
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
File: ZjJswGhaN2NqRbxwlHwhnQtczGA.mft (raw, json)
Hash identifier: XrdrO0/eOhIxmPyniqPb46TZ9nh9ZKQ+NV2haiQ7aj0=
Subject key identifier: 9C:94:AC:AE:B1:05:F6:64:79:3A:3F:4B:52:02:CC:C1:FA:0E:D7:24
Authority key identifier: 66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60
Certificate issuer: /CN=A91E0961/serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60
Certificate serial: CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
Manifest number: C9
Signing time: Thu 23 Jul 2026 08:45:52 +0000
Manifest this update: Thu 23 Jul 2026 08:45:51 +0000
Manifest next update: Thu 30 Jul 2026 08:45:51 +0000
Files and hashes: 1: ZjJswGhaN2NqRbxwlHwhnQtczGA.crl (hash: W4emSCkXVq3v4DiIVqbX7rFDpaXWxHX2kwcgJtLOjSE=)
2: E2245D966E8B11F09764751EC4F9AE02.roa (hash: BxOM7SgqdGJtQ0VBZeNqfMKq52lRmXi/Ew1Q7dVeV+g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl
rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:45:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0961, serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60
Validity
Not Before: Jul 23 08:45:51 2026 GMT
Not After : Jul 30 08:45:51 2026 GMT
Subject: CN=6a61d4c0-868a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:9d:3b:e6:93:16:5f:33:03:c5:36:d7:b6:
f0:ae:aa:6f:9c:52:d1:0f:fe:5c:15:98:01:52:8b:
91:09:61:a3:13:0e:87:1a:b4:da:d7:f2:d8:84:ab:
c5:ef:32:55:be:b4:e9:33:75:6b:6c:34:e8:ca:07:
f1:0f:f5:15:66:a4:78:d2:7a:bc:98:a2:3b:49:f6:
cf:6e:3a:d2:41:db:57:df:ea:52:2b:bc:0c:cc:26:
04:f7:ea:01:32:ce:0c:95:a2:18:19:80:c7:e7:b5:
6e:18:80:fd:18:07:8a:1a:51:1f:10:aa:42:b4:fc:
e6:2b:f8:7e:49:f6:be:cc:e6:7e:8e:cf:dd:3e:d3:
b4:bb:60:ce:ca:e0:de:6a:ac:8e:f0:43:c4:9d:4b:
28:11:dd:74:a3:1a:dd:61:d5:80:2f:73:51:5d:2a:
7f:23:ea:73:1f:9b:18:86:f7:f0:36:40:95:f3:b6:
18:7a:4c:ad:ba:69:7f:c5:9c:cf:62:70:0f:a1:2d:
ba:67:56:6d:51:b5:62:8f:a7:b9:5a:89:10:63:27:
63:ac:31:69:0f:6f:1e:e4:d8:a8:13:81:21:bb:55:
2b:5c:9e:55:77:14:4d:d0:02:96:44:e4:5b:90:b3:
eb:58:d0:0e:59:62:7f:16:8e:00:3e:5f:6e:ba:28:
8d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:94:AC:AE:B1:05:F6:64:79:3A:3F:4B:52:02:CC:C1:FA:0E:D7:24
X509v3 Authority Key Identifier:
keyid:66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:08:7f:f6:08:8a:c3:88:3f:d2:ef:c6:26:dd:d2:99:cd:1b:
c8:fa:7d:71:d5:6e:aa:87:5c:37:c9:2a:23:8a:43:7a:f0:e0:
a5:47:c9:21:f3:cc:5b:9b:7e:5e:28:92:f4:01:e0:e0:25:f8:
bc:b5:a6:5e:2d:d0:4b:87:1b:48:7b:62:b9:00:04:fb:e1:50:
dc:10:45:d8:e7:4d:8f:d2:c2:ae:34:02:14:fa:3e:30:7a:6b:
4f:a4:41:0b:8f:4d:b1:de:1e:e9:8d:da:79:57:ae:f6:37:a0:
fe:73:28:16:e9:43:f2:2c:cb:ef:77:95:b6:b5:c2:97:3c:51:
c1:8a:e2:1a:d8:d2:c9:ea:33:3a:fc:2c:9d:73:c4:1e:62:52:
f8:14:32:36:0e:47:c4:49:23:9c:fe:b3:c8:2e:cf:67:fa:cf:
2e:aa:eb:1f:91:59:90:e1:f1:99:73:59:d7:42:d4:11:13:74:
62:ee:1b:37:b5:8e:42:1a:67:08:ae:8e:24:0e:f6:10:5a:3c:
af:97:1f:88:8a:38:75:6b:57:c6:f2:df:1a:d2:0b:69:6b:d6:
11:ab:a2:d0:ef:ee:05:cc:c4:b0:46:00:0a:6a:40:3b:13:b2:
94:cf:09:fd:15:42:06:a2:5d:30:c2:f4:6c:db:7a:c5:6d:a9:
ae:9f:15:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:38:42 2026 by rpki-client