
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
File: Zw46BnIWhKtHO7vlzCLPBdAkv20.mft (raw, json)
Hash identifier: T7FQFF6Qpzn0ERxJ6OAijga3hQqwUgp5yXxGP681Xko=
Subject key identifier: 28:3E:2E:64:3E:C9:BE:63:8F:AD:54:33:43:D9:0D:1B:E9:8B:4E:46
Authority key identifier: 67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D
Certificate issuer: /CN=A91EAE0A/serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
Certificate serial: 013E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
Manifest number: 0134
Signing time: Thu 23 Jul 2026 07:17:01 +0000
Manifest this update: Thu 23 Jul 2026 07:17:01 +0000
Manifest next update: Thu 30 Jul 2026 07:17:01 +0000
Files and hashes: 1: Zw46BnIWhKtHO7vlzCLPBdAkv20.crl (hash: x3Y49VsoCa25RWWbMG8g10U2Hh0goNySUfcscSkofMg=)
2: C491ED725A7A11F083B3F885C4F9AE02.roa (hash: 7WBAHsig/Kovz/pUrk3p+Cxc7oQA5m4kNqg7vSnWYU8=)
3: 2018750A5FC411F0ACE3A087C4F9AE02.roa (hash: R8o39adrmBVnGQ0//ScQ4qDFf9KvWQlMZLY/6u7Uyoo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl
rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:17:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 318 (0x13e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE0A, serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
Validity
Not Before: Jul 23 07:17:01 2026 GMT
Not After : Jul 30 07:17:01 2026 GMT
Subject: CN=6a61bfed-3615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:47:5d:f0:3d:55:8a:35:d9:dc:a5:2b:6b:
2e:b8:3b:48:e8:91:c5:7d:d1:d4:3f:54:24:ab:d4:
bc:f9:f9:a6:3d:17:3d:ec:89:3b:3b:28:ee:05:a1:
84:33:e8:77:44:63:2f:7a:be:4d:05:66:d9:26:78:
87:03:af:4f:88:31:22:99:c6:1b:ea:dc:07:c6:c7:
de:4b:7a:87:c4:a3:88:3a:df:a1:9a:5b:70:9a:78:
b8:33:59:07:31:0e:55:99:78:e0:f3:05:4a:76:95:
00:40:5c:17:25:50:ec:a8:fc:93:36:26:0a:2f:67:
f9:e9:ad:47:74:42:56:24:60:85:7d:7c:3b:fa:34:
ad:cb:b5:e2:c3:ee:85:19:bc:5b:cf:9b:09:6f:64:
0c:1a:36:ce:44:b4:f7:31:6a:64:ef:90:51:20:15:
5b:6e:65:95:f1:8c:34:b4:e0:63:96:20:6a:bd:35:
eb:39:8e:f1:24:24:88:ab:7e:99:ab:67:8f:ec:1a:
ad:58:00:04:c5:74:b0:e6:fe:2f:27:c3:62:9c:36:
6c:d1:82:d0:94:8c:cc:6b:7f:50:e2:6a:5a:de:3b:
10:c6:40:e2:bf:dc:1e:26:81:f3:5e:07:1b:b9:e9:
80:5f:96:ab:db:e0:28:6b:12:09:56:44:42:73:91:
9f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3E:2E:64:3E:C9:BE:63:8F:AD:54:33:43:D9:0D:1B:E9:8B:4E:46
X509v3 Authority Key Identifier:
keyid:67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:5f:ab:c5:7c:17:91:e5:d2:4e:6e:0c:30:fa:10:67:62:6f:
9d:dd:e9:7c:e1:c4:b5:75:b0:08:d1:ca:c6:be:f8:bd:8d:35:
0f:f1:72:7a:41:e0:51:da:6f:be:b3:ae:5c:bc:38:47:6e:ec:
3a:8b:65:e8:59:86:c9:71:e5:8e:5f:88:f0:06:ba:3d:4f:02:
3d:5c:83:fa:c9:90:f9:99:38:db:72:2e:1b:12:33:ee:5c:59:
99:4e:97:83:62:c7:0b:c7:58:41:b5:40:41:f2:45:80:e7:f3:
32:f1:d0:0a:7c:c0:90:90:4a:0e:f7:f2:9b:1a:69:2e:a8:de:
65:69:b9:a2:c2:df:0f:e1:7d:50:95:52:03:7a:87:5e:7e:6b:
19:d0:97:d3:2c:c6:2d:b4:e3:df:88:30:62:46:3c:7c:48:59:
35:c9:e6:17:ab:3b:77:e2:67:68:4d:04:68:d8:df:b1:21:b5:
0d:6a:b8:02:19:82:94:02:9a:8a:d8:2b:68:71:dd:fa:f8:09:
af:4a:24:70:6a:0a:57:14:69:86:7a:18:73:d5:1f:19:d3:14:
89:2a:1b:32:ae:2a:b3:25:39:0c:40:a3:42:85:19:4f:00:4b:
2d:a1:ca:bc:6b:80:33:18:96:17:ad:24:fa:be:a4:f4:a6:08:
b2:ec:6d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:32:41 2026 by rpki-client