
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
File: zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft (raw, json)
Hash identifier: NYs1f/BzCtl4fI6notbrPUFYfebDalCNDaDj1oTgGVw=
Subject key identifier: 36:DA:82:E1:24:98:5B:81:7B:82:41:A4:CC:E2:CE:C2:6C:89:9C:35
Authority key identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5
Certificate issuer: /CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5
Certificate serial: 0127
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
Manifest number: 0123
Signing time: Tue 23 Jun 2026 05:59:10 +0000
Manifest this update: Tue 23 Jun 2026 05:59:09 +0000
Manifest next update: Tue 30 Jun 2026 05:59:09 +0000
Files and hashes: 1: zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl (hash: AI31l5LXKf4zpSgGLx4TWL6HMwaWBRsq7XrXfhprcFM=)
2: F6935C8EB35911EF96C43242C4F9AE02.roa (hash: S9t/+J52VQt2ne9SbBBHigAP25wl7hoUywJOVYVw1Ik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl
rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 05:59:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295 (0x127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD39E, serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5
Validity
Not Before: Jun 23 05:59:09 2026 GMT
Not After : Jun 30 05:59:09 2026 GMT
Subject: CN=6a3a20ad-b5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0b:65:c0:47:0c:86:13:10:72:e0:01:2e:4b:
2f:e4:9d:cf:e4:45:38:3e:ab:3a:c6:ea:11:eb:c2:
19:ba:ba:8b:1a:82:5c:64:87:a8:34:cc:e5:d8:29:
c1:a2:77:dd:47:b9:f5:97:94:d2:89:70:cd:22:3f:
89:6d:32:04:9e:58:d8:b7:f5:f9:53:3f:2c:9d:a1:
2a:12:02:da:e0:cb:ef:7a:77:26:e7:62:c9:12:68:
78:66:94:9b:2d:71:ac:19:5a:95:dd:cd:43:1a:c9:
6b:33:ae:c7:00:95:ec:20:1d:e6:76:b8:57:44:0d:
53:65:8e:60:9a:27:ed:0c:c4:dd:ab:8b:82:e7:83:
3c:75:cc:56:c3:f4:13:ed:ef:63:ca:6b:76:80:77:
a3:77:f2:f5:5d:3a:88:c7:9a:ed:f5:bc:32:b1:cd:
66:aa:f0:15:d3:d2:36:b4:b5:96:59:97:3a:9b:ca:
a4:8a:9e:db:4a:f7:7c:82:f1:75:26:2d:ed:3d:37:
88:b9:d6:63:2a:9b:be:fb:62:4f:49:d9:ba:59:8f:
29:81:c8:dc:f4:8d:a8:9f:b0:8b:c3:b7:ac:af:08:
05:ca:62:92:f6:e1:f6:c9:13:0c:6b:66:24:fc:25:
13:47:5c:cb:28:7a:41:d0:95:32:2d:6e:ce:0b:6f:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DA:82:E1:24:98:5B:81:7B:82:41:A4:CC:E2:CE:C2:6C:89:9C:35
X509v3 Authority Key Identifier:
keyid:CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:e0:bc:48:fc:ec:26:c9:8f:e4:f2:f9:93:e8:ea:79:45:58:
93:d8:11:21:09:5d:55:dd:2e:1b:13:1c:0f:01:f8:25:e2:f9:
04:2c:67:4f:a0:d7:65:33:76:01:43:95:06:f2:11:89:76:ea:
56:b2:a7:b0:7c:b6:5b:b4:36:6a:8b:68:74:38:02:7c:ed:ab:
e7:7f:95:0a:70:db:65:82:29:5b:ac:94:be:1a:0a:93:2b:82:
1c:00:72:3c:f3:51:63:ac:da:b9:bf:b4:26:10:7e:e1:a7:df:
fe:0d:d1:7c:80:61:c1:a6:70:bd:06:d8:31:0f:7f:40:8f:ab:
bd:33:1c:f4:4e:6f:32:74:0f:08:c1:cf:c6:70:c6:b9:2b:a5:
1f:90:09:11:ee:b7:fc:fa:19:d8:7c:94:5e:dd:59:98:89:58:
24:4e:25:47:a3:84:03:bd:67:b2:64:3f:de:96:90:5e:65:26:
f1:35:a2:48:cc:6d:be:fb:b7:d5:fd:df:a3:18:dd:f5:10:e6:
bf:0e:48:2f:e8:3a:d3:bb:0c:f4:08:72:1e:7e:49:06:b0:16:
5d:83:4a:14:36:31:d2:d6:25:45:8d:bc:61:81:54:d0:8f:36:
25:3d:5e:19:38:55:06:e8:75:84:85:80:2c:be:00:5a:89:d7:
7b:d2:82:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:18:02 2026 by rpki-client