
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
File: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft (raw, json)
Hash identifier: +pMexQ/o3XaOFlzUU20M0NL7znPqzt4joAvWKg5UZgI=
Subject key identifier: 96:BA:F8:50:8C:34:50:7F:83:DF:26:17:27:17:FF:2B:E4:BE:F3:33
Authority key identifier: 66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3
Certificate issuer: /CN=A91EB7BD/serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3
Certificate serial: 1270
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
Manifest number: 1265
Signing time: Tue 18 Aug 2026 17:17:40 +0000
Manifest this update: Tue 18 Aug 2026 17:17:39 +0000
Manifest next update: Tue 25 Aug 2026 17:17:39 +0000
Files and hashes: 1: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl (hash: topGbKD8AizLSZgRo8tA1/WdVnIEdmz0+DDc5jJKqq8=)
2: 84121C245CE111E9824BCF76C4F9AE02.roa (hash: 6P0QZul7deP/5azgpjbHdDKzo/8UCrH1J+Uoz59/kWw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl
rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4720 (0x1270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB7BD, serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3
Validity
Not Before: Aug 18 17:17:39 2026 GMT
Not After : Aug 25 17:17:39 2026 GMT
Subject: CN=6a8493b3-cb05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:04:bf:a0:1c:e0:17:0b:48:6b:6d:e0:83:99:
90:66:8a:e1:95:0d:f7:e2:8e:4c:8a:56:ce:e8:e8:
d4:35:bd:c0:b0:3c:01:de:d2:5b:37:8e:81:7e:2e:
51:de:4f:02:25:08:6b:f9:ce:07:70:a6:06:10:d2:
89:f0:d5:2f:56:dc:af:1a:02:a9:4b:49:b3:b8:da:
c0:32:8b:ce:e3:03:09:08:75:89:56:3d:34:69:ec:
da:4a:5e:e8:9d:08:cc:4d:76:71:0b:1a:1a:c9:28:
bb:56:43:16:7a:70:64:2b:bf:80:3c:1c:3c:72:f1:
87:8c:0d:ae:bd:04:bf:6d:c7:1c:17:f7:75:74:c2:
84:e8:53:c5:27:5b:8e:0e:9d:e7:5d:c4:4f:ca:d3:
19:1d:ff:41:ff:c4:12:84:be:8a:f5:77:f8:ea:fa:
5b:fe:b1:0e:62:95:42:fb:1b:c1:6d:0d:1d:d3:e4:
24:67:08:8f:20:e2:a4:c3:81:23:4d:82:64:e7:c9:
d9:8a:71:18:e7:83:06:7d:fe:7c:f6:ef:35:75:8a:
45:51:80:df:42:3e:f3:28:1f:fa:77:35:1d:f4:dc:
13:06:05:d6:fa:eb:0f:72:87:26:69:ed:ff:cc:e7:
9c:8c:4e:f0:15:48:4a:14:e6:5b:32:86:73:0a:4b:
3d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BA:F8:50:8C:34:50:7F:83:DF:26:17:27:17:FF:2B:E4:BE:F3:33
X509v3 Authority Key Identifier:
keyid:66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d1:4f:b6:cd:c3:33:a9:fe:ed:02:20:74:2f:c7:dc:12:92:
1e:3f:dc:3d:97:92:65:1c:91:3d:98:b8:6b:46:ac:7b:51:b8:
55:9b:65:fc:9d:cb:35:57:a9:bc:f2:eb:a5:72:21:de:07:48:
3f:63:d2:0e:75:b3:7f:36:8e:76:5d:64:0b:ee:fb:56:58:80:
ed:0d:cb:23:3c:91:5f:ed:af:cc:1e:6b:98:56:31:c4:3f:c4:
c3:d0:7d:f1:b3:9e:ac:0a:a8:f3:98:3b:65:bd:20:da:ff:18:
08:1c:bd:22:92:9b:9a:bf:49:79:a0:be:5c:f6:e5:f8:15:c5:
35:8d:ee:e9:16:a0:75:96:c4:8a:8d:92:ee:8a:69:e9:99:cf:
e5:e8:64:32:34:87:ed:1f:d5:9e:92:b6:54:6c:54:68:80:44:
bc:62:04:5a:44:b6:e6:d0:9f:66:fb:12:e3:62:fe:09:6c:50:
b0:58:40:d0:0b:cc:bf:92:68:8f:9d:2c:01:14:f3:c8:69:11:
07:55:69:a2:de:5e:d4:10:48:8e:5c:65:2f:0c:57:12:e7:92:
ec:3f:b1:ef:fc:d6:d8:a4:d4:64:6c:12:f6:1d:53:b9:c2:36:
99:46:af:88:22:2d:c5:21:d5:30:6f:0b:c0:2b:46:ee:e6:63:
f9:c3:1a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:43 2026 by rpki-client