
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
File: ZjJswGhaN2NqRbxwlHwhnQtczGA.mft (raw, json)
Hash identifier: rd+HnwaQM/YsL+GAyjzVSbBao1ePrZ5j0AJTjukW+Q8=
Subject key identifier: 0D:42:44:65:BE:84:71:42:DA:6C:F0:A1:C8:68:26:6A:F3:24:46:C8
Authority key identifier: 66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60
Certificate issuer: /CN=A91E0961/serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60
Certificate serial: AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
Manifest number: A6
Signing time: Wed 13 May 2026 07:28:44 +0000
Manifest this update: Wed 13 May 2026 07:28:44 +0000
Manifest next update: Wed 20 May 2026 07:28:44 +0000
Files and hashes: 1: ZjJswGhaN2NqRbxwlHwhnQtczGA.crl (hash: dmutyG/+ROeZYQcl4HOEt94An1cr19htXxPcXSaedVo=)
2: E2245D966E8B11F09764751EC4F9AE02.roa (hash: BxOM7SgqdGJtQ0VBZeNqfMKq52lRmXi/Ew1Q7dVeV+g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl
rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 07:28:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0961, serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60
Validity
Not Before: May 13 07:28:44 2026 GMT
Not After : May 20 07:28:44 2026 GMT
Subject: CN=6a04282c-a487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ba:c0:d5:18:dd:5b:bd:48:a3:08:69:fa:cd:
18:19:74:f0:cf:86:21:b9:a7:a9:a1:ea:ce:03:e9:
5f:29:9a:01:c7:b3:dd:1f:a4:d9:c4:df:fa:d3:b4:
d4:cf:09:4e:80:89:12:5b:d0:fe:90:3f:42:be:07:
35:f0:2e:a5:d1:57:52:9f:de:f8:05:22:77:12:b0:
75:b9:1e:1b:3f:3d:e7:a7:cd:59:32:2f:87:75:30:
a7:46:bd:4f:6c:33:67:a1:85:f8:64:f9:55:f4:df:
ec:d0:9c:aa:b2:2b:63:ba:c8:3a:19:eb:49:ea:f8:
80:bf:56:81:3f:aa:06:04:c3:7e:8c:42:4f:5e:7f:
de:89:6e:a5:94:c9:3a:64:ea:d2:ac:ee:7b:18:20:
81:57:47:8b:ea:33:f7:fa:95:8c:a1:20:54:2f:ff:
c7:ca:16:c1:6b:d2:67:85:76:f0:8c:8b:aa:09:65:
c0:bf:71:3e:ef:76:5d:fb:49:35:71:e7:74:05:1f:
3f:db:1c:b3:2f:48:75:bf:c7:f4:80:71:ee:aa:ca:
79:a3:f5:62:98:da:5e:46:36:d2:e6:6d:05:1e:6d:
cc:bf:22:4c:2a:a6:cb:09:31:b1:6f:f7:35:e2:79:
d1:85:8a:f5:55:6b:b0:a8:5a:84:26:60:66:d2:80:
86:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:42:44:65:BE:84:71:42:DA:6C:F0:A1:C8:68:26:6A:F3:24:46:C8
X509v3 Authority Key Identifier:
keyid:66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:f3:8b:d8:4b:81:f0:c7:f7:c9:80:6b:9e:28:9c:75:95:60:
4f:05:a8:24:bf:2e:f8:21:cd:d3:35:f4:56:60:26:cd:66:dc:
75:39:18:e2:cc:e3:b4:b8:0d:26:c3:e0:0d:e1:1a:45:be:c3:
85:e5:01:39:05:24:ac:47:33:05:7c:0c:77:ba:76:9b:0f:af:
f5:a4:ac:c5:a6:25:91:01:59:f0:f4:81:94:0e:d2:fc:77:2a:
4f:23:d6:d4:df:63:33:fc:91:ad:72:6b:a0:b5:18:95:f4:26:
28:6c:bb:76:62:57:3c:27:ae:76:2b:2b:61:f2:f6:8c:fa:09:
4d:3d:c0:40:f0:05:13:d8:65:53:7d:0e:c5:d5:41:b2:f1:63:
ab:e6:47:66:76:38:ab:61:07:a6:e0:8a:8d:05:6b:8c:fa:a0:
11:d6:13:dd:73:c7:a6:4f:5f:17:7f:e2:12:af:43:3c:01:c3:
bb:44:a7:ec:b8:56:68:54:cf:9d:3d:f2:47:58:c5:bf:16:c8:
52:54:dd:11:c0:98:53:60:eb:b8:cb:5d:75:af:ea:f7:24:bb:
c9:8b:92:d3:20:dd:92:9b:f0:67:51:2d:30:de:24:3f:dd:c8:
d7:a7:ea:05:fb:4f:34:b9:7a:d4:4b:d3:5b:ac:60:81:dd:0a:
2b:b9:a1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:16:03 2026 by rpki-client