
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
File: pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft (raw, json)
Hash identifier: SycOVm+Fc/JPOo6roXimXBUjFNS9Oz7Q27RMNErIeqI=
Subject key identifier: DC:C0:47:88:E2:91:78:5A:5A:0F:1E:9F:0C:79:16:65:BA:B7:07:13
Authority key identifier: A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF
Certificate issuer: /CN=A91A3AD9/serialNumber=A739387478C8AD9DD5D19553AB4B1DEEF1A961FF
Certificate serial: 6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
Manifest number: 66
Signing time: Thu 23 Jul 2026 10:04:31 +0000
Manifest this update: Thu 23 Jul 2026 10:04:30 +0000
Manifest next update: Thu 30 Jul 2026 10:04:30 +0000
Files and hashes: 1: pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl (hash: yLsiIfF3UFPl2hjExl28I92yU0dRxNtIZpQx93o8VkU=)
2: 8B10B888061111F18D858310203D8C67.roa (hash: qh+VyOJbj+ug4XtQyEZqsUr8GU3LhsaDi56G0+/mtA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl
rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3AD9, serialNumber=A739387478C8AD9DD5D19553AB4B1DEEF1A961FF
Validity
Not Before: Jul 23 10:04:30 2026 GMT
Not After : Jul 30 10:04:30 2026 GMT
Subject: CN=6a61e72f-d719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d7:45:30:ed:c6:d6:fc:c2:7f:61:69:75:e9:
0c:91:3b:0c:a4:75:ff:da:a1:9e:c3:49:5b:84:20:
d1:b9:cb:62:21:3d:98:71:48:1a:25:8a:87:6e:07:
1c:ae:0f:c4:f0:54:23:38:c9:35:7e:d8:c6:00:54:
a7:30:04:75:c6:72:f5:02:b5:c6:72:47:81:4f:4b:
11:c9:23:be:72:26:2f:bf:47:5a:ea:c8:37:6f:40:
10:55:b5:03:51:70:d6:3e:cd:06:4b:79:c1:fb:38:
d8:a6:dd:f5:ba:5a:8e:a3:5d:81:bc:74:f3:da:a9:
a9:15:ad:ba:0a:8c:b5:75:6a:0f:4d:aa:cf:ff:be:
26:68:80:5b:ee:14:f3:0e:84:4b:ed:3f:6e:e3:b3:
9d:15:34:f4:04:80:60:bc:e0:bd:f1:06:8e:47:cc:
f0:84:ab:ab:9c:d3:ce:4e:0c:bb:e3:6b:4e:d6:33:
f4:27:d6:2d:c0:4a:48:44:d6:e1:eb:d6:15:63:7c:
a5:6f:4c:59:4b:3b:35:ae:f0:0d:a6:4f:22:8a:1f:
34:09:15:f1:dd:a0:73:0b:c6:9d:f2:6e:ec:b6:4d:
c2:75:26:dd:8b:e9:4d:df:cf:1f:dd:c5:fe:d8:da:
78:c5:15:49:a7:29:f4:00:4c:3b:b2:06:d0:02:15:
c2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C0:47:88:E2:91:78:5A:5A:0F:1E:9F:0C:79:16:65:BA:B7:07:13
X509v3 Authority Key Identifier:
keyid:A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:e9:9e:18:25:30:67:b6:63:ce:f6:c5:75:68:ec:e5:b2:2e:
f9:ed:71:35:70:d5:a3:8b:4e:fb:df:cc:1e:71:01:0f:0c:46:
13:bf:0e:7f:1f:a9:49:97:63:28:c1:4a:92:97:6c:97:6e:3b:
13:92:07:bb:89:95:63:29:c8:ad:8d:fd:3a:e2:e6:60:4e:eb:
0e:a2:c5:32:45:a6:51:fc:3b:5b:d4:48:5f:d8:43:3d:75:c2:
9b:04:e9:86:9d:fa:5d:f1:3d:92:31:0c:61:5b:c4:8c:6d:a1:
63:c7:6e:65:57:a4:fb:54:05:23:88:9a:14:25:c7:ca:fb:08:
e3:f8:bc:46:4c:e7:57:3e:1d:6f:49:95:4b:c3:5c:35:2c:dc:
8c:76:27:3e:d5:8f:1d:0c:86:d8:63:55:5f:33:27:3e:63:e5:
b5:9f:65:64:3b:e2:02:1a:c5:8c:16:4b:5a:cd:74:86:cc:e3:
8e:4f:74:53:da:00:32:1f:9b:9a:87:6f:8b:6e:7a:f5:ec:e8:
f2:13:33:a0:95:db:bc:ec:9d:af:b8:96:5a:25:02:96:9d:d6:
d1:f9:f6:65:87:ed:dd:75:00:19:53:a1:df:7d:2c:8b:ed:34:
0e:7c:64:41:8f:a2:e5:35:ef:4b:08:2f:62:fa:11:f6:c4:ca:
68:3e:ab:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:40:57 2026 by rpki-client