
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft
File: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft (raw, json)
Hash identifier: pDYPMtjRS7JkFfaT1YjzGEh1BMRRPwBE+CioUODyDkQ=
Subject key identifier: 0D:50:02:83:24:96:6A:8C:28:67:79:BE:8D:11:96:0A:1F:63:97:03
Authority key identifier: 65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD
Certificate issuer: /CN=A91BBD7E/serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD
Certificate serial: 0264
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft
Manifest number: 0253
Signing time: Thu 23 Jul 2026 03:36:47 +0000
Manifest this update: Thu 23 Jul 2026 03:36:47 +0000
Manifest next update: Thu 30 Jul 2026 03:36:47 +0000
Files and hashes: 1: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl (hash: 4Mln/7zcS23kpJiga+TJwKzJoS3zPg4LQdtFX4bra20=)
2: 8D04AAF04F7711F18A6088C5CB833773.roa (hash: XjXcCi2v5LhOi6H+CcgSm46oBwz6y5FjSkvJ1fRJvEg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl
rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 612 (0x264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBD7E, serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD
Validity
Not Before: Jul 23 03:36:47 2026 GMT
Not After : Jul 30 03:36:47 2026 GMT
Subject: CN=6a618c4f-a7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:e0:4b:f7:55:ec:45:f5:b8:92:99:7a:29:
57:43:37:57:bb:5a:8c:41:0d:18:dd:8a:c5:4d:8a:
e3:be:51:d4:db:c6:c6:76:91:53:be:7d:e2:be:5e:
c8:fc:90:09:8b:d3:f4:d7:da:ce:5a:c9:62:bb:15:
42:dd:2b:75:e9:f6:2c:3c:bc:e9:57:2e:53:a9:8b:
25:37:81:79:d5:22:d1:9c:b0:36:d8:71:24:e6:fc:
6a:3b:c2:57:4c:09:95:bf:70:77:9c:76:ed:eb:4e:
0d:21:ed:e1:08:24:f0:96:ab:96:56:0b:fe:95:38:
0f:fe:d2:bc:aa:69:9b:ce:b5:dd:6b:3f:4a:14:83:
0b:b8:41:5a:ff:68:72:a5:36:64:b7:5e:c6:f6:9c:
05:5c:d2:91:75:56:e8:3e:9d:e2:cc:dd:fe:20:79:
d4:ff:b6:ac:08:a7:33:9d:6a:74:7a:62:ab:9d:c9:
79:13:2a:40:0e:93:6d:b8:4b:08:22:61:28:a4:62:
c2:1c:3a:cf:cb:00:93:6c:65:ae:4a:f2:99:b2:fc:
16:3f:51:62:e6:38:04:ed:74:57:38:99:c4:c0:c0:
12:62:aa:7a:cd:93:8b:46:50:d7:a3:7c:8f:cd:59:
56:6e:94:d4:79:2f:7d:48:ce:6a:19:29:a2:54:20:
4b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:50:02:83:24:96:6A:8C:28:67:79:BE:8D:11:96:0A:1F:63:97:03
X509v3 Authority Key Identifier:
keyid:65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:64:b5:be:06:fd:4f:c1:5a:41:c5:73:00:8b:c9:7c:b6:ab:
dc:03:c9:04:0b:22:ba:1f:73:18:13:68:35:7a:b6:ea:e1:20:
1e:b7:46:45:3b:4b:c6:c9:74:a3:d3:07:84:8a:c2:71:37:72:
4b:fd:00:82:45:b3:9d:ed:38:ae:6d:e7:a0:09:f8:94:32:bb:
d7:85:de:75:d5:74:d0:2a:95:64:ab:6a:86:05:4e:26:b6:e4:
ab:68:bf:0a:f8:9b:82:91:76:6d:a4:bc:2b:52:b0:bb:2e:1b:
9f:70:aa:13:8f:5d:83:cd:08:68:1b:16:e0:37:68:48:df:95:
a7:02:1f:4a:af:ea:29:cd:f0:5a:5f:96:e1:17:74:5d:10:07:
e1:e9:45:57:7d:f1:19:f9:dd:8b:2c:0a:9d:b8:c3:38:e0:ff:
b8:61:a4:23:0a:c5:4a:58:ba:46:c9:85:91:3d:24:20:57:93:
d3:b4:00:0b:4d:dd:56:b1:be:81:ae:46:9c:c6:24:73:33:6e:
bd:06:68:1e:e5:65:b2:78:c6:46:15:b0:72:46:8f:5c:4f:55:
8b:17:1e:bf:d4:e2:bb:2a:8c:20:13:86:8d:a3:dd:34:62:54:
a3:a0:04:5c:64:68:a6:64:14:39:2f:6c:d2:92:05:24:b2:54:
05:9e:fd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:43:29 2026 by rpki-client