
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft
File: zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft (raw, json)
Hash identifier: PhaCT3r2t/VcdlfWFHOKHf5KerKaManKhNwd9WRlAmo=
Subject key identifier: FF:A4:FA:2E:E2:FB:07:9C:76:95:AA:38:D9:4E:B2:6B:9B:20:B2:E0
Authority key identifier: CC:85:09:D3:1F:B6:3A:8D:DD:6B:F2:D3:D8:4C:7B:C0:B2:BA:3F:C0
Certificate issuer: /CN=A91EBFB0/serialNumber=CC8509D31FB63A8DDD6BF2D3D84C7BC0B2BA3FC0
Certificate serial: 0D58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft
Manifest number: 0D4A
Signing time: Tue 02 Jun 2026 18:03:14 +0000
Manifest this update: Tue 02 Jun 2026 18:03:13 +0000
Manifest next update: Tue 09 Jun 2026 18:03:13 +0000
Files and hashes: 1: zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.crl (hash: hQan4thU61PtjErcAzRAgQnlurzPSO0qT5iyYS6m46I=)
2: F690CAECF87D11E9A746D05BC4F9AE02.roa (hash: OZ/ioEgGADPRLql8C0CzW0hllIVkp5mAts1YwLX06Vw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.crl
rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3416 (0xd58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBFB0, serialNumber=CC8509D31FB63A8DDD6BF2D3D84C7BC0B2BA3FC0
Validity
Not Before: Jun 2 18:03:13 2026 GMT
Not After : Jun 9 18:03:13 2026 GMT
Subject: CN=6a1f1ae2-8f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c5:ad:81:07:31:e8:4b:c7:ff:59:71:58:3a:
dc:23:fd:e4:be:1a:b8:50:2a:0a:c5:4b:27:42:25:
3e:d7:34:32:ac:31:e9:2f:a9:0c:12:70:42:5d:f7:
c2:e5:b5:30:e8:97:61:00:23:13:a5:68:99:b5:0c:
1b:a8:e2:70:0f:ee:2f:f7:a1:da:91:50:de:89:9a:
be:52:98:49:15:85:af:61:1e:89:d4:55:eb:5d:b6:
e5:68:87:d8:44:88:2f:66:fb:4b:f1:c2:84:10:b1:
39:80:f5:55:57:42:68:d0:e5:4b:de:84:7e:4b:ec:
ef:52:ce:3b:28:39:40:0c:24:74:43:00:d5:84:aa:
f0:2f:ae:c2:4f:71:a3:de:cf:cc:81:97:10:58:e2:
0e:47:c7:be:32:d2:63:31:b3:1e:27:5a:55:d6:9e:
0f:00:d5:3d:1a:7e:e3:94:0b:ea:f8:2c:f3:56:5d:
9f:50:47:05:41:d7:32:94:ee:4e:a8:dc:0c:96:a8:
c2:40:d8:3f:45:01:49:23:9d:43:2e:e7:ba:80:76:
15:48:ed:70:f7:86:74:01:2d:86:1a:68:ed:77:de:
31:4d:05:0b:6c:a9:c5:df:0c:b4:21:e6:d7:80:e9:
13:14:87:8e:73:7f:5d:b1:a2:d4:1e:50:48:ba:71:
ed:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A4:FA:2E:E2:FB:07:9C:76:95:AA:38:D9:4E:B2:6B:9B:20:B2:E0
X509v3 Authority Key Identifier:
keyid:CC:85:09:D3:1F:B6:3A:8D:DD:6B:F2:D3:D8:4C:7B:C0:B2:BA:3F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:3a:9a:cc:32:30:40:00:04:eb:08:9f:8a:65:c7:f2:3f:ff:
59:8e:bc:a6:f8:d9:24:65:b6:65:7b:1f:e6:90:15:83:2b:37:
53:10:7c:1d:5e:5a:fe:7e:82:57:14:4d:f7:01:b9:3c:27:93:
76:d4:44:1d:b5:e0:07:b9:dc:18:3f:22:56:9a:01:17:9d:b6:
1c:42:d6:68:f7:e5:75:b9:1a:8d:cc:58:2c:ed:bc:2b:34:ea:
f5:3a:3b:6e:d8:ff:d9:d0:66:ea:61:f9:31:1e:af:fc:ed:de:
03:cd:4c:29:a4:58:16:2f:c7:10:83:ee:79:d6:90:50:14:e6:
92:0e:4c:60:38:2f:91:12:60:48:b2:02:53:0f:af:07:d9:e9:
13:55:2f:88:c1:cb:fa:df:2f:e9:eb:e4:b3:e1:93:c4:c7:96:
93:57:5e:70:c0:1f:3a:cc:3c:d2:0c:1e:f8:33:fa:05:35:6e:
91:f2:57:78:b1:ba:ba:e0:9b:27:37:16:2f:b2:f9:10:8c:be:
b7:2e:b0:55:ad:dc:94:58:cc:44:fa:47:a6:78:e9:84:50:b2:
fa:bd:6a:b6:01:95:d6:7f:a8:cc:63:42:de:36:0f:54:e1:9c:
2e:f5:ab:5b:fe:71:73:ec:ec:87:7c:d3:ee:b3:69:52:6c:50:
d3:a8:4f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:01:00 2026 by rpki-client