
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft
File: Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft (raw, json)
Hash identifier: s2z+i6EyOtYpAkYNJwuIgMSyNe+7a2jjstNoDB+2xOo=
Subject key identifier: 60:3B:08:72:AC:BE:27:C1:DC:72:3C:D5:C2:20:7C:D4:D6:26:C9:B2
Authority key identifier: 66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B
Certificate issuer: /CN=A91B391F/serialNumber=66F6B844A9F809AE307B1B9CEE4BFD47C3C7771B
Certificate serial: 015D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft
Manifest number: 0155
Signing time: Mon 11 May 2026 05:07:28 +0000
Manifest this update: Mon 11 May 2026 05:07:27 +0000
Manifest next update: Mon 18 May 2026 05:07:27 +0000
Files and hashes: 1: Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl (hash: TrThttjcXpGqNZvn4noee7WG5r5udD25P06ohtKFWO4=)
2: 5069A4E034B311F0B93A6228C4F9AE02.roa (hash: wogzPFrO6PioOLcaFojHXvQTNXcyldVbnRyjuhu4nbo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl
rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349 (0x15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B391F, serialNumber=66F6B844A9F809AE307B1B9CEE4BFD47C3C7771B
Validity
Not Before: May 11 05:07:27 2026 GMT
Not After : May 18 05:07:27 2026 GMT
Subject: CN=6a016410-1ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0b:7d:72:b5:86:05:10:4b:71:f4:d1:a2:3e:
56:65:10:7c:e5:33:97:09:bb:17:6d:48:92:34:45:
b6:b2:2c:d0:65:be:d7:81:1f:30:0c:6e:25:7c:f1:
1f:2b:95:61:72:af:fe:18:a2:ae:66:fd:95:4a:3e:
4e:f0:f3:e7:eb:0b:7b:ea:d1:5a:99:96:52:df:db:
b7:45:f1:7a:36:9e:63:e4:9b:81:59:1d:cb:11:26:
a3:4e:f2:9e:b5:d7:e9:33:f4:de:5f:8f:67:62:47:
16:ac:41:c0:8d:9f:07:ca:d0:33:c8:aa:db:4f:55:
85:5a:e3:18:a3:19:b2:03:03:f5:16:5b:9d:ad:91:
4a:aa:29:ba:ff:69:4e:33:bd:aa:25:88:2e:bb:a9:
23:79:b8:cf:e2:d5:6d:b7:49:c8:51:a1:b2:21:3d:
32:25:52:72:60:fb:11:75:15:61:85:65:2e:78:7b:
de:2c:10:42:59:ed:02:bf:fa:91:78:9a:79:c8:ba:
5b:ee:7d:a7:47:2a:b1:a7:c5:b2:b8:e7:d4:ac:97:
a2:e9:cc:28:97:d9:42:21:f4:bb:34:8a:39:91:a4:
b6:9d:1a:de:10:e6:20:45:d7:10:0f:48:e5:9d:09:
4a:5c:90:90:e2:0a:71:0c:40:90:09:b7:25:95:4b:
d0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3B:08:72:AC:BE:27:C1:DC:72:3C:D5:C2:20:7C:D4:D6:26:C9:B2
X509v3 Authority Key Identifier:
keyid:66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:1b:fa:6e:54:0c:ab:73:f7:8f:a3:b2:18:d0:f2:f3:96:b5:
71:b0:83:9a:03:9a:57:b8:bc:ea:0e:68:29:8b:62:c5:ca:8f:
18:ab:77:b2:bd:3a:23:cb:21:e6:99:0f:38:d5:4a:3d:98:85:
80:69:e9:ff:ab:ff:20:62:1d:0a:29:f6:bc:c4:bd:09:35:df:
12:3d:c0:04:6c:16:99:6d:94:2e:73:d0:cf:49:6e:d7:43:31:
b6:c7:37:61:e3:c6:0c:7e:61:f0:72:50:bf:68:76:1b:53:87:
5f:b0:1b:44:25:52:da:e6:14:fb:a4:a2:96:e8:3e:b0:c7:c3:
c4:19:9f:0f:c6:a6:96:40:9d:24:0e:e7:3a:75:68:ba:f9:bb:
af:23:15:3f:25:31:f5:5d:b5:f6:40:4a:38:2e:b4:da:c6:03:
85:f5:97:35:6a:df:87:90:a2:fe:d4:8e:cb:8f:2a:ec:56:21:
77:ea:21:8e:71:da:8b:84:a1:a5:eb:cf:19:e6:27:7a:68:6c:
50:c4:70:34:b3:00:c9:a0:3b:ac:aa:10:13:56:41:aa:89:50:
50:74:89:5a:8e:c1:b2:a3:0b:e0:e3:df:cb:49:33:5a:64:a4:
d5:48:38:98:54:d5:20:fe:18:48:8e:13:be:f4:00:1e:f0:05:
cd:1f:36:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:15:02 2026 by rpki-client