
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
File: zoytNWIakBLECzY3U3ykDj0H6M8.mft (raw, json)
Hash identifier: GSdQyg5okwZ4a4/t9RM7KWnstqfGHWc58sZEKFR6XN8=
Subject key identifier: 76:DE:1D:17:5D:6F:3F:89:FD:88:4E:E9:3E:B0:3C:90:01:90:01:DB
Authority key identifier: CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF
Certificate issuer: /CN=A91B9F08/serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF
Certificate serial: 0F07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
Manifest number: 0EF5
Signing time: Tue 12 May 2026 17:39:35 +0000
Manifest this update: Tue 12 May 2026 17:39:35 +0000
Manifest next update: Tue 19 May 2026 17:39:35 +0000
Files and hashes: 1: zoytNWIakBLECzY3U3ykDj0H6M8.crl (hash: wU72weeyXoyNUfWSrgFqQarPJT4cEkHFulOXhVoBYoU=)
2: 8ADFF772924011ED867BE311C4F9AE02.roa (hash: M/ubLoXQZAiI+oYKeKkVk90gdgW88i4ytnwosT2YUMI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl
rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3847 (0xf07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9F08, serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF
Validity
Not Before: May 12 17:39:35 2026 GMT
Not After : May 19 17:39:35 2026 GMT
Subject: CN=6a0365d7-6a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6f:2b:f9:bb:df:b8:db:9c:44:19:6c:32:a1:
08:d6:24:fa:24:12:b9:c9:de:ed:bd:d7:de:19:b5:
16:4d:61:68:81:09:fd:fe:ac:2b:1d:26:bf:e0:d2:
1f:16:39:6a:3b:09:7f:d4:be:17:b2:63:ad:29:21:
c8:47:86:85:8d:d4:91:6e:de:ca:57:e8:0b:28:03:
54:35:6d:4e:fb:39:36:38:c0:eb:d6:a2:d5:fe:b0:
5c:3e:f1:26:2b:26:98:d9:53:7b:66:1d:e5:05:d8:
0f:20:51:17:aa:b9:8d:4f:7f:88:48:a4:c5:c9:36:
05:a3:67:40:72:e4:fc:da:e1:a2:c3:3d:32:0e:09:
1c:46:52:0f:d5:02:75:aa:22:ce:85:28:f2:c8:7f:
07:8f:7b:3c:c2:ab:13:e7:5d:45:a7:4f:4e:db:e1:
46:db:f0:a1:49:6a:86:d8:21:7a:94:2c:85:df:04:
28:88:49:aa:55:aa:b4:be:2d:8e:57:39:42:71:32:
49:3f:86:13:34:b0:c8:d6:30:c2:81:72:ba:96:ef:
65:01:89:51:0b:80:fc:15:60:94:49:fb:27:bc:95:
e7:a5:ef:5b:bd:33:60:44:b6:ec:7f:bd:f6:a2:0e:
90:11:26:a5:7c:80:f1:1d:9b:0d:3b:ae:2a:be:8b:
f5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DE:1D:17:5D:6F:3F:89:FD:88:4E:E9:3E:B0:3C:90:01:90:01:DB
X509v3 Authority Key Identifier:
keyid:CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ee:d2:dd:d9:72:bd:76:d3:e1:1d:00:2d:f4:5c:29:98:76:
9c:97:14:db:f3:60:24:7c:73:21:66:db:c9:28:71:8e:60:67:
d0:f1:3b:01:ea:8e:16:a7:e7:7c:c1:9d:29:b7:16:00:f3:d2:
62:7a:14:c5:18:70:85:24:39:8d:63:d7:e9:6f:23:1d:ef:a7:
b9:93:f2:91:15:47:95:3d:ef:ce:fd:50:89:60:80:a8:1a:3d:
9d:5d:c1:d9:ac:d8:40:a8:93:0e:4e:75:2e:f3:1a:89:77:26:
ec:28:28:99:29:ae:80:93:c5:33:59:43:a9:74:75:d6:32:5b:
05:ef:d4:39:f7:6d:0e:26:aa:26:b1:00:27:c1:64:e8:d3:4c:
b8:45:97:3f:0b:47:bf:c1:94:4d:f3:35:ae:b5:df:48:be:65:
d6:fd:f7:dc:97:24:e8:ff:3d:f9:1a:2c:3f:c5:79:c0:d6:35:
62:14:12:c5:af:75:64:6b:c6:8e:e8:77:05:c5:8f:54:5f:81:
4e:34:74:02:1c:7f:3d:ca:b1:c7:b9:8b:45:59:e2:8d:1c:f5:
27:7b:e2:0e:4e:1f:5d:aa:3f:3b:de:ad:2a:82:e7:e9:e4:81:
63:fa:8b:e4:4a:bf:a6:67:36:ed:97:f9:7d:77:93:9c:cc:92:
29:69:57:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:29:59 2026 by rpki-client