
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft
File: zxWtEC7t37zKaFhab1w4F_6KGNU.mft (raw, json)
Hash identifier: eoW9ffzd7laY48X/T/Ncbk77rfx6YWfz/0kD3BQ6mbc=
Subject key identifier: 05:A6:CF:9D:2A:04:E3:34:F6:C2:FF:91:B0:C9:97:1F:9F:58:80:93
Authority key identifier: CF:15:AD:10:2E:ED:DF:BC:CA:68:58:5A:6F:5C:38:17:FE:8A:18:D5
Certificate issuer: /CN=A91B8D56/serialNumber=CF15AD102EEDDFBCCA68585A6F5C3817FE8A18D5
Certificate serial: 0515
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft
Manifest number: 050A
Signing time: Thu 23 Jul 2026 00:30:50 +0000
Manifest this update: Thu 23 Jul 2026 00:30:50 +0000
Manifest next update: Thu 30 Jul 2026 00:30:50 +0000
Files and hashes: 1: zxWtEC7t37zKaFhab1w4F_6KGNU.crl (hash: OT22BGhqQCOevp13PQZKLVfqI/wcVbkgMxAwgbEGhN8=)
2: 70638510630E11ECB30DB557C4F9AE02.roa (hash: nDKlIV5XCKKFEVpkwUv/eg1d2ekpQE5TiySuHisuD2Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.crl
rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1301 (0x515)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8D56, serialNumber=CF15AD102EEDDFBCCA68585A6F5C3817FE8A18D5
Validity
Not Before: Jul 23 00:30:50 2026 GMT
Not After : Jul 30 00:30:50 2026 GMT
Subject: CN=6a6160ba-ecd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a4:7c:16:8f:5c:18:b6:14:0f:ce:53:f8:2f:
d1:28:0c:3e:80:58:34:e3:ff:5f:6f:1a:b4:34:83:
d1:29:ee:9e:bd:12:8b:28:0e:5a:6f:48:0f:28:ac:
17:0f:13:87:4c:94:b5:42:82:f7:71:0b:77:64:91:
12:9f:e7:63:e2:29:11:a5:ca:eb:45:78:fa:f3:8e:
bf:15:45:54:51:74:5b:1e:30:17:19:f7:8d:a9:07:
69:c3:62:7f:1b:a8:ae:4b:06:bc:53:86:f5:9c:3c:
de:14:ac:18:91:d9:a3:d9:27:80:0b:aa:b9:9a:d0:
37:17:e6:78:58:50:b9:d6:71:ad:55:54:f5:d5:1a:
61:b1:7b:7e:59:92:49:4e:d2:5c:9f:48:60:3f:41:
92:68:98:70:4a:7d:72:e6:56:5d:3e:f9:f8:ea:b9:
e2:1f:d3:41:cf:af:1c:0e:26:41:fc:c5:22:ee:31:
5b:a8:f5:59:c7:4b:1f:a3:cc:54:ae:1f:e0:11:4d:
0d:eb:60:a1:9f:89:8a:13:ce:28:c0:3b:8a:84:37:
ae:eb:50:87:d0:8f:cf:ad:6b:51:86:93:73:60:82:
bc:3a:ac:27:03:82:0d:93:2f:38:7c:46:d5:fe:98:
4a:e9:f9:a2:9f:88:aa:fe:d8:8f:f7:d4:aa:ee:8c:
d6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A6:CF:9D:2A:04:E3:34:F6:C2:FF:91:B0:C9:97:1F:9F:58:80:93
X509v3 Authority Key Identifier:
keyid:CF:15:AD:10:2E:ED:DF:BC:CA:68:58:5A:6F:5C:38:17:FE:8A:18:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:47:73:8d:16:1e:ff:e1:bd:cf:23:23:aa:a6:f6:33:90:f0:
30:b0:52:45:7a:93:05:3a:80:ae:b9:a6:cb:82:20:ce:74:c3:
f1:a9:8c:6f:c8:ea:50:06:71:37:04:64:cf:df:1c:73:d6:69:
38:b1:4c:09:1f:10:7e:bd:3b:c4:a1:9f:c2:73:a6:52:42:e5:
c8:1d:eb:da:1b:9d:79:1b:7f:5d:2c:49:be:e7:b1:d7:62:9a:
c7:e5:53:30:e7:c0:9e:58:b0:ce:56:b8:6b:c9:7a:a6:e3:45:
08:b5:17:7c:a1:61:f9:32:3e:a1:87:bb:8f:c8:1b:44:8c:b3:
79:b8:61:5b:ca:90:8d:73:b7:99:6e:bb:b0:f7:b2:0e:47:45:
51:49:48:a2:b6:96:f3:5d:b7:9c:05:d2:59:4e:f5:bd:00:58:
dd:c6:21:35:b9:cd:4f:c2:b2:3c:f9:40:ac:8e:bc:d6:c5:dc:
90:97:22:ec:9e:75:ea:ca:3d:e5:47:fa:9f:89:93:65:6d:8d:
c9:08:5c:bd:df:14:c1:c3:1a:d2:41:b9:44:6d:ac:ce:72:a7:
a8:f7:40:6c:b6:5c:7f:0f:40:ea:ee:80:4b:2d:63:80:9d:46:
3e:38:e3:57:58:d0:83:15:7f:80:da:e1:e9:89:3f:81:90:ea:
d3:21:8b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:59:35 2026 by rpki-client