
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
File: zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft (raw, json)
Hash identifier: NSLldtYyDybAvdI0XSaorXG6SjlPlJyOB/JNqy+YXJY=
Subject key identifier: 3A:E1:85:38:4B:F0:DC:68:A2:65:41:93:A9:1E:C4:C1:49:60:EF:48
Authority key identifier: CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71
Certificate issuer: /CN=A91AAE63/serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71
Certificate serial: 0277
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
Manifest number: 0272
Signing time: Thu 23 Jul 2026 03:10:53 +0000
Manifest this update: Thu 23 Jul 2026 03:10:53 +0000
Manifest next update: Thu 30 Jul 2026 03:10:53 +0000
Files and hashes: 1: zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl (hash: dGQ7uH+YRELUftV84CxHAc7EJOKC9DokT5ETa0u9xik=)
2: 5DCF3814CA0E11ED9251861DC4F9AE02.roa (hash: w0oQeZggvbfthkL7cxUDIxqBwGev5s767WcKvkpmAZQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl
rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:10:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 631 (0x277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE63, serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71
Validity
Not Before: Jul 23 03:10:53 2026 GMT
Not After : Jul 30 03:10:53 2026 GMT
Subject: CN=6a61863d-c036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:3b:74:ba:99:24:16:6a:bd:8f:01:2c:97:
5b:91:3c:ee:b5:b0:15:a8:c4:fc:a6:c1:58:5e:6f:
70:e3:21:25:2a:7a:1b:ea:b6:a4:53:be:9b:e4:05:
c2:99:80:e2:a9:02:c4:7b:2d:21:58:8a:a6:0b:4e:
be:7c:4f:3d:2b:79:76:e5:a0:9d:06:9c:8c:67:ce:
3f:6e:96:6d:60:7e:1a:4d:0b:1a:ea:92:da:7c:e7:
63:b6:66:4b:af:ff:40:51:46:65:69:fb:b8:ed:3c:
67:c0:21:6f:df:5f:0e:79:3a:88:38:1d:b3:d6:1f:
19:d9:f8:27:62:c5:79:56:3c:9d:d8:78:e5:a9:29:
63:00:cd:f7:df:bd:54:80:be:99:4a:4d:35:1f:13:
7c:d6:61:bc:31:5a:9b:f4:94:80:cc:90:02:16:fa:
f4:78:cb:46:12:57:43:85:2d:26:bf:21:c3:74:22:
4b:92:f2:c7:d5:be:19:95:29:09:84:8e:57:ce:31:
44:ee:8a:55:40:30:da:8f:04:ba:dd:c6:50:13:95:
58:57:75:ef:bf:64:cf:3f:35:c3:db:6e:ee:19:a3:
15:52:64:64:c5:43:ad:5e:b5:6a:33:4b:57:99:87:
a2:38:79:8e:be:56:75:4d:56:dc:d3:35:fa:f4:3e:
38:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E1:85:38:4B:F0:DC:68:A2:65:41:93:A9:1E:C4:C1:49:60:EF:48
X509v3 Authority Key Identifier:
keyid:CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:44:a3:1f:98:71:11:4a:60:67:27:78:3c:5a:ff:18:d0:c0:
e4:c5:c5:d2:0a:03:18:7a:a3:42:b8:2d:3d:33:f5:7c:af:ed:
ee:de:cc:a4:2a:50:8e:45:32:ef:1e:79:a8:06:6b:09:30:67:
f3:1d:1f:fa:1e:8f:09:32:77:76:b2:7c:fa:3d:e2:c3:4a:00:
2b:c6:f4:90:e8:93:d2:c4:75:d5:70:f1:00:ba:b3:d1:88:8f:
2b:d5:a9:86:c4:a6:95:7d:39:23:58:ff:68:8c:d0:16:6a:6b:
f2:5c:57:cd:5c:af:07:23:2b:a1:e6:14:56:ac:fc:f2:1e:bb:
6e:aa:55:c4:2f:dc:c4:6d:f4:5c:37:6a:72:95:5a:79:be:fd:
57:55:70:9b:ce:67:88:2b:37:c1:e4:22:84:4a:48:7d:17:18:
98:57:7d:ac:e8:13:1d:b0:ea:0e:ca:cf:ac:10:af:8c:14:cd:
08:a8:87:73:29:84:60:88:6e:31:67:b7:44:34:2b:ac:2c:e7:
40:6c:59:85:e4:20:dd:66:f8:f1:13:6b:84:74:45:bf:12:5d:
8e:49:26:cb:75:43:66:dd:51:4a:5e:6c:ab:44:2b:d4:b5:87:
d4:f6:8a:f1:7e:60:e1:ce:08:f7:d2:3c:ff:cc:46:7d:56:39:
65:ba:16:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:49:09 2026 by rpki-client