
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
File: zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft (raw, json)
Hash identifier: Ki9THW3WkTKBepMnA0uxfCb7LSxA9A6ikNZmCoBl/ww=
Subject key identifier: 67:F8:25:F0:90:D7:FA:BD:22:A6:8C:B8:BF:24:1D:CD:32:2B:6E:C8
Authority key identifier: CC:9F:2F:BB:FA:ED:C4:4C:76:32:B1:8C:2B:D3:BC:58:EC:ED:7B:F5
Certificate issuer: /CN=A91E8FFF/serialNumber=CC9F2FBBFAEDC44C7632B18C2BD3BC58ECED7BF5
Certificate serial: 43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
Manifest number: 41
Signing time: Mon 11 May 2026 08:36:56 +0000
Manifest this update: Mon 11 May 2026 08:36:55 +0000
Manifest next update: Mon 18 May 2026 08:36:55 +0000
Files and hashes: 1: zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl (hash: HnhTNjffz85MiL7uqm8TsGDNiZWp6G5uhnSSlvvvriM=)
2: DBA60106EED111F0AB3DEEA1736F56BC.roa (hash: Zm5NVQiX1B1lMh6YYC6ofTBSfpDnYcLSn7pw+rOzSFc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl
rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:36:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8FFF, serialNumber=CC9F2FBBFAEDC44C7632B18C2BD3BC58ECED7BF5
Validity
Not Before: May 11 08:36:55 2026 GMT
Not After : May 18 08:36:55 2026 GMT
Subject: CN=6a019528-af2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:19:e8:70:93:58:62:6e:91:d2:76:2d:05:
47:24:4d:84:1d:c3:1a:54:ae:4a:9d:c5:52:da:03:
b9:01:c0:90:9a:8c:0a:9b:bc:e7:38:82:49:16:28:
ec:29:56:9e:d6:23:08:dc:1e:01:94:01:72:fa:98:
01:34:76:81:c0:5b:a1:76:bf:0c:8d:d8:4e:ea:f0:
56:12:f2:50:0d:d7:94:85:d9:15:4f:bf:ba:1f:71:
0e:46:4e:01:a4:7d:e6:12:24:c8:0a:76:9b:fe:95:
6b:b5:05:1a:80:52:ca:c3:cd:83:68:7b:cd:8b:0e:
1c:84:5d:61:d4:dc:b8:d0:c9:9e:18:dc:4c:f1:18:
d3:69:4e:a1:12:aa:55:a6:6c:fa:48:c1:18:63:53:
94:6a:f4:e6:84:1b:58:13:2c:80:95:3f:74:66:c7:
45:12:60:d5:49:0a:1b:86:c6:05:34:6c:68:2d:78:
10:b3:94:bf:15:51:0b:61:0f:9e:77:38:49:31:4e:
d3:cf:3c:2c:7a:55:44:83:6c:bf:de:d6:9f:e1:c7:
4b:5f:57:c1:cd:22:84:fb:93:07:6a:52:f2:83:6f:
c7:63:27:59:ed:6a:49:f4:1a:f9:e2:47:a1:0d:aa:
de:0e:1b:f3:c3:86:7a:7a:42:d5:47:f6:64:f5:ca:
06:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F8:25:F0:90:D7:FA:BD:22:A6:8C:B8:BF:24:1D:CD:32:2B:6E:C8
X509v3 Authority Key Identifier:
keyid:CC:9F:2F:BB:FA:ED:C4:4C:76:32:B1:8C:2B:D3:BC:58:EC:ED:7B:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:ec:4e:a1:78:1d:1b:4c:ac:ec:14:b1:41:81:53:1d:b6:78:
5b:79:38:5e:75:ed:81:bc:5d:bd:90:a8:1b:49:05:8b:8d:8c:
33:9e:d6:87:40:b7:29:6b:23:06:d7:e8:f9:34:f2:d9:75:69:
5a:a8:08:bc:86:f6:1f:1c:dd:64:e6:df:de:e8:ce:df:7c:43:
9f:3b:7a:5e:fd:05:af:a7:f4:7a:d5:ef:b7:64:27:40:d3:75:
fa:28:13:51:c3:c1:b9:f3:a6:d1:d7:7b:96:ca:ae:5f:d5:f6:
0b:ff:e1:40:51:ee:25:a6:47:86:81:a7:2d:a8:5d:44:ea:ec:
ca:55:0c:f5:d4:0e:31:3b:65:b2:f8:7e:97:07:eb:dc:a0:23:
d3:40:a3:b2:94:ae:69:5b:05:4a:99:05:a3:76:82:f1:04:71:
6d:2c:1c:cd:94:a1:57:ba:e4:46:be:93:ff:77:b1:49:39:9e:
bd:19:a3:c6:a6:ef:2d:f4:d0:4c:ce:1e:f5:be:87:f7:9f:c5:
f8:98:2c:a3:41:de:87:36:5b:a2:cd:b0:2d:c3:89:aa:76:1c:
0c:f5:5e:af:b6:3f:d1:cf:eb:a5:ad:ec:d2:18:75:23:59:b5:
18:7f:d4:04:ad:b2:16:40:f9:66:fb:b0:8f:98:f1:89:2f:20:
15:24:22:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:52:59 2026 by rpki-client