
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
File: zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft (raw, json)
Hash identifier: s3R9tdzgdkYk3FymgN1srmSrI48zW5ZAZxcf+DFSExg=
Subject key identifier: BF:4A:62:A5:14:F3:4E:80:77:25:29:DC:46:6C:A1:00:02:B5:4D:97
Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14
Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
Certificate serial: 07E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
Manifest number: 0777
Signing time: Fri 22 May 2026 22:04:23 +0000
Manifest this update: Fri 22 May 2026 22:04:23 +0000
Manifest next update: Fri 29 May 2026 22:04:23 +0000
Files and hashes: 1: zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl (hash: Lpk0SY71zQLVMg34bEVxPU5BzzrDejevzXY3pnzELU4=)
2: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (hash: td9+M54k5hj2c/thTOFATgj6CforEojuE42TknTzpYk=)
3: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (hash: a9anV1wkhAhqukLm8HrqODKS0piPOQEQ02jiRXV3Ak4=)
4: 337DA192C3FC11EF8C3B0B5DC4F9AE02.roa (hash: jdZ9eU0HcGePAnaPpQJ/8+6uq872C01hZ+qnBvUiNlQ=)
5: 90BBD1B6884C11EB88489B75C4F9AE02.roa (hash: H5yiTmZmqNzfgLkNUSshTejgEC9QW5DzJpuCaDVZPHo=)
6: B23B879EE89C11ECA30FD20EC4F9AE02.roa (hash: x07pQS6pEgJZLrxI+4SzaUGa4YwQ96qN1jF+DrtdcJY=)
7: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (hash: Ro74anOTti8QG6vyjwS8aXc9bfV+QmfdwMUJorqRPP8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl
rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 May 2026 22:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2019 (0x7e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
Validity
Not Before: May 22 22:04:23 2026 GMT
Not After : May 29 22:04:23 2026 GMT
Subject: CN=6a10d2e7-5ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:d9:5d:e0:11:30:27:da:4c:b3:80:a5:b8:
23:b6:de:62:38:31:cc:0e:5e:cb:ac:08:21:c1:bc:
dd:21:b8:df:bd:4c:f4:c2:69:67:02:89:8a:97:e6:
52:b8:14:14:ad:07:df:a2:ca:5f:97:e5:ee:c8:3e:
54:cf:19:b7:b3:05:2e:ca:85:53:df:3f:7a:ce:8a:
14:46:a2:86:b4:a2:23:ff:ac:31:57:f9:23:9d:b0:
43:c5:c4:50:fa:c8:87:74:60:7f:02:44:83:22:d6:
4b:0a:02:4e:98:ff:76:b8:b8:78:42:86:82:6a:6a:
4c:54:a0:e9:d7:b6:27:92:85:aa:09:ec:dd:55:f5:
43:98:68:f5:73:ef:34:ad:18:5f:a1:e3:08:f2:54:
56:fe:7c:26:8d:5f:56:dd:4f:a7:27:b1:4b:9b:2c:
c1:47:c7:ef:ee:2f:f2:d1:42:90:f5:92:a7:dc:3a:
da:69:e1:fc:06:59:d6:69:c5:1b:45:f4:06:a1:eb:
a4:11:d8:03:e8:59:35:5a:6f:41:6c:dd:f4:fa:b3:
7a:0f:8e:7e:20:08:bf:e9:a2:d4:ed:0d:99:d8:66:
24:2b:c6:5d:e8:08:2f:69:87:47:53:b2:cb:04:a6:
da:b9:b7:68:3a:2f:27:69:56:c0:57:cd:9c:5d:6c:
14:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4A:62:A5:14:F3:4E:80:77:25:29:DC:46:6C:A1:00:02:B5:4D:97
X509v3 Authority Key Identifier:
keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0f:62:ea:d1:b0:f8:f3:2a:ec:13:cc:a2:69:a3:ee:1a:cf:
a2:44:cd:3f:b6:c6:e9:c9:a0:c9:41:98:08:c6:e5:15:cf:42:
34:31:8b:7f:57:94:53:7e:0f:55:83:69:7d:16:e1:82:ab:7c:
2b:c2:a3:ce:d0:3c:af:e9:b4:36:30:01:41:f1:de:cc:1b:4b:
d7:85:cc:20:6d:45:7a:cb:4b:68:28:44:02:49:a0:cf:7d:92:
c2:55:23:5a:54:02:42:2c:d8:52:be:d7:42:30:96:a1:90:bf:
42:9b:2d:fe:62:12:1d:4c:59:86:66:21:c4:3b:04:b4:44:51:
1f:db:ae:9e:b5:e8:c1:32:6c:1a:29:15:52:f8:cf:fe:c6:74:
ae:1d:13:f4:3f:ef:68:c5:6b:6f:86:15:e4:ea:b4:80:be:1b:
e4:40:39:14:44:02:ee:0b:64:28:bd:a5:1f:80:5e:21:89:7c:
4d:b2:a8:cf:b2:ce:7f:a7:ac:05:30:7a:12:f4:2c:83:b9:48:
77:98:1d:42:44:1a:8d:ba:6d:bf:b4:d4:fa:40:72:d6:fa:0e:
fa:be:44:3d:1c:98:07:dc:2e:5e:a6:00:3a:46:e0:d5:5b:c9:
03:12:82:14:3a:76:1e:16:1f:68:cc:f1:40:2d:b2:1a:8d:a1:
2a:d9:4b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:48:21 2026 by rpki-client