
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
File: zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft (raw, json)
Hash identifier: uOYE4fEahNIqPTH75fY+CtVh0rmKULKal/jwS9Pqn58=
Subject key identifier: 51:E5:EF:C7:A4:3D:CE:AF:66:B5:76:0C:4E:D9:74:8B:24:45:A3:78
Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14
Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
Certificate serial: 07FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
Manifest number: 078E
Signing time: Mon 06 Jul 2026 22:30:29 +0000
Manifest this update: Mon 06 Jul 2026 22:30:29 +0000
Manifest next update: Mon 13 Jul 2026 22:30:29 +0000
Files and hashes: 1: zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl (hash: CMKuU3vMBju6zWttobavY9Y5tSHcBFL5WRqLZEygwxs=)
2: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (hash: Ro74anOTti8QG6vyjwS8aXc9bfV+QmfdwMUJorqRPP8=)
3: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (hash: td9+M54k5hj2c/thTOFATgj6CforEojuE42TknTzpYk=)
4: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (hash: a9anV1wkhAhqukLm8HrqODKS0piPOQEQ02jiRXV3Ak4=)
5: 90BBD1B6884C11EB88489B75C4F9AE02.roa (hash: H5yiTmZmqNzfgLkNUSshTejgEC9QW5DzJpuCaDVZPHo=)
6: 337DA192C3FC11EF8C3B0B5DC4F9AE02.roa (hash: jdZ9eU0HcGePAnaPpQJ/8+6uq872C01hZ+qnBvUiNlQ=)
7: B23B879EE89C11ECA30FD20EC4F9AE02.roa (hash: x07pQS6pEgJZLrxI+4SzaUGa4YwQ96qN1jF+DrtdcJY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl
rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 22:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2042 (0x7fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
Validity
Not Before: Jul 6 22:30:29 2026 GMT
Not After : Jul 13 22:30:29 2026 GMT
Subject: CN=6a4c2c85-cd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1f:89:46:c5:6e:f8:bd:b5:ab:9b:f7:23:58:
83:cd:3f:38:9b:86:10:9c:68:d2:6a:66:39:3f:c6:
97:e6:4a:53:a3:04:93:69:c0:bf:dc:18:35:01:af:
0a:91:88:c9:38:55:66:a1:bb:4d:34:8a:f4:c2:f6:
df:46:34:18:14:b2:6e:31:e6:54:e1:75:6a:18:e5:
66:ac:df:0a:4a:d7:d6:50:fa:41:e1:ca:59:04:eb:
03:ef:cb:87:d6:b8:ca:ff:c3:c9:3e:ab:c7:e2:d6:
b9:fd:b0:2d:8e:7d:e6:46:c0:8a:44:57:aa:3e:3d:
df:c9:06:75:08:6d:55:b0:b7:8f:6c:58:73:11:47:
51:17:2e:fb:cd:c9:2e:c0:d8:14:e6:cc:e9:3a:03:
d8:76:93:65:1b:47:a8:af:0e:67:3b:23:43:c8:36:
91:90:06:14:24:fc:9a:51:46:56:3f:89:3b:08:a9:
aa:f0:1a:0d:31:88:89:fd:f9:5b:35:91:2a:f1:e2:
90:e1:d4:31:fc:91:a1:0a:c5:f7:97:bb:7b:1f:88:
ec:7e:29:54:15:7c:01:fe:c8:1e:65:ce:77:57:31:
d4:6c:3d:8a:a0:c8:64:85:02:ce:fe:65:94:57:54:
de:44:00:1a:28:a0:8f:cf:51:70:61:73:61:61:13:
a6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E5:EF:C7:A4:3D:CE:AF:66:B5:76:0C:4E:D9:74:8B:24:45:A3:78
X509v3 Authority Key Identifier:
keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a0:39:d9:5f:33:e1:2d:02:ee:2c:a5:1e:6b:5b:14:d7:12:
13:63:52:b3:dc:6c:6b:c0:12:65:fd:12:77:7b:49:6e:43:06:
a0:48:25:3b:13:42:a4:d2:9e:db:03:36:74:72:f0:cd:a2:ec:
d4:d4:88:71:2c:f2:f7:b4:72:92:36:cb:90:ad:59:93:6b:3e:
36:af:2f:5f:56:f5:3a:92:d3:77:cc:ee:03:3b:b8:c9:7a:b3:
bf:dc:88:36:03:c2:4d:0e:0a:e9:5c:bb:ea:82:5a:87:59:1b:
7d:72:c4:28:df:b2:e5:48:5d:98:ba:ec:48:76:22:f6:78:b7:
51:da:be:52:22:c0:0d:62:99:86:5e:7a:6a:ef:f9:2a:e2:e3:
fa:5a:bd:e5:22:15:1e:c5:cd:ec:cc:0f:cd:13:c8:ee:f8:a7:
a1:a3:2b:c9:15:8a:99:d0:f6:18:80:b1:86:f1:f9:58:40:e9:
ff:21:bb:fd:5e:f6:b2:eb:84:fb:f1:ef:a1:39:3e:ee:8a:db:
8c:8e:e9:98:4d:7d:93:35:85:3c:c8:0f:fc:b4:82:ea:3f:20:
99:70:39:9a:bf:8c:63:ce:af:2c:dd:1e:a3:6d:a0:21:56:4b:
b7:a7:32:bc:71:99:e6:a1:48:63:36:db:db:03:6a:a6:f2:9c:
9e:44:5b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:46:41 2026 by rpki-client