
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft
File: zIQ-FAouPvvguUneDtgDg5BgVB0.mft (raw, json)
Hash identifier: hS+9GrCIX0ee/JO/n0687dQevPnYELSzRDAoHbYpeko=
Subject key identifier: A8:B5:C8:97:9A:EE:27:66:86:2B:2D:CF:AC:EA:72:9E:5A:DA:5A:41
Authority key identifier: CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D
Certificate issuer: /CN=A91C1A37/serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D
Certificate serial: 3189
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft
Manifest number: 316E
Signing time: Wed 22 Jul 2026 15:30:00 +0000
Manifest this update: Wed 22 Jul 2026 15:29:59 +0000
Manifest next update: Wed 29 Jul 2026 15:29:59 +0000
Files and hashes: 1: zIQ-FAouPvvguUneDtgDg5BgVB0.crl (hash: 1PX31Pik2FEEZ46LR8iQctR05v1c8dxi2y5tSASRPi0=)
2: C3F53A0654F011E7BE4A6431C4F9AE02.roa (hash: QVg7IcJ6NSx06X4qAnqppvTi4+Hmlx/WcbnAXz16lOU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl
rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12681 (0x3189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1A37, serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D
Validity
Not Before: Jul 22 15:29:59 2026 GMT
Not After : Jul 29 15:29:59 2026 GMT
Subject: CN=6a60e1f8-769d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:f8:4b:da:ac:81:05:61:e5:f9:3e:ee:6d:
8d:41:25:a1:fd:9a:65:34:cf:ca:ec:e4:96:d6:de:
9b:f5:0a:1b:5f:06:29:71:c5:88:ae:a0:b7:f7:96:
48:0e:a5:88:8b:35:3c:ac:54:dd:6f:a5:83:75:67:
ab:4c:2e:6d:01:8d:bd:be:c2:4a:13:e7:e7:a7:ef:
e8:fd:dc:7d:62:a9:f6:68:1d:19:b5:f7:3a:61:51:
f0:ce:74:e6:1e:a4:bc:15:8c:64:52:67:7e:de:55:
34:00:64:fb:f3:e8:63:a2:a8:54:fa:1d:4e:7f:87:
b8:58:43:bb:39:3d:8f:78:75:fa:7c:ac:7e:9e:66:
f1:0b:db:d2:91:cd:f8:f2:70:3d:a5:fa:c4:07:51:
63:f9:7c:a8:30:c3:1b:77:83:b4:7d:4f:f2:1b:36:
cb:9d:76:3b:72:c5:99:99:a0:ae:a7:c5:b8:3b:2c:
cf:5f:8a:90:7c:83:ce:d2:cc:fc:c4:a1:df:42:2b:
78:17:cf:87:6e:bd:a0:8b:52:ad:b8:86:36:15:9a:
73:65:11:9f:28:a1:08:f9:6a:b4:cb:d7:dc:aa:a2:
13:ce:9f:7b:83:b2:ed:4c:ec:2e:c6:c1:8b:fb:1a:
54:f7:17:0b:a1:56:9b:d5:df:3a:ac:cc:54:25:d7:
34:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B5:C8:97:9A:EE:27:66:86:2B:2D:CF:AC:EA:72:9E:5A:DA:5A:41
X509v3 Authority Key Identifier:
keyid:CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:29:cf:aa:b4:c5:82:0a:c7:15:c4:41:c7:6c:df:a2:12:94:
3c:74:58:c3:d1:c3:aa:44:33:69:1e:21:67:03:fe:f5:f5:70:
6d:6f:96:74:9a:64:d7:cb:6c:53:7b:db:3c:d5:61:23:88:9f:
17:4d:a2:81:62:a0:09:2d:9f:8b:5c:35:d3:86:bc:26:33:7b:
8a:68:1a:02:d8:ed:5c:3c:93:53:6c:6b:68:7d:70:75:2d:40:
aa:e4:fb:67:a4:e0:ad:32:7f:fe:0a:42:d9:09:47:d5:e0:55:
32:12:6b:56:bd:16:5a:f4:7d:80:62:44:b1:c1:58:ac:3c:69:
df:01:72:ca:f1:eb:f1:01:fe:e7:fb:77:49:dc:86:f1:fd:e1:
c7:4d:2c:61:78:c8:3a:07:4d:06:00:cb:11:40:07:f2:50:e5:
c6:32:19:20:4e:e5:e8:ae:c7:e3:f3:40:d2:16:16:0d:14:7f:
04:0e:89:f6:38:f0:35:2f:fc:0a:00:5f:db:34:0a:2d:04:8e:
99:6e:1d:f7:52:6b:8a:af:34:c3:25:bc:d3:3c:a9:08:52:67:
59:9e:b6:7d:4f:48:32:a6:93:7c:cf:0e:36:b4:c2:46:8b:98:
8e:60:88:12:59:ba:17:96:f4:24:10:8f:21:b2:bb:28:6d:fe:
44:dd:8d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:54:15 2026 by rpki-client