:7a:fb:53:68:04:3c:e3:1f:00:c0:07:3d:7a:13:62:
65:4d:cb:f2:6e:59:c6:a8:be:02:db:ce:ff:4d:58:23:bb:cd:
2f:d0:a4:f4:bb:ff:c5:fb:ba:9c:a1:d3:48:9b:a8:93:ec:35:
e2:a8:df:a6:4e:61:3b:78:0d:93:f4:90:ef:4c:f8:16:0d:ca:
fc:3d:c0:3e:de:3a:0b:98:9c:5b:d3:f1:9d:37:6c:77:b7:d9:
3c:52:79:65:8e:31:04:3d:c6:fc:15:0d:fb:30:63:43:dc:95:
65:91:58:8a:41:ae:2d:8f:61:9d:38:78:15:a8:f2:dc:b3:48:
82:15:c9:57:41:fa:00:80:66:1d:87:c4:59:72:68:14:1b:e3:
06:f2:29:09:fe:b0:18:0e:f6:aa:88:7c:27:3d:24:b9:f8:94:
3a:24:5c:e7:b3:d2:21:bb:41:bc:4f:4b:b8:c7:d2:1d:5a:04:
20:70:cd:e3:9f:66:1a:4c:bb:d6:93:a7:76:ab:86:57:98:18:
db:a9:64:d4:db:90:5d:65:b6:0d:e0:5b:d7:86:bc:8e:9a:09:
a3:dd:31:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:12 2026 by rpki-client