
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
File: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft (raw, json)
Hash identifier: BuSEwqyFTkp+XKwUxqw2a9vU5U/gMQDqWBGKwVcQXV4=
Subject key identifier: F9:26:DA:A5:DC:91:C4:81:24:D3:4B:4B:E0:65:70:F6:EC:66:7C:B6
Authority key identifier: 66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3
Certificate issuer: /CN=A91EB7BD/serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3
Certificate serial: 1253
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
Manifest number: 1248
Signing time: Mon 22 Jun 2026 17:05:38 +0000
Manifest this update: Mon 22 Jun 2026 17:05:37 +0000
Manifest next update: Mon 29 Jun 2026 17:05:37 +0000
Files and hashes: 1: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl (hash: r/J9xRkTIJ55cnCTnKnji44wxqU6iOPt8ASvR972Bws=)
2: 84121C245CE111E9824BCF76C4F9AE02.roa (hash: 6P0QZul7deP/5azgpjbHdDKzo/8UCrH1J+Uoz59/kWw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl
rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 17:05:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4691 (0x1253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB7BD, serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3
Validity
Not Before: Jun 22 17:05:37 2026 GMT
Not After : Jun 29 17:05:37 2026 GMT
Subject: CN=6a396b62-5742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:84:f5:9e:22:93:82:ba:94:8d:cd:8a:90:
01:19:1e:0b:c0:5f:82:a2:de:86:d4:4d:de:07:ca:
90:a1:da:4c:33:d9:ed:25:91:97:8b:8b:51:39:df:
16:dc:18:d7:df:d7:93:90:f8:60:82:6c:af:3b:0d:
6c:36:72:ce:0e:81:03:d5:65:d1:7c:03:c5:0c:0d:
94:b5:df:31:29:58:e3:1c:21:01:20:65:0f:b2:0c:
9d:c4:ad:f2:13:ca:5b:d2:bb:3c:7e:b5:8f:17:2f:
d8:24:cf:e2:cc:4f:58:e3:da:fc:e2:c8:1c:9c:46:
95:b5:35:93:50:cb:4a:f2:a8:d3:64:3f:54:01:47:
a7:74:51:0a:b3:f0:4d:eb:71:a0:00:d1:3d:d8:c0:
de:81:59:f3:4f:18:6a:59:7b:9b:51:79:19:c6:a4:
f5:d3:fa:d7:84:cf:3c:05:ea:43:9e:d2:95:76:a7:
c4:4f:e8:ec:1b:68:a8:a1:1f:bd:87:0c:9e:e1:3c:
e5:61:7e:ed:21:dc:25:97:22:1c:c1:32:9f:79:e2:
c0:45:b2:fb:43:8d:68:93:14:13:07:da:0b:dc:fb:
83:ca:a2:3e:08:b3:f9:80:ed:80:be:b5:5c:96:ab:
fa:5c:e6:89:a2:ba:2b:57:04:b0:31:a5:14:90:24:
29:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:26:DA:A5:DC:91:C4:81:24:D3:4B:4B:E0:65:70:F6:EC:66:7C:B6
X509v3 Authority Key Identifier:
keyid:66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:55:4f:b6:e8:06:87:cc:81:95:a9:cf:b7:4e:e8:6f:8b:e3:
f4:57:c0:ad:55:51:a7:cf:31:a4:03:41:77:d3:e5:79:94:54:
01:cf:83:a2:ed:55:a2:51:19:6f:05:46:cf:6d:27:cb:47:c9:
89:5b:11:b9:92:4f:4e:55:54:54:9a:fb:a2:e3:43:bd:ca:70:
49:5a:90:b6:82:0e:5c:fe:4f:02:e3:13:e2:a7:47:68:65:65:
01:d5:10:b0:ac:5f:c1:73:ea:c9:5c:4a:8b:bb:f1:11:04:45:
25:8e:ee:18:1f:cd:a5:29:4e:d1:cd:79:a6:e0:f1:24:dc:a5:
3d:6d:16:8e:69:dc:b9:00:e0:f8:f8:dd:ca:0f:86:55:73:76:
3d:1b:05:44:db:39:66:b2:e9:40:c3:f2:78:08:1c:2f:5b:fb:
f1:be:f6:19:80:a5:1a:df:a1:68:40:da:4c:ad:32:4f:ab:e1:
ff:40:29:f4:e5:e0:f8:8e:e9:b6:af:64:67:f8:78:85:39:3a:
7a:6f:68:53:51:23:8d:3f:87:29:05:a0:ee:f2:a5:45:be:9b:
35:b1:ba:63:11:e5:21:0e:9f:ee:dd:6f:7a:c2:bc:d8:cc:dc:
8f:a9:c2:e9:d7:23:35:46:f5:b2:d8:e6:db:93:bb:d6:bc:0e:
7d:f0:27:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:18:07 2026 by rpki-client