
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
File: Zw46BnIWhKtHO7vlzCLPBdAkv20.mft (raw, json)
Hash identifier: ZGWlawTat6OoB6fY6EpuTZT7HVVT9OOMPJhZMS6SGpI=
Subject key identifier: 1F:43:53:0E:07:48:4B:DF:2C:36:11:1B:50:18:27:28:8E:35:CB:43
Authority key identifier: 67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D
Certificate issuer: /CN=A91EAE0A/serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
Certificate serial: 013B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
Manifest number: 0131
Signing time: Fri 17 Jul 2026 06:48:23 +0000
Manifest this update: Fri 17 Jul 2026 06:48:23 +0000
Manifest next update: Fri 24 Jul 2026 06:48:23 +0000
Files and hashes: 1: Zw46BnIWhKtHO7vlzCLPBdAkv20.crl (hash: Oklp/l2ckbU/bg2VM8Xm4nB94pIp7WydjZGXyzGIfWA=)
2: 2018750A5FC411F0ACE3A087C4F9AE02.roa (hash: R8o39adrmBVnGQ0//ScQ4qDFf9KvWQlMZLY/6u7Uyoo=)
3: C491ED725A7A11F083B3F885C4F9AE02.roa (hash: 7WBAHsig/Kovz/pUrk3p+Cxc7oQA5m4kNqg7vSnWYU8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl
rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 06:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE0A, serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
Validity
Not Before: Jul 17 06:48:23 2026 GMT
Not After : Jul 24 06:48:23 2026 GMT
Subject: CN=6a59d037-b501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:12:18:6c:fe:76:e1:c9:67:13:9c:b2:9c:
7e:6a:32:da:d3:7a:ba:57:a3:35:87:b7:5f:6f:fa:
2f:f0:f8:26:bc:3e:15:16:34:2e:52:e0:f9:5b:0c:
a1:f7:ac:2a:49:08:9d:2e:2c:54:fe:18:cb:eb:b6:
66:62:8a:40:22:41:f4:5e:22:ce:b7:0f:9d:a5:ce:
09:ed:ca:f5:ac:d7:4d:bd:44:75:71:3b:0d:60:06:
1b:f3:cf:03:07:d8:3d:80:58:47:aa:ad:43:1d:38:
d6:1f:e5:e5:a6:7b:b0:7e:40:7b:50:13:c9:e5:11:
c0:9a:f0:2a:28:fd:93:e9:05:6f:2b:87:4f:2f:a3:
b9:d6:43:16:74:19:38:28:77:6f:86:f8:45:88:e4:
5f:e3:f2:86:a0:96:c4:96:a3:a2:09:f9:8b:dc:10:
5b:e2:7a:04:f0:0c:50:4f:b8:2c:0e:8f:cc:19:c0:
04:52:35:60:1f:95:c8:16:cb:ac:09:65:20:6f:6c:
4f:7f:54:ac:03:c9:4f:1f:dd:71:0b:06:f3:d7:2c:
4e:2e:ca:73:aa:e3:96:20:bc:6c:dd:04:18:66:4d:
12:23:14:f1:ff:95:e7:3d:aa:dc:8f:f2:c2:36:9a:
26:60:a7:f5:19:5a:a8:d1:bd:e1:66:90:72:cc:21:
4e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:43:53:0E:07:48:4B:DF:2C:36:11:1B:50:18:27:28:8E:35:CB:43
X509v3 Authority Key Identifier:
keyid:67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ea:14:bc:9c:49:a9:0a:b5:f2:6e:92:81:ad:81:97:bc:18:
13:db:a6:fc:dc:3d:bb:d5:e5:75:48:ca:dd:6a:d8:8f:6a:76:
ab:14:48:5c:fe:38:8b:12:7a:8a:9e:97:74:e5:c2:73:f4:b7:
6f:80:ce:f9:a2:73:71:a0:f0:9b:57:16:16:43:5f:f6:df:bd:
18:6a:28:3f:65:83:ee:66:23:94:68:69:e8:2c:47:30:6d:a0:
d6:6c:16:cc:10:ac:d0:0d:82:e6:bd:27:99:c2:36:96:92:9d:
22:a4:b1:da:f6:da:43:43:dd:76:0a:c2:85:66:f7:a7:3c:5f:
04:24:e6:8a:fe:c9:bc:48:e2:4a:b5:83:3a:88:6c:01:94:73:
00:1f:31:2e:97:84:34:b8:93:f0:a4:80:3e:1b:0c:f9:17:b3:
68:2a:31:2d:ab:d1:be:ce:23:f1:ed:f4:36:ed:f2:5a:63:12:
57:97:c7:14:69:49:16:ee:69:16:66:71:c8:3a:e8:42:98:a9:
f5:75:45:1d:9e:f2:d3:5e:27:7d:8e:0d:9f:cc:44:05:6b:d5:
4f:de:3d:c8:9c:23:32:b0:0b:cc:3d:6b:db:ae:63:11:19:5d:
7e:f2:f9:c4:7c:6c:fd:ed:42:eb:e2:08:a2:3c:96:31:22:5d:
be:d3:e7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:22:33 2026 by rpki-client