
$ rpki-client -vvf rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
File: ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft (raw, json)
Hash identifier: YiwsokKVJeCFoG03xBaoFAS9LbGT+Zp6MQPELDSZGbM=
Subject key identifier: D5:16:54:87:E2:16:3D:1E:FA:48:17:F0:AC:F8:85:C3:0D:B3:DC:DE
Authority key identifier: 65:F6:16:1C:73:6D:1A:9C:41:91:FD:FC:C7:A4:F8:24:CE:11:23:2D
Certificate issuer: /CN=A91899BB/serialNumber=65F6161C736D1A9C4191FDFCC7A4F824CE11232D
Certificate serial: 0708
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
Manifest number: 0703
Signing time: Tue 12 May 2026 22:07:13 +0000
Manifest this update: Tue 12 May 2026 22:07:12 +0000
Manifest next update: Tue 19 May 2026 22:07:12 +0000
Files and hashes: 1: ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl (hash: 94CPL4NmStUMfijxKNtMIgHzzjoUsyrcflaoLxRm2VM=)
2: 54CB555C57A311F09664E82DC4F9AE02.roa (hash: 8zSq/rqaKjpysVvvXWgHeKeayL3TVMK2Emf1uVmygFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl
rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:07:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1800 (0x708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91899BB, serialNumber=65F6161C736D1A9C4191FDFCC7A4F824CE11232D
Validity
Not Before: May 12 22:07:12 2026 GMT
Not After : May 19 22:07:12 2026 GMT
Subject: CN=6a03a491-0a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:46:e4:80:58:6d:be:1a:dc:9b:4e:63:48:62:
bb:dd:e4:b7:ab:9f:17:f3:cf:0a:1f:f1:00:bc:e7:
ea:b5:c8:57:dd:62:b5:ab:9a:92:7e:d8:29:9d:e8:
33:8c:7a:56:f3:7b:bd:fb:2e:98:9b:e4:04:26:75:
5e:6d:a6:2e:fc:a6:86:8c:0d:d7:f1:db:6b:c1:5f:
b9:f7:e9:67:47:74:0b:91:eb:1d:95:4d:e7:15:c7:
11:9e:80:95:c6:42:e0:cf:34:11:72:aa:bb:0b:37:
45:5c:c1:05:6d:99:cd:68:7a:7d:a4:6e:4d:33:f8:
b1:a9:e9:aa:48:be:66:03:6a:f9:27:04:9b:b6:a1:
e0:17:5e:c1:d0:ad:3c:1a:33:e3:91:fb:93:01:e8:
80:6d:ad:78:ee:3c:ad:32:86:8c:b6:76:d4:80:56:
00:74:b8:a6:7a:0a:cd:c2:42:4a:25:48:d5:27:ee:
08:91:61:cd:47:c2:14:6f:0b:fb:18:c4:37:2f:e5:
6b:4d:44:d4:ca:14:29:29:1d:9c:53:ac:61:bc:9d:
bc:6b:da:b7:c8:f9:12:ca:03:8a:36:8d:38:54:74:
67:fe:84:56:9f:08:19:62:d2:50:8d:b7:96:8a:4f:
7c:73:9d:88:70:e5:1f:14:ec:34:cc:74:12:b4:0d:
a4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:16:54:87:E2:16:3D:1E:FA:48:17:F0:AC:F8:85:C3:0D:B3:DC:DE
X509v3 Authority Key Identifier:
keyid:65:F6:16:1C:73:6D:1A:9C:41:91:FD:FC:C7:A4:F8:24:CE:11:23:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fc:52:17:40:5b:7d:1c:8d:fc:d4:4d:2c:37:24:36:c0:85:
46:96:8e:63:9a:49:65:75:09:d2:87:4f:16:b6:7c:28:af:94:
c9:04:5d:36:32:7d:40:bd:06:60:f3:f1:ad:6c:66:12:22:de:
f4:6c:d4:c0:77:a2:90:dd:99:6b:12:d9:f9:13:2f:e6:cb:73:
27:2c:41:c3:b9:d6:68:8a:7e:15:81:51:9e:5a:75:e6:1f:6b:
31:93:94:bd:c8:2a:82:03:42:19:14:cb:dd:71:97:a0:82:0d:
94:80:92:2d:7c:29:55:6a:19:57:00:c0:f7:ad:9e:c0:7d:d3:
fe:e4:92:da:cf:b8:35:10:3c:51:60:e2:c7:18:5a:4f:49:fb:
9a:bb:27:f1:11:ec:47:c8:04:9c:74:bf:b9:96:e4:fe:28:b7:
2c:25:b7:74:39:51:89:52:58:47:7d:5d:48:ba:39:8f:94:61:
c2:4d:f0:92:d7:78:ff:9e:64:87:01:4e:74:21:03:36:fc:f4:
f0:4e:aa:f9:e3:e4:f5:16:41:27:e8:e8:e5:ef:bf:d7:20:b3:
fa:2f:ed:63:8f:1e:33:e7:8a:69:62:aa:7f:ad:8a:c4:3f:c0:
d6:8a:95:36:69:bb:52:b6:a9:71:81:36:6d:3e:b3:7d:33:10:
9b:04:f4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:06:24 2026 by rpki-client