
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
File: Zye49DPvL-CAhCxu6KbMPcJEYm8.mft (raw, json)
Hash identifier: 8GDzx9TNoR9LQteL/Xiq51M+FsA0Pa1sJgjRHqU+lA0=
Subject key identifier: 05:44:00:54:A9:89:61:C9:34:37:5F:9E:F7:3D:E7:7D:D5:43:22:E0
Authority key identifier: 67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F
Certificate issuer: /CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F
Certificate serial: 0D23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
Manifest number: 0D0E
Signing time: Tue 12 May 2026 18:11:17 +0000
Manifest this update: Tue 12 May 2026 18:11:16 +0000
Manifest next update: Tue 19 May 2026 18:11:16 +0000
Files and hashes: 1: Zye49DPvL-CAhCxu6KbMPcJEYm8.crl (hash: v20uS7kN8MGjWHqNb2O4sm3TQyu7T4D6JBbjKY6x5yY=)
2: E14507F8011411EAAB0EF153C4F9AE02.roa (hash: Ff/TvlQUYnwser6iOQ55Fx+c++mQlZ6UhNGfpxx3R90=)
3: E0BC0B4C011411EAAB0EF153C4F9AE02.roa (hash: TQPUr83+4QFfxrmveT7ts0ztgC3olEi7fsnrMHT3vIA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl
rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:11:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3363 (0xd23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4023, serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F
Validity
Not Before: May 12 18:11:16 2026 GMT
Not After : May 19 18:11:16 2026 GMT
Subject: CN=6a036d44-0d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:da:bc:f3:dc:01:41:df:d9:1b:57:b8:36:c1:
5c:26:4b:9c:50:f6:cd:55:8f:9c:2f:45:17:5d:e3:
4b:72:50:3b:af:91:79:b1:d3:75:a9:96:c8:93:6f:
38:a4:b3:ff:2a:d1:a9:86:ea:49:91:b6:69:ea:28:
47:71:0d:30:b6:61:42:01:72:48:82:72:b1:3b:fc:
17:00:d3:fb:37:d6:4d:ee:74:30:1e:4c:69:59:42:
39:09:08:59:e1:2e:77:26:20:5a:f9:3b:34:8a:4e:
e9:62:6a:df:d2:f6:63:6d:72:7f:a6:6d:37:42:77:
3d:1e:d3:9b:19:d9:f0:c0:f7:b3:bf:02:1c:8a:3f:
89:b3:78:1b:b8:6b:22:67:94:86:88:45:bb:12:cb:
fb:ba:55:be:76:ea:f1:80:85:14:93:49:a4:43:7f:
a5:3d:03:6b:e7:f7:1b:48:3f:1b:9a:86:c7:4b:35:
30:a3:d4:0c:3d:93:87:19:d6:89:21:44:39:fe:63:
bc:fc:d4:ac:52:ab:c1:5d:d1:cf:0d:30:37:38:3c:
60:3d:57:08:b8:00:66:41:42:98:a1:ad:85:da:3e:
0a:fe:bc:c2:51:0e:de:32:3c:be:9f:ea:f3:86:ee:
40:cb:c8:e3:ef:ad:e4:47:7c:db:2d:e8:9a:1e:83:
c3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:44:00:54:A9:89:61:C9:34:37:5F:9E:F7:3D:E7:7D:D5:43:22:E0
X509v3 Authority Key Identifier:
keyid:67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:cf:ca:09:bb:98:85:43:3a:ad:ff:b4:15:6a:db:cd:fa:20:
ae:52:11:0f:28:af:06:e9:0a:fd:9a:de:b9:90:5b:4e:eb:f3:
e1:b1:2d:a6:16:96:e4:ad:d2:18:49:09:5d:cf:5e:bb:47:0e:
f8:39:5b:20:80:a0:b8:da:d3:0f:1e:f2:a4:77:21:b9:77:5b:
a2:bc:7e:57:d4:ba:f2:64:c9:05:cf:06:a4:ec:3e:47:f0:63:
36:5c:2c:59:7e:ab:ab:63:fb:c8:53:89:ed:2c:b0:bf:18:08:
9f:e2:bf:a0:cf:4d:9d:7f:93:ef:32:58:af:f7:c6:b0:ab:f4:
fc:a8:b5:c7:1e:ea:cb:4e:a7:e0:a5:c0:33:f7:6d:59:87:b5:
8e:7e:84:17:aa:a3:07:cf:7b:ba:5e:87:3a:f9:55:d1:78:b1:
f5:65:c2:84:af:19:fb:87:ef:eb:75:6f:8a:51:01:1f:7b:77:
df:7c:5b:89:70:8c:0d:14:4a:1e:45:ad:3a:7c:df:1f:3a:8b:
47:0d:a5:87:3c:8b:b6:d9:ba:a2:28:ad:13:72:39:62:54:48:
3e:60:b1:7b:99:92:41:ef:c7:08:f7:7b:33:db:73:be:7b:22:
f1:cb:0e:91:b5:f2:e2:4a:20:22:cd:cd:1c:0b:6b:82:18:10:
98:01:d6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:51:46 2026 by rpki-client