
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
File: rzCJXc48ZcI77FTLCJhY66Fhic4.mft (raw, json)
Hash identifier: 2yudutnLvCzEBxjuHyMGO8vOe8yu+ej1PoD0w3h/rdo=
Subject key identifier: 1C:00:A5:9E:4C:10:1E:00:A9:FF:A8:7D:45:CF:48:98:5E:E3:EA:B5
Authority key identifier: AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE
Certificate issuer: /CN=A91CA294/serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE
Certificate serial: 80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
Manifest number: 79
Signing time: Mon 11 May 2026 07:56:07 +0000
Manifest this update: Mon 11 May 2026 07:56:07 +0000
Manifest next update: Mon 18 May 2026 07:56:07 +0000
Files and hashes: 1: rzCJXc48ZcI77FTLCJhY66Fhic4.crl (hash: B2IcEXTlyiBJ0WSzvhNG1uyXfePfTOvCCNS0hocf+H8=)
2: 44D1A4E69DAB11F0A7401064C4F9AE02.roa (hash: /dWw78lmDvPsrlgqtDvPWypN8cQFZwkLxuNHhkdxFFI=)
3: 7CCBF066A2F811F09235B919C4F9AE02.roa (hash: L2xc97rBOEo7wGTXyTU4krqEAbLPgvd1QpBdIvhLYmA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl
rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:56:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA294, serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE
Validity
Not Before: May 11 07:56:07 2026 GMT
Not After : May 18 07:56:07 2026 GMT
Subject: CN=6a018b97-9724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:50:81:f7:7d:a2:2f:0a:ad:28:bd:be:6e:59:
cc:fe:cc:96:94:e3:fa:16:0d:fe:a5:3f:1b:2f:8d:
2b:01:03:b0:22:4e:53:b4:f8:f8:68:8f:86:0d:33:
05:9c:2a:87:84:77:f7:d6:5d:96:de:40:20:f5:d9:
ee:60:06:84:f4:29:69:3c:e4:0c:b1:77:17:91:0b:
b7:45:18:fb:6c:27:b7:64:48:a4:9a:b9:e9:45:73:
65:bc:a9:bc:be:6f:82:8e:a4:bf:0c:ce:56:24:88:
74:65:53:88:44:f3:15:90:10:82:14:ab:b0:ac:f1:
28:15:ef:79:dd:78:1a:ce:b3:28:5d:1c:58:53:05:
53:af:ea:bb:25:89:42:83:bb:85:10:bc:cc:e3:87:
72:f4:a1:18:35:7a:85:f3:d8:a5:60:57:2d:42:08:
90:6a:92:21:0e:e4:37:72:a1:2a:5f:e6:c3:69:34:
51:17:ad:37:97:9b:ba:7a:13:36:1b:9f:dc:d7:dc:
55:f3:62:00:59:d2:42:fd:77:5f:40:ed:6a:90:b7:
cb:9d:f0:10:eb:4f:c6:57:9f:73:01:32:d8:ab:00:
75:26:3e:f7:14:f6:99:51:a1:51:d1:66:1e:8b:e7:
3b:52:ed:6d:ce:4e:ec:a5:25:f8:97:ff:49:f4:2d:
dd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:00:A5:9E:4C:10:1E:00:A9:FF:A8:7D:45:CF:48:98:5E:E3:EA:B5
X509v3 Authority Key Identifier:
keyid:AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:b1:c3:83:c2:14:09:37:28:4b:df:39:18:65:75:ee:71:74:
6b:17:04:a7:4c:c1:9a:5b:76:4e:3e:38:da:6f:52:3b:4a:d0:
52:30:d5:61:f9:8b:75:bf:3e:40:ef:e0:6c:33:ea:2c:32:3c:
06:f6:ae:e9:34:00:fe:a0:0f:9c:be:ad:73:2b:c8:5d:93:81:
29:a1:95:0c:22:af:93:06:68:b2:45:f2:e5:3e:95:f0:b6:1b:
4a:19:08:af:d5:a0:b2:38:0a:91:fd:e0:fd:6d:1f:ee:8a:84:
e6:c6:71:ff:b7:92:93:a9:89:b6:f0:b2:64:61:b7:6b:76:27:
5f:68:7b:e7:ee:65:33:94:7f:e0:76:d7:ba:03:89:ce:ff:14:
3c:75:40:2c:f3:51:cb:57:0e:20:cb:39:96:7b:ee:41:e3:3d:
90:dd:05:11:bc:81:55:08:67:1c:39:a1:92:bd:a0:47:f8:e9:
fe:d2:6c:be:59:8c:34:9e:a4:3e:da:11:c2:23:95:2d:5a:1b:
59:f0:eb:e1:c8:dd:24:2e:b7:3f:fd:f3:52:19:90:3c:87:01:
9e:28:9e:3f:91:fe:f2:62:b7:2a:59:a6:08:59:1b:b4:3e:77:
61:40:68:78:e5:c1:39:63:c3:a1:49:cc:52:f2:83:7d:ab:e2:
dc:53:ac:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:16:06 2026 by rpki-client