
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft
File: RZTy7BffVsPQZUDzZtKvEYsxfx4.mft (raw, json)
Hash identifier: B8+5PK6O2QIf4DQWHqYfaLeJdZwocU0cd63Bgr7dJMU=
Subject key identifier: A9:8C:F6:F8:3B:2A:B3:B0:0A:A6:F4:27:15:8C:BD:95:DE:C2:0B:D4
Authority key identifier: 45:94:F2:EC:17:DF:56:C3:D0:65:40:F3:66:D2:AF:11:8B:31:7F:1E
Certificate issuer: /CN=A91CE978/serialNumber=4594F2EC17DF56C3D06540F366D2AF118B317F1E
Certificate serial: 01E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft
Manifest number: 01DE
Signing time: Wed 22 Jul 2026 14:54:44 +0000
Manifest this update: Wed 22 Jul 2026 14:54:44 +0000
Manifest next update: Wed 29 Jul 2026 14:54:44 +0000
Files and hashes: 1: RZTy7BffVsPQZUDzZtKvEYsxfx4.crl (hash: duwPrFR5mC+nuhBFzXzek8Ufj9JBBcxOc0+wG8WP6Qc=)
2: 30EAE110B9AD11EE83063243C4F9AE02.roa (hash: QreKN0Rd5UfNyWwEd5SMYjaTfZ6J0wKhOlda79WX3co=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.crl
rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:54:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 483 (0x1e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE978, serialNumber=4594F2EC17DF56C3D06540F366D2AF118B317F1E
Validity
Not Before: Jul 22 14:54:44 2026 GMT
Not After : Jul 29 14:54:44 2026 GMT
Subject: CN=6a60d9b4-ff66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:48:de:ed:8e:d2:e1:ee:95:40:ae:96:12:af:
ef:4d:fd:a1:b8:5a:c0:e3:c4:87:6e:ec:34:89:f9:
16:f2:05:94:99:4c:c2:ef:30:31:d9:15:11:74:9f:
6b:46:cf:30:ef:c3:18:7f:ad:b3:de:b0:be:37:56:
d7:a2:52:4b:21:9d:1f:f6:09:f2:1c:35:43:6e:0f:
c9:81:90:48:c4:97:f6:1a:58:54:2f:86:68:58:ad:
05:a3:7a:00:06:03:c7:ac:df:04:54:f6:bc:96:33:
f2:72:16:3b:8c:3b:04:44:8c:a9:0a:73:1e:3d:66:
2b:29:3c:b6:c0:f0:a9:d2:67:83:49:28:c2:7f:b1:
4f:a5:b8:60:b4:41:15:41:81:a8:25:85:38:d0:ba:
83:16:38:a6:5c:1d:a0:63:be:37:f6:e9:23:3f:5f:
24:43:37:1b:ef:9b:74:5d:e4:97:89:9b:34:c6:42:
b1:4e:67:8f:fd:ec:f0:68:d3:64:a9:86:ed:c6:ad:
48:db:1a:d9:87:b9:fe:b7:f1:75:e5:2f:c9:88:d7:
c8:cf:21:e6:de:7d:d1:7c:20:d4:c7:e3:79:ce:54:
81:f9:b5:b3:56:08:22:c5:76:37:c9:7f:30:db:c7:
4c:a0:1b:5e:57:ed:f3:0a:67:c2:75:21:98:1a:ec:
94:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8C:F6:F8:3B:2A:B3:B0:0A:A6:F4:27:15:8C:BD:95:DE:C2:0B:D4
X509v3 Authority Key Identifier:
keyid:45:94:F2:EC:17:DF:56:C3:D0:65:40:F3:66:D2:AF:11:8B:31:7F:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:17:c6:69:7d:53:b3:00:83:11:ba:dc:d8:d1:f1:71:29:c6:
8d:93:34:d5:4d:89:23:8a:d3:71:33:e7:a2:f3:08:20:98:75:
d5:23:58:87:97:d4:da:98:56:b0:b3:c9:36:69:1f:37:dd:72:
dc:8d:c0:76:ed:ec:21:31:1a:aa:13:f2:0e:4a:05:42:16:72:
f1:a7:99:0d:75:fa:be:ba:07:2f:b6:00:9b:e1:a4:c1:b6:c5:
71:6f:c5:64:a7:cb:9d:9e:18:53:36:eb:c4:33:df:64:fd:ab:
e3:50:69:97:0c:43:c4:88:db:59:bb:35:57:a3:1c:58:c7:41:
ad:f3:e3:c8:4a:7a:47:f7:b5:0a:90:57:8e:65:91:e7:28:90:
6e:bf:34:50:8a:c6:58:ee:35:d5:02:09:c4:47:08:77:c1:61:
0f:08:24:75:95:b7:af:96:74:56:cf:6b:3a:a9:72:f7:73:0b:
73:15:73:2d:68:ce:86:7a:b7:98:39:52:39:fd:ea:56:46:fe:
16:c3:4d:3f:20:1f:28:75:67:14:ee:2d:8a:25:02:3c:21:b1:
3b:e9:94:fb:9b:6c:af:fb:8d:f3:04:6b:46:a1:25:cb:0e:49:
c8:92:c0:c6:f6:64:30:45:e6:c8:8d:5d:0c:f3:65:59:d8:cb:
ea:e7:4c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:56 2026 by rpki-client