
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
File: Zw46BnIWhKtHO7vlzCLPBdAkv20.mft (raw, json)
Hash identifier: liRQQFoXzNRK/cX5uuSvhBFZZsUUEuEaixaoEwmtvr8=
Subject key identifier: B9:7A:A7:EC:49:A8:58:D6:7D:94:52:D6:F0:CF:9B:EE:05:9E:4E:87
Authority key identifier: 67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D
Certificate issuer: /CN=A91EAE0A/serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
Certificate serial: 011A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
Manifest number: 0110
Signing time: Mon 11 May 2026 06:08:55 +0000
Manifest this update: Mon 11 May 2026 06:08:55 +0000
Manifest next update: Mon 18 May 2026 06:08:55 +0000
Files and hashes: 1: Zw46BnIWhKtHO7vlzCLPBdAkv20.crl (hash: wkmMgCyXjK294A7bRsa1gFbUn3C5D+TV5Hz/q97uX8A=)
2: 2018750A5FC411F0ACE3A087C4F9AE02.roa (hash: R8o39adrmBVnGQ0//ScQ4qDFf9KvWQlMZLY/6u7Uyoo=)
3: C491ED725A7A11F083B3F885C4F9AE02.roa (hash: 7WBAHsig/Kovz/pUrk3p+Cxc7oQA5m4kNqg7vSnWYU8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl
rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE0A, serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
Validity
Not Before: May 11 06:08:55 2026 GMT
Not After : May 18 06:08:55 2026 GMT
Subject: CN=6a017277-56dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ce:ef:e6:74:05:85:29:6e:59:2b:08:0d:e0:
83:d4:7a:7b:09:af:72:55:ae:de:c7:13:07:01:2f:
2a:b6:8e:8b:2a:f6:d8:93:b7:5b:4b:ca:a5:5a:5e:
c6:6a:e1:62:71:a0:4a:05:82:cd:51:26:b4:54:a8:
64:39:65:86:97:60:e4:91:81:2f:34:94:72:52:77:
f6:c3:27:4a:67:d9:fb:18:d0:23:47:20:1a:2c:c3:
e3:45:d8:c7:e0:83:59:93:87:c7:58:74:25:50:e1:
1b:02:fc:20:f6:7c:bc:51:2a:0d:f9:2a:6e:d9:7c:
c6:2b:7a:13:61:bd:74:ca:f5:17:82:7b:81:17:b4:
5a:16:d1:45:96:ec:02:ef:76:5b:33:4e:c8:35:c4:
d0:37:4f:40:23:0b:f2:3f:02:8a:4c:04:ab:44:f9:
3f:56:5f:e7:ba:a0:6c:e0:d6:69:20:0f:46:85:5c:
50:0b:18:04:0e:fe:96:b5:93:ab:cc:75:64:fc:06:
08:62:92:83:f2:fb:63:17:11:d5:64:b9:a4:1c:85:
ff:d0:6b:f4:6c:f6:30:5f:d1:4d:5a:13:46:77:a6:
2b:45:74:a6:4e:6f:e1:7e:0a:97:40:6e:ab:d6:2f:
93:09:f7:17:ad:31:04:52:15:ef:60:3c:ba:02:3c:
fb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7A:A7:EC:49:A8:58:D6:7D:94:52:D6:F0:CF:9B:EE:05:9E:4E:87
X509v3 Authority Key Identifier:
keyid:67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:8e:88:be:bd:70:f2:55:5c:4e:cb:fc:65:e6:e8:52:01:e2:
b5:24:09:d1:81:5b:50:ea:5a:8c:7c:d4:5a:d7:8b:a4:18:bb:
ae:ad:b0:97:ec:23:c0:32:9b:eb:0c:e9:fd:2b:4f:bb:87:91:
1e:dc:80:2b:b4:50:99:a9:25:ad:5d:a0:ff:4b:29:fe:ce:9b:
8f:1c:ff:d4:38:5e:ff:af:b1:d9:cd:11:de:b8:58:cd:69:34:
60:ac:01:07:8d:85:85:f5:d7:6d:d5:6f:bf:5d:a3:8f:b4:46:
55:c4:92:4d:b3:8e:67:5a:f2:98:53:bd:cf:de:36:2c:3c:3d:
6c:9d:e3:81:d4:b9:b0:9b:30:81:f2:de:e0:0b:ae:a4:ef:9e:
25:9a:39:77:b3:33:e9:2d:7a:75:77:7d:63:6a:1d:c6:03:e5:
25:f7:be:4b:44:84:6f:6f:6f:b1:7a:fb:d5:e9:08:b8:7a:eb:
fc:c9:5c:90:9f:05:5f:29:ac:8c:62:9b:3d:ff:ab:aa:71:a2:
7b:79:7b:4d:b1:36:ee:01:b9:77:1a:9c:31:28:2b:61:bb:49:
5c:59:a1:34:d1:e3:64:f7:90:a9:4c:ba:53:f6:f6:b2:3c:5c:
dd:d1:c9:1f:6c:85:e1:14:62:95:28:a0:b7:37:93:1e:bb:82:
0a:41:1f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:23:32 2026 by rpki-client