
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft
File: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft (raw, json)
Hash identifier: iDmgT/6Q6SjY1DwITQXWFxGA1V9eKziOBhSQZ5rsAco=
Subject key identifier: 84:49:E7:1C:90:68:61:EC:C6:D0:3B:17:C0:ED:F2:38:DB:CA:F7:2A
Authority key identifier: 64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA
Certificate issuer: /CN=A91E2364/serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA
Certificate serial: 0D7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft
Manifest number: 0D5C
Signing time: Wed 22 Jul 2026 18:17:30 +0000
Manifest this update: Wed 22 Jul 2026 18:17:29 +0000
Manifest next update: Wed 29 Jul 2026 18:17:29 +0000
Files and hashes: 1: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl (hash: wB2NdMizEbCL6sPLWYsvukfWr+KqQab1Mc5/JA1qlEU=)
2: 5A69D6D4824811EC9AAB122AC4F9AE02.roa (hash: uG1n6oQlH/BD2kN8eezzTV0mrmttdYgvZK05ssYpezk=)
3: FED80F56E19811EC860C6F38C4F9AE02.roa (hash: tYrptTReRqZO1YPDqoVNFDI5YhGz7SlI6PvwAcljtcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl
rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:17:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3455 (0xd7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2364, serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA
Validity
Not Before: Jul 22 18:17:29 2026 GMT
Not After : Jul 29 18:17:29 2026 GMT
Subject: CN=6a61093a-48a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8f:38:27:d5:6e:52:b8:d4:47:a8:6d:3f:fb:
7d:a2:8d:12:e7:8f:45:f1:4b:f8:01:a8:39:1f:4a:
0d:b8:ac:1d:69:8b:a4:bb:92:b7:21:43:d0:65:40:
ae:eb:e1:fa:af:4a:5b:f9:d2:95:81:69:0e:10:b1:
28:aa:29:d4:4d:85:7d:ed:ff:20:9c:d7:96:33:4b:
fc:32:e5:0a:c4:f5:e5:27:98:88:77:d3:5c:c2:00:
7e:cd:45:e5:f6:2f:2b:67:33:1e:c4:cb:84:8a:4a:
7e:32:9b:e1:38:60:46:80:e0:4c:b7:38:3e:ee:ab:
c2:ba:eb:53:c8:e8:7e:f4:85:63:8c:e0:75:81:a9:
82:89:c0:c9:e1:98:30:55:0a:4f:d5:f3:36:b3:64:
83:7b:e5:55:1e:e2:88:22:b3:d4:02:02:8a:07:71:
56:b2:6e:28:b8:ce:34:4a:db:e2:24:a7:41:3c:e5:
60:4a:55:36:79:68:67:a1:c8:eb:75:0d:b1:67:49:
6f:b8:e1:d6:b8:e8:2b:1b:25:d8:e1:10:1e:df:5a:
c1:7b:f8:80:93:b7:94:41:f6:26:97:fb:d6:20:c1:
a4:8a:cf:5e:33:4c:be:36:90:64:50:6f:89:66:6a:
17:ce:58:b1:4b:9d:af:90:83:34:77:f9:23:e4:4a:
f0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:49:E7:1C:90:68:61:EC:C6:D0:3B:17:C0:ED:F2:38:DB:CA:F7:2A
X509v3 Authority Key Identifier:
keyid:64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:81:4b:76:53:b2:d7:71:3e:78:90:b9:a3:c2:9a:f0:c2:5b:
70:28:42:ee:54:65:c2:50:7a:a5:5e:70:5a:f4:30:79:34:9d:
01:b8:d0:61:af:af:14:7c:a8:1b:4f:07:69:22:79:90:a3:ec:
06:38:e2:7b:62:e4:9b:85:3a:e0:90:5b:47:18:d8:1d:4f:d5:
4a:b6:82:31:f7:81:ae:a1:8a:fb:1e:3d:37:a1:ca:95:ee:e2:
d5:ac:06:25:61:31:a7:63:bc:b1:84:42:02:4c:8f:fa:7c:19:
1d:05:8b:be:a9:1f:8c:49:7f:ff:05:15:4f:cf:70:bf:bc:88:
9d:cb:99:95:d4:9a:af:ba:e3:18:27:ed:9b:a2:f2:3b:8d:c3:
4d:fd:54:9a:e4:ee:95:04:0e:17:1d:4e:ef:4f:8d:ee:6f:fe:
8c:67:db:e6:ff:97:b3:ac:ce:2c:d8:20:cd:02:30:9a:a9:8f:
73:c8:a9:c4:f9:95:50:09:e9:f2:f7:97:17:67:ef:7e:7f:40:
ff:db:76:d6:c8:97:5b:b4:54:ca:51:9f:61:e8:02:fc:80:b1:
7e:1f:39:c4:52:12:ee:eb:c0:15:4d:9e:23:c3:cf:39:58:d5:
0b:09:3f:be:28:39:00:21:d4:28:37:38:d5:49:ef:ff:66:f7:
28:df:05:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:25:12 2026 by rpki-client