
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
File: Z1qGdu030Wq7yi_vjqofI_JXsp8.mft (raw, json)
Hash identifier: FaFFu+vyTCyF3wLnrovMMG0FJ8Dhn+52LeiAtWM6UqE=
Subject key identifier: 0A:C4:3D:FA:0B:31:75:C7:96:B3:07:5F:56:C9:83:7B:B1:5F:B4:FD
Authority key identifier: 67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F
Certificate issuer: /CN=A91D56CA/serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F
Certificate serial: 18CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
Manifest number: 18B2
Signing time: Wed 22 Jul 2026 16:34:26 +0000
Manifest this update: Wed 22 Jul 2026 16:34:26 +0000
Manifest next update: Wed 29 Jul 2026 16:34:26 +0000
Files and hashes: 1: Z1qGdu030Wq7yi_vjqofI_JXsp8.crl (hash: 4NzZ3q82fNmneBtlTQ9t7riYCtZlJl604BUDHF+uVno=)
2: A6DF4CF8C34B11ECAFB25A68C4F9AE02.roa (hash: rdOZCJ3dicwt2ZQgE2QnLuQhDeAJoxWmp9bzW22pmwI=)
3: 0EE83FA4C34611EC9290F072C4F9AE02.roa (hash: ZFGFBfx4/7JIn5J81VyjxgzCJGuEFQLjcxwfK1UOBRQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl
rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6347 (0x18cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D56CA, serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F
Validity
Not Before: Jul 22 16:34:26 2026 GMT
Not After : Jul 29 16:34:26 2026 GMT
Subject: CN=6a60f112-cd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:32:4d:4b:40:9d:4d:12:e9:ab:dc:b4:cb:
50:df:75:c3:ff:e5:95:23:67:6f:81:e7:b5:bf:57:
cd:cc:da:da:83:77:39:fe:4b:6f:d1:eb:e1:85:36:
c1:54:9b:65:92:3b:26:02:46:83:59:54:c1:ec:de:
e6:dd:aa:2d:a5:ed:3b:64:ed:23:59:fa:26:c4:6d:
f8:05:36:47:70:ee:46:73:76:b7:d1:22:f3:11:f2:
cc:80:26:8d:64:f3:ad:8d:fc:69:98:d6:70:a9:87:
a5:9a:0d:a9:36:56:5f:c7:1d:12:78:46:fb:2d:e7:
36:34:58:40:df:ab:73:78:9e:0a:76:e3:d0:9c:31:
21:d8:65:45:53:43:98:f9:d9:50:63:41:ca:69:09:
2e:0e:f2:90:f5:22:bb:44:d5:a1:82:72:df:6a:45:
3d:08:e0:04:f2:bb:d5:46:41:86:4f:1c:02:33:03:
95:a8:89:0d:90:32:50:9c:55:8e:66:90:28:b1:f2:
12:72:b4:b3:ce:0c:3b:4d:4f:88:4b:ef:9d:07:8f:
e2:be:34:eb:4a:f4:44:b2:d2:70:19:c5:f1:0e:6e:
8e:ce:1b:99:e1:76:22:5a:28:6a:43:1f:e0:42:27:
6c:81:2a:13:95:99:9d:6a:91:5f:16:94:4f:4c:a0:
17:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C4:3D:FA:0B:31:75:C7:96:B3:07:5F:56:C9:83:7B:B1:5F:B4:FD
X509v3 Authority Key Identifier:
keyid:67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:6a:62:01:ef:dd:da:a9:28:19:f6:55:9e:2e:49:e2:ca:99:
7a:95:05:cb:78:c9:19:54:ef:57:7b:86:e3:45:32:45:2f:ca:
13:e7:60:9b:7f:8e:1c:1a:bc:7f:2d:f4:e6:ae:45:3d:25:41:
75:d1:53:23:eb:7d:60:7e:09:0f:6c:cb:59:58:c9:df:b0:8e:
84:59:37:5b:1a:2a:70:4d:84:a1:64:57:9e:30:a4:bc:8e:1e:
94:7e:d7:43:d3:d1:69:65:9c:b4:59:a4:db:70:09:c9:cd:13:
9a:ac:4f:94:5d:76:70:5a:b8:aa:58:90:3b:90:3c:d7:cc:aa:
71:01:61:f1:c5:96:4d:68:72:04:14:ea:52:33:c7:b0:cb:cf:
87:b9:24:ca:be:8b:fb:ae:bb:b5:2f:b7:2d:74:d2:fd:3e:89:
79:8c:57:ca:75:87:cc:e0:7b:5b:de:aa:5e:9d:d6:95:33:97:
e9:57:0c:2a:42:8a:b8:e9:93:35:55:10:2a:56:ad:98:76:14:
d5:00:87:12:7c:4c:ea:a3:14:9b:ee:90:f2:8d:4a:a7:80:13:
8a:1b:81:86:16:b4:e7:01:65:6b:b4:5d:1a:02:09:d7:5c:97:
4a:60:9c:3d:23:fa:55:3c:24:fe:65:1a:8d:35:dc:0d:a7:f1:
3d:d8:6e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:29:48 2026 by rpki-client