
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
File: ZJQ7HSvi-T3WQOAk65TY043OaoM.mft (raw, json)
Hash identifier: +B2cwp12hD3ZESxSihkU/6SnLuNcQHcFO3rVhgnfsP4=
Subject key identifier: 29:DC:01:AB:BE:63:AD:6A:D7:4A:E3:56:5E:B6:03:FE:82:14:DE:63
Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83
Certificate issuer: /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
Certificate serial: 01D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
Manifest number: 01BF
Signing time: Mon 11 May 2026 04:00:16 +0000
Manifest this update: Mon 11 May 2026 04:00:15 +0000
Manifest next update: Mon 18 May 2026 04:00:15 +0000
Files and hashes: 1: ZJQ7HSvi-T3WQOAk65TY043OaoM.crl (hash: JBToHPxRNXkgzNepyAvr5huSulHD0m2s0dhkT3V7/NI=)
2: 0D5F2416B5B811EEA8ACF557C4F9AE02.roa (hash: MiKf/hrtY4nGNwWt8u8etuZ0Gw3xF9JGpGA4BCKSaOs=)
3: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (hash: oegRAcugKLatUbTXSLvKEbrye0Tdi4sy7aoKF/I5tTI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl
rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470 (0x1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8F34, serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
Validity
Not Before: May 11 04:00:15 2026 GMT
Not After : May 18 04:00:15 2026 GMT
Subject: CN=6a01544f-2bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:54:80:e9:b2:b9:c5:df:6c:31:28:02:9a:de:
1d:1b:ee:cb:ff:09:ef:5d:80:e3:eb:28:31:28:cb:
24:71:ba:00:64:7a:ce:8c:ab:82:f5:9e:05:ea:09:
fe:39:d7:7e:51:87:81:c2:1c:e0:f9:f0:4a:58:92:
cd:13:e7:86:62:fe:df:8e:64:69:88:9f:0f:38:f8:
b6:95:73:05:b2:35:68:64:94:da:e6:0a:1f:07:86:
30:15:4e:8b:38:c4:97:36:bc:39:dc:7a:03:96:af:
41:dc:fa:16:6e:c6:c9:35:be:2b:c8:67:a5:26:3c:
38:f6:96:b8:18:86:9a:9c:0e:6e:c8:83:83:75:03:
ee:31:3e:4e:6c:e0:ba:49:24:b9:04:bf:84:d1:57:
ad:94:e5:80:2c:9b:1c:6f:76:7c:6f:fb:a9:64:ad:
3c:a8:28:20:fc:24:3c:d1:43:0d:72:1c:c3:51:17:
4d:8c:69:98:b1:70:95:d2:d6:41:96:23:75:31:75:
51:c5:67:25:fa:3e:88:26:53:69:be:7a:e9:c2:67:
b8:b1:56:d5:12:0e:b5:da:ec:8e:a3:be:7a:e5:80:
07:0d:3a:dc:e1:e4:4f:c9:24:fc:32:be:aa:03:e7:
93:97:40:b0:1d:1f:e1:4e:31:05:e8:08:d6:d3:f2:
73:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DC:01:AB:BE:63:AD:6A:D7:4A:E3:56:5E:B6:03:FE:82:14:DE:63
X509v3 Authority Key Identifier:
keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
db:4b:b9:2f:76:ae:44:94:93:47:53:34:f2:64:87:4e:c4:55:
7a:86:75:44:96:aa:77:67:18:88:03:92:2b:2f:e0:38:e7:c4:
36:77:2e:00:18:eb:41:d0:0c:bf:62:d0:37:e0:15:bb:cb:be:
0e:61:84:f3:1b:ea:c4:c9:26:5e:e7:e8:8e:53:80:78:66:81:
8c:51:49:ba:09:1f:9a:c8:93:7a:7a:0f:93:68:a1:53:d1:ba:
94:c0:c6:6f:0f:5f:ca:cb:ae:51:6b:6d:86:26:23:eb:58:3b:
a9:b7:3f:4e:fd:2d:55:79:23:25:9b:2a:27:f2:df:77:09:ad:
65:14:38:ac:ed:72:9a:97:d1:5a:c1:83:95:fa:26:ec:72:cc:
1e:bc:5d:27:8f:9e:f4:c4:20:da:ae:43:69:b1:09:d4:51:f3:
e9:65:5b:6f:54:23:44:55:9e:d2:70:99:9d:5d:1d:82:00:a8:
fd:b0:03:bb:eb:b0:e4:bf:f1:d9:d2:a7:fd:ca:34:ed:e3:30:
bd:af:74:e0:d3:34:b0:19:9b:68:c4:0c:ee:25:d6:e9:b6:21:
65:ca:8a:13:05:73:7b:9c:49:20:04:5f:b5:f0:cb:c1:6c:7d:
b3:64:b8:15:25:6b:cb:9d:ad:4b:10:51:78:6d:6b:9a:1c:cf:
5f:83:93:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:17:33 2026 by rpki-client