
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft
File: cZYTj9n8jHj-hDolPLBICtzFfw0.mft (raw, json)
Hash identifier: KR4lROKSVQw2Avm+Nt7e/AxCTJImoEo+VM7iKqQN9kE=
Subject key identifier: E4:B5:07:5D:61:B7:92:D1:F9:BD:91:DC:3A:EA:25:5D:CF:20:85:F9
Authority key identifier: 71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D
Certificate issuer: /CN=A91D5590/serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D
Certificate serial: 0885
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft
Manifest number: 0875
Signing time: Tue 12 May 2026 20:44:51 +0000
Manifest this update: Tue 12 May 2026 20:44:50 +0000
Manifest next update: Tue 19 May 2026 20:44:50 +0000
Files and hashes: 1: cZYTj9n8jHj-hDolPLBICtzFfw0.crl (hash: aTEZl/ctm6e4/3fY4ICAmMawOhn6cIqM8MvHgRvybpk=)
2: 9920D2E6F7C611EA8B23C30CC4F9AE02.roa (hash: 5RUGr84S9u/MYGYJzdR1/AUpkucviMpdR/eHj0IncTw=)
3: 986F0854F7C611EA8B23C30CC4F9AE02.roa (hash: aHXBmA0NtyR13VuTHpIm+ZaiBP/Di2n0/CwGR7lCYqI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl
rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:44:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2181 (0x885)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5590, serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D
Validity
Not Before: May 12 20:44:50 2026 GMT
Not After : May 19 20:44:50 2026 GMT
Subject: CN=6a039142-4927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:f8:71:b4:d3:64:c5:e0:8e:3e:e4:e2:89:
2e:c7:11:03:f3:2f:da:d3:4b:67:31:90:4d:3b:4c:
a0:71:37:a9:4d:9f:93:55:99:73:03:49:3d:81:e0:
75:15:38:32:33:6d:ca:df:df:19:38:c5:4b:0d:50:
c2:bc:c6:c4:9e:0e:97:4f:44:3c:e1:08:3d:7e:42:
e1:41:21:7b:82:d7:3e:6f:66:59:34:33:a4:fc:53:
3a:ed:7f:d5:e1:78:0a:89:37:a1:b8:0d:08:51:83:
9d:95:55:7f:ad:af:6e:05:fc:48:ef:5a:a6:1e:f1:
68:09:33:e1:4c:31:c4:43:b4:90:0c:81:75:e0:c5:
c1:9e:0e:4d:33:db:fc:56:21:b2:22:05:04:2b:c5:
66:ef:75:06:8f:92:e0:0a:72:27:59:b2:9c:2a:fd:
c8:89:be:50:60:3a:9c:cb:8c:d3:70:4c:07:4a:69:
f5:ce:d3:2b:77:f1:ff:af:bc:70:66:6c:93:bb:b3:
cb:b0:8a:87:a5:49:49:6f:c7:f2:dd:0f:26:44:be:
26:4e:50:64:d2:53:a2:97:6b:a3:95:e3:a4:a5:0b:
ac:cc:ac:47:a4:2b:3f:1f:8d:d5:6d:29:95:b8:ee:
30:ba:13:86:fb:6e:88:12:a0:e6:5d:13:97:7a:fb:
a3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B5:07:5D:61:B7:92:D1:F9:BD:91:DC:3A:EA:25:5D:CF:20:85:F9
X509v3 Authority Key Identifier:
