
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft
File: ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft (raw, json)
Hash identifier: ZudhopR269v+lu7cZz6kzXh/kLdG9697T1429O2L5pw=
Subject key identifier: 94:DB:2D:3D:ED:9A:64:FC:86:9B:B8:8F:14:D6:7B:7A:B6:B6:B1:AD
Authority key identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B
Certificate issuer: /CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B
Certificate serial: 01D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft
Manifest number: 01BD
Signing time: Wed 13 May 2026 04:12:29 +0000
Manifest this update: Wed 13 May 2026 04:12:28 +0000
Manifest next update: Wed 20 May 2026 04:12:28 +0000
Files and hashes: 1: ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl (hash: 0be13+VGu0JcWto9lZlB8l36cxzXOhrz42YE5xYxQtY=)
2: 12331DA8098111F0B807472DC4F9AE02.roa (hash: UHApmas+hTdDUlF2H9mpnUy31ic+ROSnLqaHdClEfoo=)
3: CFB0BEF68F7111EFBF50A331C4F9AE02.roa (hash: d522JtU7ofK+iHBHN7f6Uf/7SL+MFyqmrLpi0e3t3i4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl
rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467 (0x1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4E62, serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B
Validity
Not Before: May 13 04:12:28 2026 GMT
Not After : May 20 04:12:28 2026 GMT
Subject: CN=6a03fa2c-3e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c1:93:17:bf:a0:90:f7:00:b6:92:14:6d:28:
3b:dc:e4:d2:3e:ae:96:3c:38:53:73:6f:cb:02:f2:
c4:b6:99:c1:0f:7b:ca:ea:15:1c:45:e5:f4:ad:8d:
68:2f:33:0f:a4:24:55:6d:5a:35:f9:ee:ba:a8:35:
6a:76:24:78:f3:20:69:1d:77:ae:ea:f8:66:41:b6:
b9:73:fa:f6:fe:f2:80:04:47:f1:4d:54:6f:a7:74:
ad:e7:39:67:4b:b0:0f:6e:38:75:b8:82:35:72:78:
e8:7a:65:72:31:47:ab:5b:03:f6:cd:c8:f0:f6:25:
6b:e3:3c:c9:77:ff:cb:4d:09:9e:5e:dd:21:88:8c:
e0:c3:1c:8b:ea:95:fb:53:d7:e6:b2:cb:cd:68:64:
85:4d:14:6e:10:34:12:b2:0e:80:ce:30:ca:c0:a5:
cf:e3:70:88:a3:22:64:32:cb:ce:48:d6:43:53:08:
29:14:9a:04:ec:9b:6c:12:6e:ec:48:ac:7a:3d:ef:
de:86:f2:22:89:e1:4a:a7:d3:b2:a7:65:8b:c2:e6:
2a:d0:73:3a:02:d6:e5:27:56:2f:19:42:dd:18:6f:
69:d7:ec:23:0a:0e:a2:7a:b6:65:5b:14:7c:61:81:
8a:09:3e:04:df:26:73:33:a2:3b:0f:97:32:f9:12:
86:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DB:2D:3D:ED:9A:64:FC:86:9B:B8:8F:14:D6:7B:7A:B6:B6:B1:AD
X509v3 Authority Key Identifier:
keyid:65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:01:b9:44:1f:e1:cb:36:23:27:5e:eb:1f:46:f7:98:08:31:
77:51:d1:24:3a:62:42:c2:12:11:80:ec:30:02:d9:a0:b6:64:
42:74:25:76:c8:8a:27:1b:70:ca:3b:fd:8b:9b:9d:8c:2b:f7:
7d:8d:e8:a4:56:f0:30:1b:f6:5d:32:6b:25:00:fe:93:9e:5e:
fa:7d:13:7d:f4:94:d7:55:e1:74:77:d4:31:b0:18:d6:18:bc:
a9:f0:8c:87:da:1b:8f:80:18:b1:39:09:38:c2:37:3a:58:80:
c6:aa:89:7b:21:9a:b4:6e:fb:07:68:d7:c7:b9:44:cb:67:9a:
f6:4a:c5:a9:a3:39:ea:f4:75:16:d5:bc:c2:a7:8b:ec:2e:95:
6e:3b:fe:06:07:2a:03:fe:54:2f:39:b5:f4:c8:32:07:8e:3e:
98:eb:f1:e2:b5:0d:37:1c:ff:b7:0a:86:2e:07:de:93:5c:99:
c0:14:25:53:6a:39:bc:7e:c2:fe:b3:53:3a:6a:dd:bd:16:71:
a9:b4:06:f9:b4:a1:a7:e2:0d:36:47:d6:71:37:fa:5b:50:32:
7e:6e:2c:d0:87:1b:1d:79:77:1e:ff:7c:d3:d4:42:4c:0d:78:
54:a0:f0:41:c9:43:88:c5:bc:c8:72:9f:42:bb:08:99:c8:06:
e2:21:26:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:58:42 2026 by rpki-client