
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
File: ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft (raw, json)
Hash identifier: a/PFIJiV7uar4u9OBPhvysw8hG8LVPdTwOt+AHBL6Ys=
Subject key identifier: 20:35:71:56:62:3E:BD:FC:10:42:45:61:40:78:6A:40:88:76:06:D2
Authority key identifier: 65:53:C3:C2:18:0B:97:E2:EB:37:CB:71:F6:A1:CE:AA:7B:95:CA:47
Certificate issuer: /CN=A91A8219/serialNumber=6553C3C2180B97E2EB37CB71F6A1CEAA7B95CA47
Certificate serial: 17C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
Manifest number: 17B6
Signing time: Tue 12 May 2026 16:34:59 +0000
Manifest this update: Tue 12 May 2026 16:34:58 +0000
Manifest next update: Tue 19 May 2026 16:34:58 +0000
Files and hashes: 1: ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl (hash: RdBsNMawPvP1S9/ekOgx2B55XYzsqaIxEZHcDDq3xbc=)
2: 314E917C651E11E8A8903D42C4F9AE02.roa (hash: 9ej0uJb9isKtTSetZZYMiqBTjxBpRK1yCazawhZTpz4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl
rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:34:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6085 (0x17c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8219, serialNumber=6553C3C2180B97E2EB37CB71F6A1CEAA7B95CA47
Validity
Not Before: May 12 16:34:58 2026 GMT
Not After : May 19 16:34:58 2026 GMT
Subject: CN=6a0356b3-9e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ba:33:1e:ba:41:2a:e0:89:ff:3d:0e:16:44:
11:e0:b6:93:d5:31:ff:39:53:97:5c:45:d8:05:82:
b6:7f:ba:6c:28:ac:87:8e:8d:b1:58:41:cf:a8:b7:
26:f5:cb:5e:ad:fe:de:95:8f:a3:4b:ba:42:27:d4:
1e:72:33:0d:e2:96:5f:5e:73:5c:2f:ac:a6:da:89:
17:82:a7:90:bb:00:97:c7:d2:6f:2a:04:47:fd:c2:
c5:c4:7a:79:b8:c0:92:61:57:dc:63:07:bf:ff:98:
3c:da:a7:54:19:ac:62:8d:22:60:c5:1e:ee:9b:34:
30:12:1c:13:51:f9:9e:b2:1a:4d:b0:89:db:a9:1b:
c2:7c:6e:98:b0:57:0e:b8:2d:5c:98:ac:53:65:6d:
e7:97:15:7c:f9:ad:8d:9c:af:a4:bf:f4:d9:f4:a8:
33:06:47:58:82:4e:9e:54:61:38:00:84:9f:22:d8:
01:54:5f:10:9c:97:69:49:40:c0:18:36:8e:35:36:
dd:f9:da:c1:62:b2:10:97:1d:42:7a:10:63:fa:ff:
9b:a9:0e:8b:21:1d:c8:34:5f:07:1c:be:d5:cf:04:
0f:17:60:65:15:a8:7a:64:39:ab:d8:c7:22:fd:1c:
d1:9b:00:5d:34:6b:95:54:31:49:66:c9:96:1f:16:
62:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:35:71:56:62:3E:BD:FC:10:42:45:61:40:78:6A:40:88:76:06:D2
X509v3 Authority Key Identifier:
keyid:65:53:C3:C2:18:0B:97:E2:EB:37:CB:71:F6:A1:CE:AA:7B:95:CA:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:07:bf:63:bd:5b:80:17:fc:d2:1a:fa:74:47:fc:d2:f7:22:
90:97:b7:0a:76:8d:25:9c:b3:e8:06:83:a4:5b:2a:bb:4a:da:
ce:b6:44:61:57:71:a7:28:0c:cc:4a:fe:32:a4:28:ba:50:1f:
f4:05:09:8d:20:29:8d:75:6d:4e:b8:53:09:2a:ab:9d:02:f8:
c4:56:f9:dd:b3:52:ca:3e:1e:48:c1:46:77:b1:38:07:65:4d:
74:1a:49:09:f7:61:c9:ff:3d:4e:32:cb:d6:73:00:88:4b:30:
ea:f6:c1:00:b7:f0:f9:bc:8e:2a:3d:f9:d2:82:c5:98:51:98:
56:6f:93:fa:a1:84:f8:96:ea:05:3f:ed:54:25:b2:59:0e:f3:
80:b5:a2:b1:f8:3e:f2:7c:30:34:4e:1c:51:65:d7:7d:65:45:
8f:21:c2:c0:32:46:72:14:cf:a8:7d:9c:9d:86:07:c1:1b:0f:
23:d1:9b:aa:4f:cb:5d:fe:fe:90:43:97:0e:2f:ef:4b:fb:d8:
9f:50:a9:7a:4f:47:1c:6d:cc:0e:64:76:5d:c9:80:f2:6d:bc:
1d:88:1c:bd:13:5d:45:5c:52:8c:52:26:af:77:22:44:96:e7:
ce:a3:56:8c:3e:51:5c:8d:03:25:cd:1e:8a:f2:58:35:0f:33:
61:04:74:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:36:45 2026 by rpki-client