keyid:71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:5c:9c:da:8c:a4:84:ec:83:69:77:88:3e:c9:a0:fa:88:cb:
ba:4b:30:69:5e:3f:d9:f3:3b:fe:50:ff:22:70:32:bb:2d:4e:
d9:48:7c:c2:c6:ba:08:0b:04:c9:77:66:68:a2:6b:78:03:fa:
78:63:29:08:bb:d1:95:00:c2:6e:67:41:b4:0d:24:ef:9a:ab:
38:26:c6:c7:08:7b:9e:3b:8c:33:5f:31:bf:61:88:10:a3:6c:
9b:f6:24:e7:80:45:0e:b1:18:5f:63:7e:f1:d8:75:ed:8d:f0:
17:65:44:37:b6:55:de:81:1a:d8:57:53:a0:49:b3:e5:19:59:
53:01:fb:da:7f:65:6e:d9:6f:bb:ef:dd:1d:51:42:21:0b:8f:
82:38:68:e0:15:5a:2c:7e:bc:69:70:f9:f2:50:d6:6f:7a:5c:
df:03:aa:01:d9:8f:77:a5:69:f4:47:44:10:92:53:5c:e3:57:
23:92:eb:d9:22:49:55:fb:17:37:42:09:c9:15:66:4f:26:7b:
b4:8e:35:62:d1:24:fc:5d:9e:a5:21:b3:b1:0f:8c:58:95:e9:
11:00:53:90:b8:13:58:03:e5:de:51:a1:9b:9e:06:7a:2f:40:
16:6c:12:03:c9:a2:5c:6c:68:24:d9:9a:b1:8e:53:79:3c:28:
0e:03:6d:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDU1OTAxMTAvBgNVBAUTKDcxOTYxMzhGRDlGQzhDNzhGRTg0M0EyNTNDQjA0ODBB
RENDNTdGMEQwHhcNMjYwNTEyMjA0NDUwWhcNMjYwNTE5MjA0NDUwWjAYMRYwFAYD
VQQDEw02YTAzOTE0Mi00OTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAraj4cbTTZMXgjj7k4okuxxED8y/a00tnMZBNO0ygcTepTZ+TVZlzA0k9geB1
FTgyM23K398ZOMVLDVDCvMbEng6XT0Q84Qg9fkLhQSF7gtc+b2ZZNDOk/FM67X/V
4XgKiTehuA0IUYOdlVV/ra9uBfxI71qmHvFoCTPhTDHEQ7SQDIF14MXBng5NM9v8
ViGyIgUEK8Vm73UGj5LgCnInWbKcKv3Iib5QYDqcy4zTcEwHSmn1ztMrd/H/r7xw
ZmyTu7PLsIqHpUlJb8fy3Q8mRL4mTlBk0lOil2ujleOkpQuszKxHpCs/H43VbSmV
uO4wuhOG+26IEqDmXROXevujZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOS1B11h
t5LR+b2R3DrqJV3PIIX5MB8GA1UdIwQYMBaAFHGWE4/Z/Ix4/oQ6JTywSArcxX8N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTU5MC9BODk1MjQ5RUY3
QzUxMUVBODcxQzAwMENDNEY5QUUwMi9jWllUajluOGpIai1oRG9sUExCSUN0ekZm
dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NaWVRqOW44akhqLWhEb2xQTEJJQ3R6RmZ3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NTU5MC9BODk1MjQ5RUY3QzUxMUVBODcxQzAwMENDNEY5QUUwMi9jWllUajluOGpI
ai1oRG9sUExCSUN0ekZmdzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdVyc2oykhOyDaXeIPsmg+ojLukswaV4/2fM7/lD/InAyuy1O2Uh8wsa6CAsE
yXdmaKJreAP6eGMpCLvRlQDCbmdBtA0k75qrOCbGxwh7njuMM18xv2GIEKNsm/Yk
54BFDrEYX2N+8dh17Y3wF2VEN7ZV3oEa2FdToEmz5RlZUwH72n9lbtlvu+/dHVFC
IQuPgjho4BVaLH68aXD58lDWb3pc3wOqAdmPd6Vp9EdEEJJTXONXI5Lr2SJJVfsX
N0IJyRVmTyZ7tI41YtEk/F2epSGzsQ+MWJXpEQBTkLgTWAPl3lGhm54Gei9AFmwS
A8miXGxoJNmasY5TeTwoDgNtOw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:39:15 2026 by rpki-client