
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft
File: z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft (raw, json)
Hash identifier: b1za0+8KBQUh/FtiV/5FralbIp5yQwb/Hhoz4DoFhIs=
Subject key identifier: 3D:2C:22:A3:F6:9D:3D:77:B4:60:FD:BF:BF:65:3B:0D:1C:65:9C:15
Authority key identifier: CF:E4:7B:C8:C7:48:BE:FD:1B:77:52:4C:C7:9F:FA:B5:4C:17:BD:B3
Certificate issuer: /CN=A91F7D5E/serialNumber=CFE47BC8C748BEFD1B77524CC79FFAB54C17BDB3
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-R7yMdIvv0bd1JMx5_6tUwXvbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft
Manifest number: 54
Signing time: Tue 23 Jun 2026 08:29:17 +0000
Manifest this update: Tue 23 Jun 2026 08:29:17 +0000
Manifest next update: Tue 30 Jun 2026 08:29:17 +0000
Files and hashes: 1: z-R7yMdIvv0bd1JMx5_6tUwXvbM.crl (hash: 8ogQSGizA8tq+o3PRWpv9V4UvSjFT8XE8Y5AfBv/GmU=)
2: 75FA3D56F20311F081D1C5E2496F56BC.roa (hash: iKD/upGNnZX+RaqlnGQMRh+aU9FLucr+XYy9zJq/7P4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.crl
rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-R7yMdIvv0bd1JMx5_6tUwXvbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 08:29:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7D5E, serialNumber=CFE47BC8C748BEFD1B77524CC79FFAB54C17BDB3
Validity
Not Before: Jun 23 08:29:17 2026 GMT
Not After : Jun 30 08:29:17 2026 GMT
Subject: CN=6a3a43dd-fd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:46:93:f4:e6:54:05:f3:a5:c3:e3:1c:11:f7:
5d:45:3c:ae:9c:ef:b6:5b:f7:71:57:fc:a1:62:b1:
c5:b0:3b:73:aa:41:3a:6e:96:ed:89:73:ce:bc:6a:
63:cd:4e:77:cf:d3:55:1d:45:cb:61:c4:95:e0:64:
73:30:57:f7:43:a3:0a:d8:f8:ed:08:4e:21:9c:22:
71:96:20:d1:41:6c:e6:82:c2:77:18:31:dd:f7:ce:
0f:05:5d:3d:51:e3:70:64:be:5c:96:67:e9:52:87:
07:e3:8e:85:85:01:25:e2:f3:38:57:54:fb:03:92:
13:20:8d:c7:6e:80:5c:b7:da:be:ba:ff:90:55:95:
d7:93:86:ec:9e:d5:1b:ec:5d:f8:7f:16:3d:72:be:
30:e0:46:8a:10:ee:df:24:24:f8:d3:5a:79:ec:a1:
8d:fc:f6:b2:c5:50:45:04:ae:76:15:bd:5f:3a:63:
86:a6:b0:a7:8d:1b:f8:0c:ac:d0:80:57:c3:30:91:
08:b5:75:7c:33:d5:2a:da:ab:93:fe:33:b9:48:f2:
63:71:b0:63:40:bb:d0:4c:87:6d:ea:2e:7a:25:b0:
50:df:34:74:c2:08:ea:b5:02:0f:76:f7:68:8e:4e:
25:81:49:70:ae:3f:d4:11:f5:73:5e:68:1f:87:d7:
e6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2C:22:A3:F6:9D:3D:77:B4:60:FD:BF:BF:65:3B:0D:1C:65:9C:15
X509v3 Authority Key Identifier:
keyid:CF:E4:7B:C8:C7:48:BE:FD:1B:77:52:4C:C7:9F:FA:B5:4C:17:BD:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-R7yMdIvv0bd1JMx5_6tUwXvbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ea:6e:12:2a:13:5b:b2:3c:1e:c6:7c:fb:eb:c8:09:9d:9d:1c:
ff:30:26:13:95:a4:00:27:f7:dc:30:29:91:92:e6:e0:8d:66:
63:3f:d1:c9:6e:8a:0d:a5:a1:74:58:17:d1:b5:22:17:96:c1:
a1:c8:47:70:ab:4f:9b:18:cb:fc:be:7f:68:84:e7:94:68:8c:
af:4b:00:90:46:40:eb:ca:4a:2e:2d:ed:17:c4:ef:51:49:b8:
6e:07:1b:89:67:9d:1f:74:ed:4a:31:58:81:5f:98:00:1c:a3:
dc:b6:36:d8:68:3f:a7:f8:52:b0:58:6c:7a:c5:66:87:1d:dc:
5a:cc:09:95:6e:d3:47:76:a7:70:b3:bc:84:da:c8:ce:f8:72:
a0:dd:48:65:38:6b:d7:66:58:c2:eb:e0:bb:34:d7:b6:b2:bb:
11:0f:87:08:d5:8a:11:b4:74:fa:e1:b6:64:3d:8a:f0:87:a6:
8f:fe:6f:02:fa:e1:b2:14:33:f9:f5:55:e8:e0:a2:f0:f5:25:
a9:c4:90:cc:16:59:40:99:5b:19:de:81:ce:44:f4:52:ae:5b:
46:6b:b1:18:37:53:64:49:e9:23:ab:fb:6a:eb:69:84:93:30:
b7:92:b3:c2:a7:83:20:0b:8c:0b:71:b1:1c:e8:2f:f3:d0:99:
ad:7d:76:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:12:16 2026 by rpki-client