
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft
File: z4nWqxHn1Hqhe0MJxypytxy6R64.mft (raw, json)
Hash identifier: 1RzjLEOu7inB+wPVn7GBFapcSCGw2THKNClTrlT2Ypo=
Subject key identifier: 3B:2B:1E:FB:42:41:08:EA:BA:58:4F:10:94:EE:86:F5:46:16:F3:9C
Authority key identifier: CF:89:D6:AB:11:E7:D4:7A:A1:7B:43:09:C7:2A:72:B7:1C:BA:47:AE
Certificate issuer: /CN=A91E4D9B/serialNumber=CF89D6AB11E7D47AA17B4309C72A72B71CBA47AE
Certificate serial: 0923
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4nWqxHn1Hqhe0MJxypytxy6R64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft
Manifest number: 0916
Signing time: Tue 12 May 2026 20:20:56 +0000
Manifest this update: Tue 12 May 2026 20:20:56 +0000
Manifest next update: Tue 19 May 2026 20:20:56 +0000
Files and hashes: 1: z4nWqxHn1Hqhe0MJxypytxy6R64.crl (hash: rGhYJ3xOFZ6G7sx1ZBRNseQybBlys3np9ukhbSfDfsk=)
2: CCF7B8AA22B811ECAD21FB20C4F9AE02.roa (hash: fbNgVaH91F2eFS+HbujhsXeCcZKoS980Yjgt5GelWLU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.crl
rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4nWqxHn1Hqhe0MJxypytxy6R64.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:20:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2339 (0x923)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4D9B, serialNumber=CF89D6AB11E7D47AA17B4309C72A72B71CBA47AE
Validity
Not Before: May 12 20:20:56 2026 GMT
Not After : May 19 20:20:56 2026 GMT
Subject: CN=6a038ba8-fdd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:80:cc:0f:b5:14:96:2d:07:83:a4:b7:66:33:
18:23:5c:56:fe:61:e3:af:8a:b2:72:08:5c:31:52:
ec:b6:ad:08:10:c8:82:9e:d6:5d:80:3e:a7:3e:c8:
47:b5:59:52:21:f0:ab:ea:19:94:60:a1:1f:65:d7:
30:1d:5b:12:e6:c5:d8:bc:16:3c:2e:e0:ca:fc:08:
28:24:6f:ad:9e:5b:c2:40:11:13:da:49:78:2a:31:
f3:ef:93:f7:09:1b:64:04:13:f2:5d:50:a2:4e:dd:
f0:e7:28:48:9d:ee:a2:dc:ff:f8:47:b0:29:3e:3a:
ab:06:8b:d3:82:84:4b:3e:93:81:33:93:bd:fb:19:
ef:e9:d1:50:03:8f:56:f4:b4:c1:e7:bb:e6:8d:20:
94:8e:1b:e4:f8:9d:c1:bb:b0:e9:ad:6e:93:5f:e2:
50:74:6a:3a:6f:26:54:c5:92:0a:14:27:a5:d3:f4:
8e:03:2d:e2:6e:07:f0:4c:15:ee:47:57:c4:bc:69:
2e:9c:c9:b7:1a:8e:4d:57:f2:e7:13:92:4f:57:3f:
7c:be:d8:41:bd:44:62:3e:2e:28:73:48:56:1b:77:
6e:2b:bc:38:b3:9e:4c:e9:ad:eb:f9:93:f1:dc:92:
7b:2d:10:2c:23:25:4c:35:b3:dd:d4:6c:3d:86:f3:
e8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2B:1E:FB:42:41:08:EA:BA:58:4F:10:94:EE:86:F5:46:16:F3:9C
X509v3 Authority Key Identifier:
keyid:CF:89:D6:AB:11:E7:D4:7A:A1:7B:43:09:C7:2A:72:B7:1C:BA:47:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4nWqxHn1Hqhe0MJxypytxy6R64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:8f:d2:a1:40:12:3e:63:09:d4:83:ba:f7:51:14:c4:18:32:
a7:17:dc:31:1e:76:10:55:ac:42:09:80:fb:6a:28:38:ab:70:
d5:df:21:88:aa:b0:f4:49:16:55:94:64:99:ab:4a:83:9d:1b:
23:39:5a:7c:f5:49:d2:df:66:7e:ad:e8:ad:5a:33:7b:7a:78:
e3:06:9f:be:af:bc:60:79:db:9a:03:6f:4d:57:90:65:17:e1:
8e:ca:7e:df:75:23:28:4e:24:f2:33:50:0f:2a:66:74:da:ea:
c3:f7:24:f4:f0:b9:92:61:c3:2c:81:6d:b2:f6:e0:88:20:4d:
69:d8:1c:ab:5d:88:7d:3d:c3:14:14:f4:15:04:f2:0b:3b:b1:
2b:df:92:a6:83:8d:07:b9:a1:f3:6d:ed:18:5f:40:c0:9e:34:
95:98:98:c3:49:f8:8c:dc:a9:b3:1c:3a:b5:e0:26:38:10:8a:
ca:44:82:9e:5a:65:09:af:84:14:23:df:81:b1:0c:4e:a2:61:
4c:69:d1:06:90:18:02:42:d1:32:4a:5b:32:8b:02:a4:e5:0e:
09:b6:9a:90:1d:39:ef:f9:7d:ea:0f:ce:71:bc:32:c4:a4:91:
e0:e5:bd:25:cf:00:7d:e5:9b:86:ac:22:60:87:aa:79:08:d9:
19:33:21:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:54:43 2026 by rpki-client