
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
File: ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft (raw, json)
Hash identifier: NgQ1wTx5FVn4uetikf0hTVww9LrEnSYr99LsDIlrypA=
Subject key identifier: BC:67:46:BB:B9:EA:5F:F1:34:C9:BD:DB:B6:BD:76:52:0E:93:6A:6C
Authority key identifier: 64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD
Certificate issuer: /CN=A91FF14D/serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD
Certificate serial: A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
Manifest number: 9F
Signing time: Mon 27 Jul 2026 09:25:26 +0000
Manifest this update: Mon 27 Jul 2026 09:25:26 +0000
Manifest next update: Mon 03 Aug 2026 09:25:26 +0000
Files and hashes: 1: ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl (hash: aAnfuK+yRXlbTBiEPXR/TsHrTSRzugPNO01i8t4qUZE=)
2: 18F61C18939B11F0820C0E13C4F9AE02.roa (hash: ywYpRYCAQwXCZMjr3c7Rlx0ujNmnV92c95uYASJL2t0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl
rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:25:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF14D, serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD
Validity
Not Before: Jul 27 09:25:26 2026 GMT
Not After : Aug 3 09:25:26 2026 GMT
Subject: CN=6a672406-3cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ba:f1:d5:0d:a6:8b:b2:bd:3b:f1:9b:cf:9b:
34:88:fd:f7:7a:29:90:86:59:5b:8f:2b:b8:51:59:
6f:4e:fb:05:00:b4:50:f8:6f:a8:bf:ad:1b:30:82:
64:be:2e:44:e7:02:5f:9a:b9:07:ea:4f:b4:57:7f:
d9:ce:0a:c2:b8:bb:c6:bf:a8:a0:4f:c2:01:fd:73:
cd:06:94:bf:8e:c0:8f:61:8f:66:2b:17:a0:18:3d:
2a:95:2e:ac:fb:31:91:06:2b:35:92:81:f0:40:76:
a3:42:37:ae:e5:0b:56:5e:92:81:b9:73:5d:87:db:
e4:5c:bb:12:6a:69:c2:a1:d2:ba:97:b2:ed:11:3b:
40:60:a5:45:3b:07:8d:67:a2:3e:bc:62:84:b8:27:
e3:ad:9b:8b:20:f9:6a:e9:3d:1a:ef:92:4a:6f:d3:
f7:c8:ee:46:38:24:14:a2:aa:d8:f7:6f:33:9c:f2:
e5:34:75:16:c5:dc:97:41:28:2c:5b:ab:bb:01:03:
07:a0:ef:67:1b:49:6b:43:17:d3:e3:64:13:70:17:
27:d2:73:06:1a:fc:4f:06:29:9d:af:66:d9:fa:d9:
9c:eb:52:5e:18:24:0c:f0:f5:0d:e9:4c:0c:68:ae:
cd:31:a5:6f:67:27:3d:20:dd:28:0d:24:bf:20:16:
e8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:67:46:BB:B9:EA:5F:F1:34:C9:BD:DB:B6:BD:76:52:0E:93:6A:6C
X509v3 Authority Key Identifier:
keyid:64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4c:eb:d4:28:3c:7a:cc:30:98:f6:2a:19:90:f5:39:5f:7c:
63:61:5f:ea:26:f4:d5:ed:75:93:38:0d:4c:53:8e:9b:cb:d7:
32:2b:8f:e4:98:07:14:92:81:0f:57:ea:d6:33:58:38:a0:ac:
93:07:8f:bf:95:1f:b3:01:1c:fe:ff:ed:b7:83:70:c7:e8:8e:
cf:8b:21:40:d4:c4:99:eb:59:38:9a:fd:df:c8:ba:74:12:5b:
07:63:bb:6c:13:da:69:da:0f:33:2e:63:f5:14:52:64:0c:14:
58:a9:7a:34:9b:b8:0c:95:8f:57:19:12:07:df:87:44:3d:11:
20:19:ac:9b:56:3d:e7:d1:a3:34:55:31:04:71:39:55:76:ba:
9b:bb:44:dc:2a:ac:5e:33:60:1b:f2:fd:71:69:ba:bf:8f:24:
6d:2d:57:86:44:54:1d:1f:9e:09:20:27:c6:2f:02:49:5f:12:
ab:ed:6b:a5:66:9b:d1:ce:3b:42:cb:8e:68:cd:01:e4:1b:50:
7e:c7:b9:4c:47:9d:96:00:8f:6f:d1:7f:ff:d3:88:9e:90:48:
9b:8a:b9:35:79:db:5b:db:37:f8:d7:52:78:06:7a:28:1a:e4:
04:ae:29:46:d4:f4:02:07:7b:df:f0:c5:0b:6a:24:88:1f:79:
18:18:54:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:46:49 2026 by rpki-client