
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
File: 0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft (raw, json)
Hash identifier: onDETgo3M6XieNKxr+8ce2AtNHirCV6UtLcFokKfBa4=
Subject key identifier: 6E:94:3E:03:FC:07:48:8C:ED:E3:E4:E3:F2:9C:D8:0E:28:EB:BF:83
Authority key identifier: D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24
Certificate issuer: /CN=A91C430B/serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24
Certificate serial: A4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
Manifest number: 9B
Signing time: Thu 23 Jul 2026 09:17:41 +0000
Manifest this update: Thu 23 Jul 2026 09:17:40 +0000
Manifest next update: Thu 30 Jul 2026 09:17:40 +0000
Files and hashes: 1: 0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl (hash: TSKAJtv8SHWkQIxtJiVghb9jUKIxbLF5ITZTCjcyEi8=)
2: 9484A13A622E11F1A36ED3DF7447A888.roa (hash: Kqin5t6HoE32APIOaQFq882jyRgeaOI3EzjEp6mHGyQ=)
3: 8988B2165DB111F1AB23B9ACA3833773.roa (hash: ad65XTYzHUp3cWmiBJTHs+rg9KKlQlfXiUUJuwHLk8k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl
rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C430B, serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24
Validity
Not Before: Jul 23 09:17:40 2026 GMT
Not After : Jul 30 09:17:40 2026 GMT
Subject: CN=6a61dc35-567a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cd:72:eb:13:40:26:41:03:a8:79:f4:0a:11:
8d:2f:ee:3a:6a:01:6e:62:d1:a1:2c:7b:d3:99:06:
72:53:68:4f:09:45:61:d1:c4:88:12:0b:57:29:38:
e5:db:a0:69:9e:28:58:94:7f:eb:d0:e8:7c:20:db:
f0:a3:f0:4d:13:dc:64:93:1e:3a:4f:a8:0d:88:2c:
ae:2e:6e:e8:6e:1d:51:77:6c:ef:a2:02:9c:45:31:
f0:3e:a3:ab:b5:22:5f:98:68:e3:b8:d3:0e:15:d5:
40:11:9c:29:21:cf:a0:f4:f2:2b:b2:c0:bf:97:ae:
90:43:c8:2a:27:9b:ea:16:1e:e5:72:67:4b:35:c6:
e2:a6:9e:2e:96:3e:5c:d7:ea:1b:4a:87:46:ec:62:
50:1e:c8:f5:ab:12:74:42:be:f9:ef:6c:d2:9e:f8:
bd:9c:0d:c4:5f:b1:75:7f:a4:7d:bd:59:d5:de:54:
0a:01:6f:4a:ad:67:bd:37:3d:55:49:ac:d9:9e:25:
16:08:36:5c:4e:91:b9:34:de:a0:55:9e:9f:db:6b:
2d:49:49:88:56:64:72:0d:a4:89:6d:81:5d:ac:2a:
cd:6b:66:32:f5:92:27:4c:6a:0e:a0:c1:4d:d9:84:
39:32:5e:0e:72:76:95:09:af:4c:b7:89:4e:1d:44:
e2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:94:3E:03:FC:07:48:8C:ED:E3:E4:E3:F2:9C:D8:0E:28:EB:BF:83
X509v3 Authority Key Identifier:
keyid:D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:7a:e4:42:3f:5f:e9:a4:a6:92:12:87:cf:8d:f5:90:74:ef:
da:0e:1c:c6:4c:5e:f6:e0:3a:70:de:ea:25:17:2f:06:9f:93:
e1:78:09:31:6d:a0:c0:44:d9:63:fc:43:74:8e:3c:e4:5b:bb:
5d:b7:c4:6d:29:63:d7:2c:6c:b1:af:eb:97:d2:60:b5:96:5e:
ce:1a:1d:a4:5b:68:ca:75:33:21:b5:22:78:30:5f:53:cb:1f:
e1:e1:5b:90:1e:82:78:6d:88:26:34:58:40:6c:c6:0a:17:0b:
3e:3d:74:ac:37:0f:d5:10:1a:8e:97:48:d2:7e:f2:bb:0f:2e:
0e:a9:36:13:75:57:51:22:d8:fe:86:35:92:c5:96:99:e6:a1:
5e:93:93:5c:ea:77:69:3c:e3:a4:4b:b0:a5:7f:e9:c3:d6:6c:
92:e3:6d:93:ae:61:cc:77:71:9b:29:8c:4f:b8:44:53:f6:47:
5e:4a:be:ad:8f:46:ce:56:18:ad:dc:a4:51:2c:48:58:15:48:
be:ee:9d:b4:3d:f1:f8:f4:93:39:e4:4b:bf:be:bc:62:5c:54:
e5:f2:c2:d5:ed:11:36:b5:4a:8c:6d:f1:3d:ab:5d:43:b2:33:
a3:08:c0:83:64:ed:27:14:27:6f:6e:cb:f1:78:9f:22:2d:11:
20:7d:db:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:02:31 2026 by rpki-client