
$ rpki-client -vvf rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.mft
File: z8OBRZAZiWAcekIm8uBfuM-SloM.mft (raw, json)
Hash identifier: +8dcb8NhSv+KoCozcBMjXMjZ4JED1fRkF5Ct6e8T1r0=
Subject key identifier: E3:52:29:A5:85:F0:50:2A:41:A9:C0:AD:8F:37:C4:BF:70:D9:1B:99
Authority key identifier: CF:C3:81:45:90:19:89:60:1C:7A:42:26:F2:E0:5F:B8:CF:92:96:83
Certificate issuer: /CN=A91629D4/serialNumber=CFC38145901989601C7A4226F2E05FB8CF929683
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8OBRZAZiWAcekIm8uBfuM-SloM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.mft
Manifest number: 06
Signing time: Thu 23 Jul 2026 11:20:31 +0000
Manifest this update: Thu 23 Jul 2026 11:20:31 +0000
Manifest next update: Thu 30 Jul 2026 11:20:31 +0000
Files and hashes: 1: z8OBRZAZiWAcekIm8uBfuM-SloM.crl (hash: cRdiKHk2yPiSPCMuQA0Qtlf+flNJUyLyyEbzjXTm92U=)
2: C12E80FC84AC11F188069C008EA30FBC.roa (hash: WPKl0RmubRsg2zOYR5o/LCEZKLKwHEqKhd2tRJMYw50=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.crl
rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8OBRZAZiWAcekIm8uBfuM-SloM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:20:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91629D4, serialNumber=CFC38145901989601C7A4226F2E05FB8CF929683
Validity
Not Before: Jul 23 11:20:31 2026 GMT
Not After : Jul 30 11:20:31 2026 GMT
Subject: CN=6a61f8ff-c521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:24:1d:ea:73:d1:74:97:84:00:d7:48:fd:4f:
cd:6a:6b:11:1f:b4:f8:b0:c1:92:a3:9a:45:70:69:
33:81:7e:80:84:dc:94:82:1f:e5:7e:31:3b:7d:f5:
de:01:05:d2:85:14:1e:d5:55:9b:d1:46:a1:16:d7:
8b:41:63:58:b0:34:b7:0a:ba:1e:c7:94:2a:5b:88:
f2:1f:62:ce:8c:72:e1:50:5c:47:d3:94:08:6c:f0:
4a:48:0c:11:5f:1f:9d:b4:aa:06:84:5c:b2:0f:35:
8c:6d:58:bb:b4:8b:4f:8d:4f:d3:9b:22:7f:0b:64:
9a:f4:6b:69:35:53:23:7a:0d:fc:a6:6c:46:43:99:
de:09:3f:0d:e2:74:f1:3c:ad:d3:f6:ae:47:90:ee:
35:00:1d:15:0b:e7:10:1f:e9:dd:54:73:19:db:6b:
b4:ce:bd:39:d0:91:c1:5e:fc:7d:e8:87:e2:3a:25:
1c:df:ed:c2:ef:c6:3b:6f:be:b3:50:81:06:2c:5a:
28:a3:5b:08:cc:60:cf:1d:7a:a1:af:9e:a8:e7:dd:
53:44:50:8e:aa:09:c1:4a:25:c1:21:2e:48:c3:30:
60:a6:b5:04:00:cf:12:88:ba:7e:c9:5d:dc:12:fa:
e7:a7:e8:b3:5c:69:ca:ab:d2:3c:45:32:99:1e:e9:
83:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:52:29:A5:85:F0:50:2A:41:A9:C0:AD:8F:37:C4:BF:70:D9:1B:99
X509v3 Authority Key Identifier:
keyid:CF:C3:81:45:90:19:89:60:1C:7A:42:26:F2:E0:5F:B8:CF:92:96:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8OBRZAZiWAcekIm8uBfuM-SloM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:40:c7:dc:80:1a:1f:63:ef:9a:a2:15:5b:46:78:74:ba:f7:
8d:22:90:cd:ce:c9:97:a5:4a:aa:48:a2:3c:ee:0b:51:3e:35:
22:04:cc:83:ca:04:1c:ab:d7:63:8f:e5:ea:d3:34:89:29:af:
63:6b:a4:3f:43:e9:1d:81:ca:11:6d:30:a9:24:6c:5f:92:87:
5d:23:73:03:85:39:9e:5b:b6:51:ae:42:c7:b8:46:09:ab:81:
1e:8e:de:a7:6e:96:cb:15:da:8d:3c:22:82:1c:ae:c6:ab:3f:
4c:58:4d:3f:97:10:2a:f7:36:58:1f:75:0a:74:32:ac:ef:f7:
7d:2f:1e:80:68:9f:f4:4a:ef:4c:0c:d4:d5:9c:8d:cb:03:63:
16:09:11:e1:55:ee:05:4b:08:7f:fd:6f:74:37:49:6e:da:06:
c5:aa:1a:f7:49:ad:94:6f:06:64:b2:44:86:0e:13:cf:d0:3b:
73:77:60:23:5c:ef:fb:d1:9f:e5:07:6e:e0:10:06:81:55:c2:
f3:2c:0a:f1:ac:6f:75:97:19:9f:6f:f2:16:c5:a2:07:be:e6:
20:ab:97:7e:70:ce:1c:8b:61:81:af:46:83:73:e5:aa:b3:53:
c7:1b:3d:3b:5c:12:66:a2:ac:8b:db:e7:41:c1:bb:cc:45:93:
40:a0:9a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:33 2026 by rpki-client