
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
File: zF1c4NwYIQkMvHU417txI3GQguc.mft (raw, json)
Hash identifier: oclEI8IVqh5SE3Ki0hsJlsY3M3L6w+yLxuWSr2W5KYY=
Subject key identifier: FE:0A:38:B0:B6:BA:89:58:83:1B:C3:FF:75:14:4B:A1:AA:0A:52:A4
Authority key identifier: CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7
Certificate issuer: /CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
Certificate serial: 0909
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
Manifest number: 08F5
Signing time: Wed 22 Jul 2026 20:46:59 +0000
Manifest this update: Wed 22 Jul 2026 20:46:58 +0000
Manifest next update: Wed 29 Jul 2026 20:46:58 +0000
Files and hashes: 1: zF1c4NwYIQkMvHU417txI3GQguc.crl (hash: lPaMCDVvBwjcU72XDolagWNtgN+6MYtZBh4k/SB0PGE=)
2: 3A4918D41DED11F18280100E163D8C67.roa (hash: Juhjiq7zpIGJ2ca6uyWvgKrk4pkgUf8b9Px9rrY5jmY=)
3: A3FFFAF41DED11F18835BD3E163D8C67.roa (hash: 5k8cO87Qj/gNgbt2kI9Eh+2F5/UczXoTj75VoZrq4q4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl
rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:46:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2313 (0x909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C91A6, serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
Validity
Not Before: Jul 22 20:46:58 2026 GMT
Not After : Jul 29 20:46:58 2026 GMT
Subject: CN=6a612c43-0836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d4:46:a6:34:35:93:cf:f6:a5:6d:f7:e7:e7:
fa:ee:51:14:34:20:22:04:e1:ff:76:23:a1:27:e6:
52:77:e0:24:24:10:cd:b1:98:71:47:6a:d9:6f:b8:
73:d1:76:a7:10:0e:c9:0b:60:25:8d:c4:35:87:f7:
94:a9:ec:c5:3f:7f:a1:3b:a4:39:84:18:90:e6:42:
53:07:12:f9:fe:3c:99:80:fe:ce:08:11:07:71:31:
9b:44:39:43:18:64:a9:8d:b0:e6:2b:1a:7b:64:57:
1e:fc:23:d4:c2:fb:da:b8:66:94:40:a8:43:80:3b:
18:fd:c4:e9:9d:6b:5e:b4:91:0e:47:2e:a2:f4:10:
b5:cd:68:e6:06:f1:c2:a1:4e:9e:81:ec:37:63:2a:
8a:8a:24:5b:f0:4b:61:dd:0a:91:cc:81:1c:7d:e7:
1b:38:68:f7:6e:84:28:85:e0:f7:16:57:f3:cc:ef:
ff:34:bf:6f:20:dc:8b:7d:88:1a:f9:f0:4a:90:05:
b7:55:dd:71:dd:46:22:7e:db:51:99:f5:b8:09:56:
a3:fc:f0:74:7f:5b:12:2e:c6:3c:95:77:ee:1a:8e:
9c:57:07:75:71:36:9c:1c:ef:cc:ec:38:48:f3:d7:
67:30:d4:48:e5:45:c9:11:db:be:15:e8:37:b4:d4:
c5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0A:38:B0:B6:BA:89:58:83:1B:C3:FF:75:14:4B:A1:AA:0A:52:A4
X509v3 Authority Key Identifier:
keyid:CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:9c:3d:21:5b:28:50:c0:e4:4c:58:15:17:cb:c5:40:ac:0f:
45:b3:ea:a7:f3:e7:b4:90:fb:08:bf:1f:72:ee:cd:8e:1a:9d:
03:f8:51:82:ab:30:10:37:ca:e4:53:ca:79:29:1f:81:d1:e9:
fd:34:19:3c:7e:b6:43:80:9c:24:40:55:a2:c5:d2:93:03:77:
61:7c:3d:24:30:4d:b4:45:3d:e2:14:9d:50:58:09:1d:58:1f:
d6:78:f0:52:a2:04:4e:c2:e6:c4:14:98:2f:2f:3f:8f:08:dd:
5a:0c:ea:6a:ad:4f:34:e5:cf:0f:e7:2b:6c:19:54:9d:6a:5c:
d4:6f:3d:9a:8e:15:fd:ba:c4:cc:88:cd:30:32:0c:30:65:59:
eb:d5:a5:32:9a:7a:62:e0:db:d5:68:55:0d:f1:73:52:27:cb:
2d:73:7c:06:43:06:35:22:01:89:84:5c:f7:d1:6b:90:11:cc:
1d:57:cc:b4:32:ee:a7:3d:3c:c4:5b:12:03:c2:43:3c:da:dd:
b3:9d:a8:a7:fb:f8:84:44:fa:4a:63:75:99:f8:24:34:ff:cc:
52:06:b5:3d:74:b7:f4:7c:38:ce:22:32:e4:9e:40:27:5e:7f:
64:d0:90:60:c8:31:f3:8b:9a:9f:84:11:90:7f:85:99:fb:f1:
22:5d:eb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:28:34 2026 by rpki-client