
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
File: rzCJXc48ZcI77FTLCJhY66Fhic4.mft (raw, json)
Hash identifier: PkhZbpsLMMhVU2wIfqWqSME1pE5c1pS6IPBNcFLq0AA=
Subject key identifier: 6C:D7:76:6F:29:2A:34:80:55:7B:DA:A0:84:F2:D2:28:A0:89:E6:86
Authority key identifier: AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE
Certificate issuer: /CN=A91CA294/serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE
Certificate serial: A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
Manifest number: 9D
Signing time: Thu 23 Jul 2026 09:13:47 +0000
Manifest this update: Thu 23 Jul 2026 09:13:46 +0000
Manifest next update: Thu 30 Jul 2026 09:13:46 +0000
Files and hashes: 1: rzCJXc48ZcI77FTLCJhY66Fhic4.crl (hash: pqdcnYj0m+6i/HGz+B+chwzzTsH/u/9rq/rPBWoKPC0=)
2: 7CCBF066A2F811F09235B919C4F9AE02.roa (hash: L2xc97rBOEo7wGTXyTU4krqEAbLPgvd1QpBdIvhLYmA=)
3: 44D1A4E69DAB11F0A7401064C4F9AE02.roa (hash: /dWw78lmDvPsrlgqtDvPWypN8cQFZwkLxuNHhkdxFFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl
rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA294, serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE
Validity
Not Before: Jul 23 09:13:46 2026 GMT
Not After : Jul 30 09:13:46 2026 GMT
Subject: CN=6a61db4b-dd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:99:a4:af:36:c2:e2:f5:65:f5:2f:25:44:ee:
52:e4:45:5a:99:b3:75:0d:b2:f8:1c:d2:fa:95:6a:
80:8b:58:4e:ef:a6:13:36:33:10:04:9c:65:42:17:
55:f7:c8:c9:38:d0:b5:1c:88:49:12:c1:79:f6:b5:
79:3a:1e:1f:7a:75:4b:c5:8f:a4:b8:0b:46:13:f0:
25:81:e6:eb:c6:d1:b4:a3:d0:84:5c:76:40:25:51:
05:ae:ec:32:8b:dc:7d:e1:04:7d:52:d6:d9:96:b3:
4d:5f:81:1a:3e:b4:e0:a9:e7:ac:c6:88:c5:a9:61:
61:a1:72:2b:57:7b:b3:2e:a7:c5:67:ef:5a:f7:5b:
64:f2:af:c6:95:b7:1b:a8:11:b8:15:e8:5b:f2:9c:
6f:cf:55:df:e1:65:dd:55:a0:c7:e3:9d:75:65:24:
0b:4e:ad:f5:59:08:2c:e2:b6:66:1f:d9:04:92:52:
dc:00:53:62:31:0a:9f:09:3b:58:1d:8a:f0:10:87:
9f:96:b3:ae:01:24:1b:43:87:bb:43:19:83:8c:9d:
1c:a4:00:41:9c:b1:c1:f9:1f:52:73:68:ec:88:66:
0d:2c:1e:e3:15:01:50:1e:7d:16:a3:d8:e9:23:e4:
e4:d0:22:47:93:e5:cd:67:4d:b5:fb:b4:72:57:9b:
56:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D7:76:6F:29:2A:34:80:55:7B:DA:A0:84:F2:D2:28:A0:89:E6:86
X509v3 Authority Key Identifier:
keyid:AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0b:56:40:a9:5f:20:d8:66:27:ff:38:10:57:b5:60:5d:89:
95:dd:86:75:02:90:4c:20:0a:fd:03:86:ee:1f:6b:c1:ea:af:
9f:fb:b5:6d:93:4e:cd:61:6a:bc:6e:5a:0f:9a:3d:6b:cb:5e:
a6:e3:cf:c4:a7:a4:9a:3d:8c:48:c2:7c:76:d8:60:44:4e:fe:
2a:21:74:c7:8c:6e:46:d1:e2:2a:e3:8c:1a:fe:a9:3a:c5:79:
19:dd:a6:94:25:4d:e2:2c:13:d3:b4:a4:e5:4c:0b:15:ad:d1:
ee:5e:b5:54:77:e6:34:9a:f8:1e:67:d9:fe:d6:43:24:93:82:
e6:ba:84:7b:b5:29:99:06:a5:7b:67:e7:9b:4b:20:49:de:db:
56:3c:ee:17:2c:da:87:ec:e8:a0:32:f8:67:06:7a:ad:05:65:
fb:28:15:b8:93:38:d9:91:75:8d:1f:76:ee:80:d3:cb:19:30:
ff:f0:ac:3f:b1:53:b8:5c:05:8c:fe:7f:09:48:c5:46:2c:ec:
06:73:56:9d:c1:e4:dd:de:17:06:0b:fb:3c:53:f4:d4:6d:f7:
dc:29:f0:64:a3:40:f5:34:73:4c:cd:c7:c3:24:0d:46:f3:d5:
c7:db:d5:23:0d:29:84:3d:f6:ec:8b:b9:6f:de:57:f0:91:4b:
fa:82:a6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:14:33 2026 by rpki-client