
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
File: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft (raw, json)
Hash identifier: n4vY8y8awZJ/RapwZV8k2So2BBbKCMEEacUR5FOUqHk=
Subject key identifier: A4:44:8F:EA:6D:4D:AC:E3:D7:B7:63:A4:5E:F3:2D:35:94:28:09:29
Authority key identifier: 65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC
Certificate issuer: /CN=A91B005C/serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC
Certificate serial: 066B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
Manifest number: 065C
Signing time: Wed 22 Jul 2026 23:24:12 +0000
Manifest this update: Wed 22 Jul 2026 23:24:12 +0000
Manifest next update: Wed 29 Jul 2026 23:24:12 +0000
Files and hashes: 1: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl (hash: qkeRYFYLo/cwItkXs8lmMo/hxJwQLbEtkyJhvIJcG6k=)
2: FC28C1AE9BE011EC8EE90745C4F9AE02.roa (hash: N8Z5+djN5CjXBtCFKd+fBabCsOPTDCpY/BSexlhMsOA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl
rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:24:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1643 (0x66b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B005C, serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC
Validity
Not Before: Jul 22 23:24:12 2026 GMT
Not After : Jul 29 23:24:12 2026 GMT
Subject: CN=6a61511c-e73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:38:68:56:98:e4:95:9a:85:3c:10:18:00:fb:
33:18:53:a0:b9:b1:c7:56:54:9e:84:b8:9c:e7:07:
77:80:8d:6d:6a:39:26:39:2a:81:f0:15:c4:eb:2c:
2c:51:e0:62:26:c0:61:b3:35:42:5d:0f:2f:8f:cd:
86:19:33:f3:50:92:0b:ac:58:e6:39:87:34:a0:84:
9e:83:c8:cd:bd:2c:83:e7:57:9a:3b:21:90:35:80:
0c:8a:ab:33:8f:47:57:13:f8:c3:c8:97:28:46:d8:
72:1f:3f:7b:8f:16:d8:1a:9a:dc:eb:21:4b:e4:ce:
6f:7e:3d:51:6b:d6:24:83:7f:32:dd:85:92:f3:18:
e8:97:67:f5:d8:1c:94:f9:21:13:f0:55:a6:77:54:
b7:2c:a0:8c:6d:ff:1f:e5:78:4e:7d:06:6d:6b:00:
5a:bf:f8:8b:74:26:97:7e:17:46:35:9d:4d:b9:9c:
2e:63:a2:7c:05:9c:52:4e:12:26:d9:50:5a:e6:bc:
1e:90:be:14:1d:4d:10:3c:9c:20:63:da:02:06:cf:
2e:1c:e1:a7:2c:58:28:8f:04:be:ce:10:0e:26:93:
4b:fd:ed:52:d4:7c:ce:fb:4a:74:61:b2:be:f3:83:
5b:31:04:23:fe:9a:33:d4:02:81:69:66:95:36:93:
9f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:44:8F:EA:6D:4D:AC:E3:D7:B7:63:A4:5E:F3:2D:35:94:28:09:29
X509v3 Authority Key Identifier:
keyid:65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:ee:cb:92:3f:e5:9d:cf:a4:14:b2:30:6d:44:ec:10:b9:19:
45:93:19:a2:b2:8a:26:de:fb:8a:3b:e7:10:9d:de:4d:94:fc:
e2:71:13:2c:9b:5d:d4:0a:e2:75:84:dc:4a:77:c0:6b:0c:b4:
f3:99:86:de:bb:4e:22:9d:7b:ec:ea:61:5d:21:93:2d:66:57:
a3:cf:fc:2f:88:95:8c:48:cf:95:5a:17:33:00:89:53:7f:c1:
bc:c8:42:4e:0f:f4:1d:47:20:c4:06:86:28:2e:9e:1a:03:5b:
c4:29:82:84:43:84:77:35:05:e2:e7:09:b7:cc:1b:1b:1d:56:
b2:13:5b:ea:e7:aa:91:72:ef:42:72:8a:bd:d9:00:03:93:71:
d2:a5:87:55:db:2e:5b:fa:ac:b7:1c:6b:96:8f:55:80:7b:49:
b3:29:19:4b:61:5d:1c:77:46:5e:3e:18:0f:46:cd:03:1b:a8:
8d:3a:32:31:5b:6f:d3:45:4d:26:6f:9f:94:c2:ed:85:61:5b:
ed:f4:e5:87:62:a7:99:9e:8e:41:c2:fd:d6:43:fd:24:db:21:
ec:8c:a3:30:bd:fd:df:b6:1f:58:32:70:a1:cd:45:a1:87:e3:
7e:a3:a8:3e:3b:9f:0e:01:9f:cd:46:d7:df:19:ac:ec:40:9f:
a0:bb:a7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:17:42 2026 by rpki-client