
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
File: Zd_y7j-bsuskVR4dGPHWPewKbhc.mft (raw, json)
Hash identifier: meh3Y0Ktwwcdz57ngZtY+tz5FjIJRlm+yarHhru5eMM=
Subject key identifier: 4D:70:AF:69:89:23:8A:CA:5F:43:3C:9B:6C:F3:C3:B7:D3:23:43:A7
Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17
Certificate issuer: /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17
Certificate serial: 0940
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
Manifest number: 092E
Signing time: Wed 22 Jul 2026 20:42:17 +0000
Manifest this update: Wed 22 Jul 2026 20:42:16 +0000
Manifest next update: Wed 29 Jul 2026 20:42:16 +0000
Files and hashes: 1: Zd_y7j-bsuskVR4dGPHWPewKbhc.crl (hash: yQSY5socy7SdULJWmo/oN+4KCUKFeXi0aCVtEgbkAXs=)
2: A7034AFA7F8411EC9036F64CC4F9AE02.roa (hash: 8aOJR7dq5H1FSBWehu29UN5DlJmLrfgs2ryVPbFuTNA=)
3: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (hash: 2P5OTTpkzgPQNPnWpqe7PnEj5CbcnDOLb7qDMaxfHTE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl
rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:42:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2368 (0x940)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCB6, serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17
Validity
Not Before: Jul 22 20:42:16 2026 GMT
Not After : Jul 29 20:42:16 2026 GMT
Subject: CN=6a612b28-0f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:02:3b:43:e6:3c:f3:a4:2f:c6:d8:b8:b6:a9:
88:a0:3e:ff:ca:3b:39:b7:97:fe:38:09:26:f1:26:
50:98:04:c2:df:1f:a0:77:c7:26:72:b1:93:27:d6:
dd:67:cb:36:1f:fd:58:e8:75:f8:f0:98:26:fc:58:
f5:40:5f:80:8e:6a:49:9d:87:ab:df:79:55:8b:f6:
ec:c6:ae:cc:bc:8b:89:f5:dc:c2:3a:0f:08:fa:3b:
4f:44:ec:0e:1a:db:11:2a:e7:2a:43:6f:46:c5:39:
0b:21:f5:40:cf:43:b7:e6:d2:54:6f:37:98:a7:f1:
c3:7b:40:6c:e1:a1:be:43:cd:1f:c1:cc:ef:7a:fc:
6e:43:fd:47:17:86:47:df:63:95:b6:26:8c:72:88:
3c:2a:2a:69:5b:aa:78:48:fd:bd:e2:ef:aa:f3:7e:
d6:8c:6e:ee:79:84:e0:06:9b:42:fd:6d:90:a6:db:
04:e4:50:db:53:e9:db:59:77:20:ce:c5:6b:c5:14:
23:cf:ce:5c:a6:e7:d1:ea:36:53:ee:96:61:21:78:
aa:05:a0:40:70:cb:3e:56:e5:8a:6a:8c:46:db:82:
4e:01:37:06:ad:25:04:3c:5e:75:30:58:d0:5d:3e:
ee:3a:0e:58:fb:55:a5:83:ff:77:05:ea:60:fc:fc:
88:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:70:AF:69:89:23:8A:CA:5F:43:3C:9B:6C:F3:C3:B7:D3:23:43:A7
X509v3 Authority Key Identifier:
keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:15:d7:f7:2d:fb:c3:47:cb:70:80:63:05:28:34:73:ef:54:
d3:bc:76:15:b7:1a:44:b1:6e:f7:4f:29:b7:3a:83:93:5a:c8:
a2:97:ba:3a:5b:18:dd:f9:d1:b6:ff:90:15:a5:fa:5e:4f:f4:
d5:fa:5c:d7:da:82:6e:1b:bd:ad:1a:fd:46:62:2e:0e:3e:d0:
56:09:5e:f9:b0:fa:f5:8a:d1:1f:81:84:c6:0e:f2:88:46:79:
08:a4:fd:2c:97:03:b4:2c:15:02:f5:15:4d:ef:a4:ce:ee:ac:
8c:cd:6d:ec:c1:f8:2c:e2:f5:3a:be:c9:dd:56:32:93:3d:46:
25:1f:d9:0b:9c:5f:e3:a6:61:07:eb:af:58:55:4c:3d:49:2e:
a5:e6:27:5c:21:26:f6:00:31:3f:11:a5:4e:bc:fa:37:46:37:
b0:6d:d2:f8:2b:52:82:c0:72:d5:f4:c0:80:29:73:da:45:59:
f5:e1:2c:3d:55:4d:f1:53:81:62:6d:94:da:c4:16:19:ac:44:
79:b3:d4:7c:19:c5:3c:c4:5f:29:be:05:07:d6:cb:3b:d9:ae:
43:07:db:e0:40:d9:40:bc:ba:16:12:12:37:7f:08:7a:2d:19:
aa:bd:16:05:3e:c3:53:b8:0d:4f:16:bd:87:21:2d:1f:b5:9b:
10:ce:9d:b4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RERDQjYxMTAvBgNVBAUTKDY1REZGMkVFM0Y5QkIyRUIyNDU1MUUxRDE4RjFENjNE
RUMwQTZFMTcwHhcNMjYwNzIyMjA0MjE2WhcNMjYwNzI5MjA0MjE2WjAYMRYwFAYD
VQQDEw02YTYxMmIyOC0wZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkgI7Q+Y886Qvxti4tqmIoD7/yjs5t5f+OAkm8SZQmATC3x+gd8cmcrGTJ9bd
Z8s2H/1Y6HX48Jgm/Fj1QF+AjmpJnYer33lVi/bsxq7MvIuJ9dzCOg8I+jtPROwO
GtsRKucqQ29GxTkLIfVAz0O35tJUbzeYp/HDe0Bs4aG+Q80fwczvevxuQ/1HF4ZH
32OVtiaMcog8KippW6p4SP294u+q837WjG7ueYTgBptC/W2QptsE5FDbU+nbWXcg
zsVrxRQjz85cpufR6jZT7pZhIXiqBaBAcMs+VuWKaoxG24JOATcGrSUEPF51MFjQ
XT7uOg5Y+1Wlg/93Bepg/PyI+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE1wr2mJ
I4rKX0M8m2zzw7fTI0OnMB8GA1UdIwQYMBaAFGXf8u4/m7LrJFUeHRjx1j3sCm4X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9FODgzREZENkND
M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1c2tWUjRkR1BIV1Bld0ti
aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1pkX3k3ai1ic3Vza1ZSNGRHUEhXUGV3S2JoYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RENCNi9FODgzREZENkNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1
c2tWUjRkR1BIV1Bld0tiaGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuhXX9y37w0fLcIBjBSg0c+9U07x2FbcaRLFu908ptzqDk1rIope6OlsY3fnR
tv+QFaX6Xk/01fpc19qCbhu9rRr9RmIuDj7QVgle+bD69YrRH4GExg7yiEZ5CKT9
LJcDtCwVAvUVTe+kzu6sjM1t7MH4LOL1Or7J3VYykz1GJR/ZC5xf46ZhB+uvWFVM
PUkupeYnXCEm9gAxPxGlTrz6N0Y3sG3S+CtSgsBy1fTAgClz2kVZ9eEsPVVN8VOB
Ym2U2sQWGaxEebPUfBnFPMRfKb4FB9bLO9muQwfb4EDZQLy6FhISN38Iei0Zqr0W
BT7DU7gNTxa9hyEtH7WbEM6dtA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:51:28 2026 by rpki-client