
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
File: Z1qGdu030Wq7yi_vjqofI_JXsp8.mft (raw, json)
Hash identifier: B1QBg7CiOfpcZG2alJliwF9Wq4ylzhp0f5zJ1sPaNGk=
Subject key identifier: DF:BD:C2:07:AE:1B:E6:BE:19:F2:F9:84:FF:30:79:C9:45:96:CC:A9
Authority key identifier: 67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F
Certificate issuer: /CN=A91D56CA/serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F
Certificate serial: 18A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
Manifest number: 188E
Signing time: Tue 12 May 2026 16:30:07 +0000
Manifest this update: Tue 12 May 2026 16:30:06 +0000
Manifest next update: Tue 19 May 2026 16:30:06 +0000
Files and hashes: 1: Z1qGdu030Wq7yi_vjqofI_JXsp8.crl (hash: CSBowE4/Ks436MyD0pj6MNONiQAJbP/k+QqfWXbPwJY=)
2: A6DF4CF8C34B11ECAFB25A68C4F9AE02.roa (hash: rdOZCJ3dicwt2ZQgE2QnLuQhDeAJoxWmp9bzW22pmwI=)
3: 0EE83FA4C34611EC9290F072C4F9AE02.roa (hash: ZFGFBfx4/7JIn5J81VyjxgzCJGuEFQLjcxwfK1UOBRQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl
rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6311 (0x18a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D56CA, serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F
Validity
Not Before: May 12 16:30:06 2026 GMT
Not After : May 19 16:30:06 2026 GMT
Subject: CN=6a03558f-6607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:69:ba:93:b4:ba:ba:a6:27:06:52:67:0d:01:
cf:2c:17:12:0b:ac:80:41:78:0c:80:4c:93:fb:9e:
aa:fd:b2:8f:12:43:4d:26:6f:2e:10:6f:be:f2:48:
6a:cf:c2:4f:da:0b:71:a2:4c:68:db:a1:11:21:19:
11:e6:7d:f1:15:4d:50:99:ba:73:b5:98:01:5f:3c:
bd:da:f8:94:8b:7f:f0:19:44:48:80:98:59:0d:d1:
b3:d2:ad:8e:18:e4:f5:c1:05:65:18:cd:59:3e:0b:
92:f7:7d:a7:1a:a3:38:88:9c:bc:fd:76:82:2a:87:
2b:03:b3:81:03:15:d1:04:bb:8c:23:c7:db:99:41:
b1:aa:f0:a3:5f:1f:64:9e:b3:cf:8e:05:43:38:21:
d3:c1:41:99:16:c6:42:be:32:e1:dc:5d:7e:9f:62:
a5:d6:c9:d6:3d:a6:67:2b:33:f1:a6:f0:77:68:67:
c2:9b:35:f9:ba:d5:a1:4d:58:c9:8a:62:db:5a:8c:
aa:e9:df:b7:d0:64:da:2d:99:1b:12:af:9d:bd:54:
21:c4:ad:7a:29:81:f0:c8:3c:3a:5c:4f:f3:03:0b:
70:1c:ea:ba:d6:b4:00:81:d9:bf:db:f5:24:61:21:
57:ca:ab:e1:e5:dc:7c:af:76:14:22:93:31:30:46:
53:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BD:C2:07:AE:1B:E6:BE:19:F2:F9:84:FF:30:79:C9:45:96:CC:A9
X509v3 Authority Key Identifier:
keyid:67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:97:aa:8a:44:28:7f:e9:43:82:99:e8:57:bf:47:14:19:f2:
2c:40:f3:65:20:5d:ff:2d:4e:6a:fb:0e:8c:96:83:20:3c:5f:
38:21:72:3c:ee:81:27:f6:96:b3:b5:be:5a:38:7f:62:2f:59:
06:d1:08:c8:0e:0c:35:de:a3:4c:04:5f:9e:d9:37:ee:b2:99:
80:9b:49:e2:67:64:89:9a:0b:3b:c8:bd:10:da:eb:f6:4d:df:
a6:d8:99:cc:b9:8b:2c:69:0b:ef:9f:f3:98:14:77:07:d1:5b:
60:b5:27:c3:71:78:22:6c:40:c4:81:6c:55:b4:51:a9:83:2e:
79:49:8b:46:9b:2e:a6:9d:a2:45:ef:37:59:c9:af:8e:a4:96:
d6:ac:fe:62:eb:a5:cc:c9:b7:7a:73:e8:af:e4:8b:cd:0f:aa:
44:2d:c0:a4:fb:92:18:4a:ea:fb:90:08:d8:35:fb:bd:74:ba:
3b:81:87:7f:ce:dd:9c:46:b5:b4:04:4e:6d:f5:6b:da:2f:4c:
34:88:dd:20:28:55:a6:cc:20:f8:65:ef:fe:c6:7b:c8:ec:b7:
b8:5a:c9:fb:4e:50:0c:9b:79:e9:0c:6f:65:24:35:6f:1a:04:
41:1c:ad:68:f6:99:d6:91:0f:16:24:7a:eb:ec:39:94:b5:f2:
71:02:a7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:19:39 2026 by rpki-client