
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
File: Zye49DPvL-CAhCxu6KbMPcJEYm8.mft (raw, json)
Hash identifier: UO4d2IP1GAr/kELW/00nGycLsHuWCwdU8/jnBPL/KOo=
Subject key identifier: 3C:E0:79:8F:18:A4:08:36:BD:75:D5:81:53:E8:A1:9E:04:03:67:73
Authority key identifier: 67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F
Certificate issuer: /CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F
Certificate serial: 0D4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
Manifest number: 0D34
Signing time: Wed 22 Jul 2026 18:20:38 +0000
Manifest this update: Wed 22 Jul 2026 18:20:37 +0000
Manifest next update: Wed 29 Jul 2026 18:20:37 +0000
Files and hashes: 1: Zye49DPvL-CAhCxu6KbMPcJEYm8.crl (hash: iwA2uPcP3vA57ATk38AMRQTFQwM4McLKjLnHRBj9oDQ=)
2: E14507F8011411EAAB0EF153C4F9AE02.roa (hash: qiDkvBGA0vQoRNYuuefBl5X6My9S37pGkNHkOEYdfqI=)
3: E0BC0B4C011411EAAB0EF153C4F9AE02.roa (hash: hGCYtCOIvO4umfp83BHr43BYp8vvO8LHfZyo0x1hdrM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl
rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:20:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3403 (0xd4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4023, serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F
Validity
Not Before: Jul 22 18:20:37 2026 GMT
Not After : Jul 29 18:20:37 2026 GMT
Subject: CN=6a6109f5-5cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ef:9a:e4:4e:69:6e:80:8f:e5:c4:cf:cd:b2:
c6:05:6d:e6:78:b6:ed:14:13:46:ee:00:99:c2:43:
06:57:db:d4:fe:74:fd:60:49:70:e4:1e:61:97:f3:
1c:dd:f6:22:50:d6:59:09:8d:1e:a1:f5:96:91:bb:
ea:8a:15:1c:c3:e5:b2:05:4f:bc:92:30:24:99:e8:
36:42:a5:53:8a:47:c2:e3:c2:45:21:71:c0:d3:f7:
c2:c1:a8:bd:5c:25:79:c0:48:9a:5d:13:07:7a:8d:
2d:d7:f8:b8:82:3b:53:18:64:f0:45:be:3c:0b:68:
69:90:3d:ed:8c:a4:0a:ad:ed:b4:5b:d3:9e:84:34:
47:40:64:17:cc:c0:40:65:a7:bb:5e:fd:eb:2e:05:
ca:35:0a:c1:39:3b:35:36:72:cc:e1:13:32:2b:9d:
ef:57:42:10:c0:88:1d:4f:cc:51:8f:0a:b9:6d:b5:
4b:57:fe:dc:61:20:e3:db:9f:8d:06:5f:19:54:11:
11:01:44:2a:d0:19:92:91:77:0c:82:90:51:13:0c:
6e:67:f3:dc:89:6e:c6:6b:1b:1b:ad:ff:1a:72:3a:
d9:03:48:33:be:90:93:50:ce:a1:21:1d:30:63:ec:
04:fb:d3:4f:aa:8a:ea:57:41:43:d5:0a:5f:46:07:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E0:79:8F:18:A4:08:36:BD:75:D5:81:53:E8:A1:9E:04:03:67:73
X509v3 Authority Key Identifier:
keyid:67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ad:ae:dd:1b:90:9c:6a:ee:e5:35:0a:78:4c:72:23:53:19:
a3:ec:19:91:d7:9a:82:eb:ec:8e:ab:1f:e8:8a:f2:22:66:bc:
14:a6:b4:2e:09:75:62:db:80:8e:2c:fe:c4:44:35:8a:66:01:
0d:68:6e:b1:07:35:98:7e:85:e5:a3:43:31:05:c7:1c:e2:ce:
e0:86:ba:3f:13:68:8b:47:79:22:5d:fa:04:9e:02:38:32:4a:
c5:72:47:b8:ef:b7:48:b1:39:07:2a:30:aa:ff:a6:fb:33:d1:
47:85:06:23:f4:e8:6f:54:c1:a2:58:ac:69:95:56:fb:de:ad:
26:d0:1c:2b:fe:0e:3e:2b:50:bf:ff:1c:d0:81:ff:0e:c8:2b:
e7:34:2a:fa:24:c0:1e:ba:6f:8a:a3:d4:14:6f:e2:dc:8c:f5:
a5:76:8d:e3:c8:31:6f:6a:64:38:7d:a1:b7:92:77:8d:fb:ec:
be:3c:41:47:93:95:57:d1:5c:d3:4c:c3:9e:78:e8:70:0b:5e:
06:d4:46:c9:56:1b:26:cf:22:cf:91:10:d0:d0:a1:08:8c:9a:
62:48:46:1c:7b:97:66:27:26:40:60:18:9b:76:a4:fb:78:fe:
38:a2:46:b7:30:5a:e3:1d:1c:01:7a:f1:80:21:67:8d:be:89:
6e:ae:d9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:44:18 2026 by rpki-client