
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
File: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft (raw, json)
Hash identifier: nrwrcVN6Cb7y+0fTUG360MvljNtRWc/gDkglPWDGsaE=
Subject key identifier: 64:CF:71:F2:CF:13:19:AF:3B:0D:4C:91:B4:4D:61:95:50:60:6F:2E
Authority key identifier: 65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD
Certificate issuer: /CN=A91E77F3/serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD
Certificate serial: 0177
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
Manifest number: 0171
Signing time: Thu 23 Jul 2026 06:21:10 +0000
Manifest this update: Thu 23 Jul 2026 06:21:09 +0000
Manifest next update: Thu 30 Jul 2026 06:21:09 +0000
Files and hashes: 1: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl (hash: YLU5ZKQ76XQbdzaFU7a1okiT+1ZPXp7tdkLu8aJSKME=)
2: 92EBC90CABD111F0B4462F16C4F9AE02.roa (hash: Y/OOSY60AbWXfzo+A9kK6oMwS+RTIvrW3ZiwtXUzU20=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl
rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:21:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E77F3, serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD
Validity
Not Before: Jul 23 06:21:09 2026 GMT
Not After : Jul 30 06:21:09 2026 GMT
Subject: CN=6a61b2d6-5545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4b:e7:a4:ab:79:5e:87:41:e0:2b:8b:c7:bf:
f4:b6:8a:26:e8:e6:ed:ee:49:b6:68:db:fe:4e:f6:
a2:69:9c:e3:28:4b:ab:9c:57:dc:a6:e7:22:de:84:
b1:91:ab:dc:d5:f9:57:eb:b9:9b:da:c2:ae:87:18:
97:f9:72:fe:6a:1d:a0:84:41:6d:0a:4b:a1:8f:86:
77:76:96:f8:86:42:cb:d7:00:84:88:11:ad:73:e1:
fd:b9:cd:b6:47:79:64:75:79:5c:8a:71:7a:0b:ab:
ea:9e:a8:39:85:61:ec:14:f2:f7:2e:a3:39:a1:d2:
70:9c:ae:a5:81:c4:30:76:2b:d4:44:d2:45:d1:9c:
cf:6e:5d:3d:df:a4:95:b0:03:e5:7a:a9:eb:1b:32:
9d:a2:7b:d4:d0:44:3b:b0:1e:ca:ab:06:7b:d3:a8:
ba:e0:aa:a2:e5:2c:79:58:15:91:15:a9:9d:be:af:
93:c9:f3:f8:56:91:66:24:79:aa:b2:2c:74:81:7b:
27:c1:3a:2c:7d:01:9a:93:4d:0d:eb:6e:70:c5:6c:
c6:dd:a9:6e:b2:8d:c1:60:2b:ca:d5:c5:de:64:de:
b4:f4:f8:b8:55:8a:40:da:b3:b8:b6:81:89:68:a9:
a0:81:89:c8:f1:6c:77:82:fe:1e:f1:c0:a7:e0:9c:
5d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CF:71:F2:CF:13:19:AF:3B:0D:4C:91:B4:4D:61:95:50:60:6F:2E
X509v3 Authority Key Identifier:
keyid:65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:2f:c7:e1:31:8d:59:45:c2:a2:1b:c6:79:e9:40:93:f8:ba:
17:6e:a9:10:19:32:da:12:97:10:96:2b:6b:45:96:ea:9b:c6:
51:b7:ee:ef:85:d3:82:d8:41:90:32:38:e0:10:e9:c7:6a:1a:
a6:3f:b5:6b:b3:af:25:74:8e:d6:ce:d2:d5:3b:e0:6e:1c:c0:
39:5a:d1:00:e4:c4:bc:85:09:14:30:c3:a1:5b:d6:d5:fd:4d:
d9:00:a4:7f:b3:e2:ae:fb:3f:20:1f:c0:e4:bb:cd:e0:83:9e:
04:80:e5:73:a4:65:9e:35:0d:18:a5:87:7e:11:40:e3:31:06:
00:e0:7d:69:12:bd:27:ea:d0:ac:d7:e1:7a:0a:ce:35:0a:d2:
e5:ea:ce:10:d5:ae:92:0c:f5:d0:58:c7:38:5f:32:17:40:52:
0d:61:55:4f:fc:b9:26:41:1c:4a:72:69:6d:41:a2:2b:f4:2a:
f0:7d:b8:f7:89:03:19:42:04:16:48:d5:5a:e0:6c:81:43:8f:
da:dc:17:7a:56:a3:d6:97:54:0d:7e:1c:ab:b8:55:4b:f7:15:
83:f1:5d:24:5b:af:49:45:bc:65:e6:b3:42:c5:e2:df:19:b4:
e9:f4:4f:fb:68:15:42:5d:a4:e5:bb:a6:b4:e0:b9:f7:5f:21:
9d:c5:2f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:13 2026 by rpki-client