
$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
File: zLjgj5mQp1Ux6TatsG26yqcxtVI.mft (raw, json)
Hash identifier: cD72ke9bQpao0n2jS8wfX70vCRuYCc7hCuClBipCtFg=
Subject key identifier: A8:83:F3:AE:FE:93:EB:7C:41:B4:90:8B:68:BC:6D:9F:AB:69:C6:33
Authority key identifier: CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52
Certificate issuer: /CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
Certificate serial: 01D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
Manifest number: 01CC
Signing time: Thu 23 Jul 2026 05:14:51 +0000
Manifest this update: Thu 23 Jul 2026 05:14:50 +0000
Manifest next update: Thu 30 Jul 2026 05:14:50 +0000
Files and hashes: 1: zLjgj5mQp1Ux6TatsG26yqcxtVI.crl (hash: 8Nteo/VbXszHtKvBs6t84ONn13lUjXat5bQcqFz2sck=)
2: 654E27420CA311F0A866C650C4F9AE02.roa (hash: eRA3ggdDb9SZ/usM83jI/rG8aFaHS14k+X9wZnX4XR0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl
rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469 (0x1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91364F5, serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
Validity
Not Before: Jul 23 05:14:50 2026 GMT
Not After : Jul 30 05:14:50 2026 GMT
Subject: CN=6a61a34a-72b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ae:2c:5e:16:9a:a2:67:1a:03:a1:d7:2d:a8:
8b:ee:9c:a4:79:99:42:8f:f7:dd:6e:43:9f:45:16:
75:0d:42:43:22:c2:4c:73:ef:f5:25:4b:7b:18:b1:
bf:90:89:bc:08:28:c6:d6:2c:65:fc:b9:c2:e3:3c:
b6:3d:d1:e6:d8:8d:91:b0:2e:2f:96:de:83:aa:d3:
2d:64:b9:aa:d9:c0:4c:a6:65:a2:b0:e9:59:58:c5:
90:46:0e:ce:a0:df:37:c1:d4:95:48:a5:02:9b:a2:
22:eb:5a:35:38:47:54:04:9b:45:01:14:49:d4:78:
ec:49:3d:7b:3b:49:42:d0:c0:49:c8:06:bb:82:b3:
80:92:ee:f2:dc:53:46:b2:9d:0c:68:c6:9d:01:59:
9c:41:7a:ac:4e:e3:f8:eb:e8:37:b7:99:4f:f6:7c:
69:de:f1:0f:73:75:81:24:ac:dd:9a:c1:4c:08:f9:
99:d5:4e:8e:27:b3:5e:9e:3f:03:03:25:bc:42:69:
bd:99:8d:e5:b5:75:a7:9c:f4:b7:cf:f3:ae:98:17:
b9:32:04:4d:01:55:90:87:ae:e6:58:b2:50:c8:1d:
34:c0:21:6b:0a:5b:ae:e5:18:77:57:60:3c:04:58:
b5:ed:6f:61:09:d4:43:07:f8:3b:12:bb:dd:71:3d:
14:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:83:F3:AE:FE:93:EB:7C:41:B4:90:8B:68:BC:6D:9F:AB:69:C6:33
X509v3 Authority Key Identifier:
keyid:CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:fe:45:9d:a1:d7:8e:3f:aa:85:fc:00:37:74:de:ba:b4:7e:
37:92:7e:1e:f5:cb:17:f8:a3:bd:78:fd:b8:c4:e6:8c:56:9c:
a7:20:28:3a:b3:f9:94:3b:17:ba:69:f3:f2:93:8f:0c:48:25:
c3:57:3a:9c:ff:34:7c:3e:d4:dc:34:07:8f:1c:e9:0c:5d:7f:
57:2a:91:37:4a:23:d2:f8:20:2b:4a:44:53:bc:d2:64:7e:be:
18:ee:38:30:4a:95:f0:f6:e3:db:7b:47:5f:82:7f:96:44:84:
2c:db:83:b4:50:36:ef:62:a2:2d:74:6d:10:7d:1d:4b:03:0a:
ca:05:08:e0:fa:eb:47:43:2e:ae:7e:c8:aa:ae:9b:6a:a6:78:
b5:3d:df:f6:6f:b4:92:81:1e:c3:36:cc:1d:b2:1d:91:a8:43:
85:d0:68:8c:62:83:d2:04:e2:73:d7:1b:e0:59:69:f5:93:85:
1b:d8:91:9a:ee:59:2c:4c:35:71:1c:e8:31:f6:16:ed:a9:87:
1b:91:73:9f:ff:66:ab:5f:8a:ae:cc:39:21:4b:c5:a3:42:80:
ff:1f:07:86:92:b3:df:de:a2:cd:49:04:52:5d:ae:de:e7:11:
63:92:86:f0:ae:99:56:e0:b8:87:e0:fb:c9:bd:a8:89:c1:0c:
a1:c9:fa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:57:48 2026 by rpki-client