
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF859/B74508B2442011F1930303E7A6EE528E/z0qe9ZJzCmyqFAoefLdOzVUc0m4.mft
File: z0qe9ZJzCmyqFAoefLdOzVUc0m4.mft (raw, json)
Hash identifier: NK94FOPvLDknp5+soSgUy549fghAwMoZBNKEkzdmuAw=
Subject key identifier: 5C:89:EA:1F:41:26:3A:73:6F:D9:30:81:FB:3F:B9:AB:34:6A:31:90
Authority key identifier: CF:4A:9E:F5:92:73:0A:6C:AA:14:0A:1E:7C:B7:4E:CD:55:1C:D2:6E
Certificate issuer: /CN=A91DF859/serialNumber=CF4A9EF592730A6CAA140A1E7CB74ECD551CD26E
Certificate serial: 31
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/z0qe9ZJzCmyqFAoefLdOzVUc0m4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF859/B74508B2442011F1930303E7A6EE528E/z0qe9ZJzCmyqFAoefLdOzVUc0m4.mft
Manifest number: 30
Signing time: Thu 23 Jul 2026 23:14:14 +0000
Manifest this update: Thu 23 Jul 2026 23:14:14 +0000
Manifest next update: Thu 30 Jul 2026 23:14:14 +0000
Files and hashes: 1: z0qe9ZJzCmyqFAoefLdOzVUc0m4.crl (hash: ePjcgPi30SPFmdiADqSAp5ptfyZAqXNW3WFAfwrupNc=)
2: 9F908B1A4E9311F1BBF071C1B9833773.roa (hash: e1C1hiUPlgxR3BhLn5hfnRbIiMCUtUsvPXB3GFFh1EE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF859/B74508B2442011F1930303E7A6EE528E/z0qe9ZJzCmyqFAoefLdOzVUc0m4.crl
rsync://rpki.apnic.net/member_repository/A91DF859/B74508B2442011F1930303E7A6EE528E/z0qe9ZJzCmyqFAoefLdOzVUc0m4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/z0qe9ZJzCmyqFAoefLdOzVUc0m4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 23:13:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF859, serialNumber=CF4A9EF592730A6CAA140A1E7CB74ECD551CD26E
Validity
Not Before: Jul 23 23:14:14 2026 GMT
Not After : Jul 30 23:14:14 2026 GMT
Subject: CN=6a62a046-3d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:de:ca:53:ee:54:36:46:45:e3:41:55:62:
16:65:5b:35:ae:9e:dc:27:e2:e4:99:c1:52:e3:73:
79:16:c1:0f:bb:1e:e3:1f:89:17:eb:f0:85:63:53:
55:9e:5d:9a:35:f6:15:6a:d5:66:b9:fd:26:ed:ae:
4e:6f:13:8c:0a:b4:29:e5:88:fd:08:3e:e7:0a:14:
9a:94:17:d4:c8:19:a3:29:59:d4:e1:c1:01:85:41:
1e:cb:46:60:d8:d3:64:65:81:e9:7c:c6:52:f2:96:
cd:bb:07:df:74:b3:ee:eb:3b:4b:4e:40:6d:97:e1:
31:ed:d1:57:a9:5f:a9:d1:30:07:f5:aa:7c:43:18:
e9:6e:c9:0e:5c:db:d8:71:94:0c:52:3e:e1:00:c8:
de:55:7a:be:06:e8:51:79:64:9f:bf:f7:21:a0:18:
f3:66:18:5b:10:7a:5c:5f:00:06:fa:bb:d8:df:60:
19:38:a0:7d:71:b5:f8:be:39:7d:a5:aa:41:48:68:
a9:b4:9c:16:61:ee:27:5a:db:52:73:90:18:85:dc:
6d:c8:ff:a9:3f:5a:9a:8c:11:69:40:47:50:f4:50:
4e:c8:23:4f:5d:1e:1f:dd:53:61:83:54:6c:c5:dc:
f7:c8:40:cc:fe:70:d4:95:4b:17:d9:b3:30:64:2b:
48:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:89:EA:1F:41:26:3A:73:6F:D9:30:81:FB:3F:B9:AB:34:6A:31:90
X509v3 Authority Key Identifier:
keyid:CF:4A:9E:F5:92:73:0A:6C:AA:14:0A:1E:7C:B7:4E:CD:55:1C:D2:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF859/B74508B2442011F1930303E7A6EE528E/z0qe9ZJzCmyqFAoefLdOzVUc0m4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/z0qe9ZJzCmyqFAoefLdOzVUc0m4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF859/B74508B2442011F1930303E7A6EE528E/z0qe9ZJzCmyqFAoefLdOzVUc0m4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:f3:d4:77:92:07:60:49:82:5d:9c:e4:5d:8a:ab:c0:c3:0b:
7e:19:45:1c:f9:16:bc:de:41:e7:b8:95:ea:21:cb:ad:3b:e6:
e9:7b:f5:df:28:d5:b4:9c:7e:94:fc:16:ba:97:8b:8b:e4:b9:
fd:e8:d6:6c:a4:15:67:65:4d:4a:bf:e7:22:37:1e:c2:e7:83:
5b:0a:25:d6:d0:a9:47:f9:b5:50:b0:0d:dd:71:a3:65:dd:32:
27:d6:fe:f5:f5:d2:89:6c:54:aa:4d:5e:df:7f:73:29:0f:88:
02:6d:03:8f:38:79:f8:70:9e:5f:d5:64:ec:50:ff:2f:49:bc:
47:48:b2:50:10:87:98:0f:a3:1b:e5:75:93:82:1a:38:89:a9:
79:92:4a:e3:9f:19:71:18:16:03:14:8d:99:d4:ef:c8:20:1b:
b2:d2:85:6c:2d:9c:1e:82:b5:14:7b:62:79:fd:0a:2a:59:d8:
10:aa:55:28:7d:04:7d:b7:06:78:ae:63:c4:48:4a:81:9a:77:
dd:09:44:c0:fd:9c:10:21:01:a9:e0:29:19:10:2e:2f:62:1b:
06:6d:49:bb:ec:3e:b4:a3:dc:50:b0:69:80:bd:54:6b:e5:66:
65:d1:f6:45:06:4e:19:10:87:25:9e:c0:50:d9:be:b3:b6:55:
39:b0:bc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:41 2026 by rpki-client