
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
File: ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft (raw, json)
Hash identifier: rfIQvCYyActUNwWBk3x9NRgASaC+GkonOpj2yqLQHsM=
Subject key identifier: 41:38:DA:C9:1E:E0:FB:32:02:B8:EF:7F:28:A8:7C:5C:49:B0:9A:FC
Authority key identifier: 64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD
Certificate issuer: /CN=A91FF14D/serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
Manifest number: 88
Signing time: Thu 11 Jun 2026 09:51:10 +0000
Manifest this update: Thu 11 Jun 2026 09:51:10 +0000
Manifest next update: Thu 18 Jun 2026 09:51:10 +0000
Files and hashes: 1: ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl (hash: k6/uHlTKOlxHEyTnz3J4jvcTTOEQcTIyUSqpwH95WpU=)
2: 18F61C18939B11F0820C0E13C4F9AE02.roa (hash: ywYpRYCAQwXCZMjr3c7Rlx0ujNmnV92c95uYASJL2t0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl
rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 09:51:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF14D, serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD
Validity
Not Before: Jun 11 09:51:10 2026 GMT
Not After : Jun 18 09:51:10 2026 GMT
Subject: CN=6a2a850e-6882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:49:98:b4:27:0e:fd:2f:a1:27:74:68:ba:
83:dd:f4:fd:51:ae:bd:11:34:33:e7:69:e3:6f:10:
76:75:f8:ae:3b:58:4e:f9:5b:e1:07:2f:a7:11:a8:
6f:7c:dc:62:75:40:17:31:a1:12:85:9d:dc:55:56:
74:72:b7:a7:45:f9:98:eb:92:85:27:03:da:5d:3e:
72:77:86:48:8f:e3:be:42:d6:8d:8e:31:cd:e8:e0:
6d:a8:e9:a7:28:fa:bc:08:f5:52:0c:b6:76:78:00:
a7:5b:c1:dd:84:ee:d1:e6:f4:ee:44:43:eb:f0:ca:
23:7d:c7:ed:1a:bb:94:d1:f5:fd:2b:73:fe:61:54:
18:7c:a6:c6:b0:90:04:7e:58:ce:c5:c7:0f:d4:4d:
ab:bb:cf:fa:41:62:42:1e:45:6c:86:2b:d4:f5:ac:
22:70:11:14:d7:97:c9:70:b1:3a:fe:2d:50:b1:0f:
44:b8:78:10:ec:3a:b7:be:e0:51:9e:01:17:59:6d:
4a:50:8d:67:e6:42:9a:c5:4b:00:30:48:7b:bc:70:
a0:9b:d2:0e:bb:88:76:3c:3c:32:ab:ee:be:80:e0:
98:1d:33:7a:37:c4:7b:ea:f6:91:6a:84:bc:e5:62:
fc:92:72:65:9c:ed:7c:a9:72:8e:d6:89:48:0d:8f:
b3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:38:DA:C9:1E:E0:FB:32:02:B8:EF:7F:28:A8:7C:5C:49:B0:9A:FC
X509v3 Authority Key Identifier:
keyid:64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:27:6c:d8:6a:b0:57:7b:3e:7d:a9:17:63:60:dd:4b:4a:38:
c0:9e:5a:c8:cb:8d:08:f8:16:8f:44:db:7e:56:93:cd:80:9a:
ea:6b:8d:6b:27:6a:0e:18:9d:15:e1:da:a3:6d:df:8b:61:25:
58:8d:97:3a:e7:75:cc:6e:d0:b4:5f:4b:69:b0:68:e5:07:2a:
bc:3a:71:f6:e9:fe:60:be:a3:6e:d3:a9:18:67:37:43:b3:c9:
95:c1:df:21:5e:71:4d:91:22:61:f3:8d:f5:07:4c:97:fa:74:
bc:d7:68:dc:f3:ce:a7:14:a9:22:73:4f:65:8e:60:98:93:9b:
1b:22:85:af:a2:97:80:fd:c6:5a:1e:19:f8:9b:98:29:75:27:
4f:52:1b:69:d9:1b:78:8b:2a:eb:b7:5f:08:c9:eb:cb:22:bf:
46:9a:d9:a0:e9:98:e7:8d:b3:31:89:e7:99:f7:09:a6:a4:90:
9c:62:f2:ae:01:a0:02:0c:a3:59:dd:8d:00:a9:0a:96:60:d5:
90:42:15:77:05:f0:27:58:db:52:0e:e0:88:d7:2c:57:8a:44:
6c:bc:ad:63:fe:3d:09:98:98:52:52:f2:66:4c:0a:1c:02:77:
18:7f:57:43:21:fd:9a:fc:b5:a7:c5:03:53:4f:49:07:48:20:
71:b8:85:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkYxNEQxMTAvBgNVBAUTKDY0Mzc3RTg3MTg2NkREMzc0RUM1OUUyMzgzQkExMEZB
NkEzMUZGRkQwHhcNMjYwNjExMDk1MTEwWhcNMjYwNjE4MDk1MTEwWjAYMRYwFAYD
VQQDEw02YTJhODUwZS02ODgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq2BJmLQnDv0voSd0aLqD3fT9Ua69ETQz52njbxB2dfiuO1hO+VvhBy+nEahv
fNxidUAXMaEShZ3cVVZ0crenRfmY65KFJwPaXT5yd4ZIj+O+QtaNjjHN6OBtqOmn
KPq8CPVSDLZ2eACnW8HdhO7R5vTuREPr8MojfcftGruU0fX9K3P+YVQYfKbGsJAE
fljOxccP1E2ru8/6QWJCHkVshivU9awicBEU15fJcLE6/i1QsQ9EuHgQ7Dq3vuBR
ngEXWW1KUI1n5kKaxUsAMEh7vHCgm9IOu4h2PDwyq+6+gOCYHTN6N8R76vaRaoS8
5WL8knJlnO18qXKO1olIDY+zBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEE42ske
4PsyArjvfyiofFxJsJr8MB8GA1UdIwQYMBaAFGQ3focYZt03TsWeI4O6EPpqMf/9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjE0RC85MzUyQ0Q1RTkz
OUExMUYwOThCODJDMEVDNEY5QUUwMi9aRGQtaHhobTNUZE94WjRqZzdvUS1tb3hf
XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pEZC1oeGhtM1RkT3haNGpnN29RLW1veF9fMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RjE0RC85MzUyQ0Q1RTkzOUExMUYwOThCODJDMEVDNEY5QUUwMi9aRGQtaHhobTNU
ZE94WjRqZzdvUS1tb3hfXzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoCds2GqwV3s+fakXY2DdS0o4wJ5ayMuNCPgWj0TbflaTzYCa6muNaydqDhid
FeHao23fi2ElWI2XOud1zG7QtF9LabBo5QcqvDpx9un+YL6jbtOpGGc3Q7PJlcHf
IV5xTZEiYfON9QdMl/p0vNdo3PPOpxSpInNPZY5gmJObGyKFr6KXgP3GWh4Z+JuY
KXUnT1IbadkbeIsq67dfCMnryyK/RprZoOmY542zMYnnmfcJpqSQnGLyrgGgAgyj
Wd2NAKkKlmDVkEIVdwXwJ1jbUg7giNcsV4pEbLytY/49CZiYUlLyZkwKHAJ3GH9X
QyH9mvy1p8UDU09JB0ggcbiFqQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:28:28 2026 by rpki-client