
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft
File: z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft (raw, json)
Hash identifier: 3GUrNWRT3W3U0w/5SBh6zRzx2gcujJhUTRueEwHiZ6g=
Subject key identifier: 38:B4:21:19:35:1C:A3:F8:12:4F:EA:64:92:30:C4:93:88:2D:30:08
Authority key identifier: CF:BB:03:8F:DB:83:86:54:20:49:62:98:0A:D2:21:C9:41:5D:5C:FF
Certificate issuer: /CN=A91F8F9B/serialNumber=CFBB038FDB838654204962980AD221C9415D5CFF
Certificate serial: 016F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft
Manifest number: 0167
Signing time: Fri 17 Jul 2026 05:56:50 +0000
Manifest this update: Fri 17 Jul 2026 05:56:49 +0000
Manifest next update: Fri 24 Jul 2026 05:56:49 +0000
Files and hashes: 1: z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl (hash: UDQEClR+SeKmckK5AVF+axbm1EeuZBlJ0kikJ+K94yc=)
2: 7143C5B85DBF11EFB8714857C4F9AE02.roa (hash: HnPe7oTE/NJwLfNgQpYdaZfEzbuO3TebzvAvQ+UM9po=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl
rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 05:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8F9B, serialNumber=CFBB038FDB838654204962980AD221C9415D5CFF
Validity
Not Before: Jul 17 05:56:49 2026 GMT
Not After : Jul 24 05:56:49 2026 GMT
Subject: CN=6a59c422-b140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:57:fe:44:a8:98:a4:59:08:a9:a7:bb:b9:8a:
e7:95:ab:77:4a:c8:7b:e6:1b:1b:b4:c1:19:1e:6b:
01:04:e8:de:88:fc:be:32:08:85:62:3c:fa:fb:57:
5d:dd:dc:fd:c6:a0:7c:93:f1:3e:86:53:04:9d:35:
84:09:48:c5:30:dd:8e:13:73:ba:1f:2b:af:27:9b:
43:6d:a0:59:19:78:9d:ed:ca:b5:73:78:d7:ba:c5:
0d:ea:2c:ff:97:04:3c:f2:42:08:d7:16:a2:56:b5:
9f:32:28:8c:2a:f1:d6:c2:ee:7c:69:ad:92:11:1e:
ab:cf:0d:53:9a:73:d9:e2:a4:be:27:f0:ab:2c:93:
c5:12:d5:0f:6a:5a:f6:f1:e6:bd:fb:02:8e:18:5c:
c5:bf:b8:f7:b6:82:ea:91:8e:21:cc:99:d4:35:d9:
e7:91:ea:81:07:ae:13:4c:46:d1:90:76:de:f4:ed:
1b:4c:04:00:4b:42:5b:dc:1b:42:97:4e:b7:80:b3:
2b:50:ba:5d:97:49:a2:31:9b:26:4e:f1:79:fb:db:
dc:95:e8:7a:05:e1:17:3b:01:f2:ba:7c:f3:52:a9:
af:2f:a7:f8:e9:ce:df:65:12:f4:01:31:f5:f7:3a:
21:0a:d9:38:93:fd:ee:21:da:9b:6c:a7:e5:57:92:
4d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B4:21:19:35:1C:A3:F8:12:4F:EA:64:92:30:C4:93:88:2D:30:08
X509v3 Authority Key Identifier:
keyid:CF:BB:03:8F:DB:83:86:54:20:49:62:98:0A:D2:21:C9:41:5D:5C:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:73:91:8c:ea:30:6f:be:99:d4:36:4e:65:71:fe:87:63:41:
3b:1d:ff:59:b3:c4:57:c7:e8:5b:c6:ea:21:a6:e2:1e:71:05:
ed:93:87:9f:36:20:4a:9b:ec:7d:91:3c:3e:ed:95:e6:02:10:
10:7b:f7:e3:48:7b:31:84:23:45:b9:ca:a4:6f:4b:2e:1c:d9:
68:1b:a7:dd:03:b4:15:bd:02:5b:cf:df:4f:15:4d:42:8f:e3:
d6:92:42:62:e0:49:24:13:d9:8a:c6:7d:f8:c2:93:5d:91:b4:
e7:4c:da:89:3d:33:95:64:7a:23:b1:e9:df:15:e5:75:c6:7f:
f3:bb:ea:f6:82:3c:08:af:c0:ca:e8:89:df:9d:c8:d6:ef:28:
a3:f2:4b:34:41:ef:da:b4:5e:11:66:15:fb:f4:ab:c7:19:4a:
43:42:39:ff:55:0f:34:6e:83:9f:2c:3b:88:2a:55:51:24:22:
4c:58:df:89:c1:cb:c9:d3:d8:ac:98:b6:69:b7:df:04:a6:8d:
96:d9:de:69:c7:9c:cb:40:2f:2b:2c:7b:62:95:03:ea:0d:69:
75:ba:3c:b2:7f:c1:0a:31:a4:d8:ce:f3:9c:66:43:2d:dd:bc:
40:ce:27:b0:00:98:7f:d1:39:ce:df:1c:e2:c6:cb:7f:a0:34:
55:4e:68:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:10 2026 by rpki-client