
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
File: zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft (raw, json)
Hash identifier: rdoTxG029rf33lU6ssO5ySM5olSkdSDJ/sqxu7r1BKc=
Subject key identifier: 90:76:98:B6:BE:32:77:52:27:9C:F4:21:9D:44:72:D3:7A:65:04:94
Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14
Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
Certificate serial: 0802
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
Manifest number: 0796
Signing time: Wed 22 Jul 2026 22:34:17 +0000
Manifest this update: Wed 22 Jul 2026 22:34:17 +0000
Manifest next update: Wed 29 Jul 2026 22:34:17 +0000
Files and hashes: 1: zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl (hash: nvWIWmrBvBVFbcKvuy/oQM9tfNvUWsv8SC4FXiHtr8E=)
2: 337DA192C3FC11EF8C3B0B5DC4F9AE02.roa (hash: jdZ9eU0HcGePAnaPpQJ/8+6uq872C01hZ+qnBvUiNlQ=)
3: B23B879EE89C11ECA30FD20EC4F9AE02.roa (hash: x07pQS6pEgJZLrxI+4SzaUGa4YwQ96qN1jF+DrtdcJY=)
4: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (hash: Ro74anOTti8QG6vyjwS8aXc9bfV+QmfdwMUJorqRPP8=)
5: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (hash: td9+M54k5hj2c/thTOFATgj6CforEojuE42TknTzpYk=)
6: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (hash: a9anV1wkhAhqukLm8HrqODKS0piPOQEQ02jiRXV3Ak4=)
7: 90BBD1B6884C11EB88489B75C4F9AE02.roa (hash: H5yiTmZmqNzfgLkNUSshTejgEC9QW5DzJpuCaDVZPHo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl
rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:34:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2050 (0x802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
Validity
Not Before: Jul 22 22:34:17 2026 GMT
Not After : Jul 29 22:34:17 2026 GMT
Subject: CN=6a614569-092b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:59:f4:fe:b5:4a:54:e4:ee:f2:67:2a:e6:b3:
b1:ab:c1:a3:3d:c4:4e:57:1b:39:b3:e4:dc:17:1c:
dc:98:5c:3f:da:cb:3b:50:5e:e9:ef:7f:30:12:41:
ec:9e:cc:0e:96:8c:15:67:c8:46:56:ce:84:60:6e:
f6:08:3e:5c:35:14:d8:5b:a7:fc:69:86:7a:38:32:
71:ab:8a:cd:e5:43:a2:12:99:eb:85:b2:e2:0d:c8:
77:81:dc:c8:1d:56:fe:54:7b:89:e6:47:19:61:ea:
d4:a4:a5:30:0a:bb:86:fa:ea:0d:a5:b3:53:27:da:
8f:63:fc:53:c7:1d:21:c7:11:a5:20:ab:83:aa:81:
24:50:38:a0:d6:9d:82:0e:38:f3:2e:88:a5:bb:01:
fb:26:fd:93:db:a3:98:11:8e:8e:97:ae:76:43:1d:
73:3f:11:53:f3:94:06:27:a6:23:ca:cb:20:f7:10:
1d:20:14:33:91:77:9e:c6:e1:39:1a:e6:2b:36:01:
ee:7a:bf:f1:3d:58:e3:8b:10:70:d6:13:00:40:f5:
81:fc:de:21:f3:71:b4:c9:13:a5:6f:09:7f:a5:b4:
40:5b:83:62:44:e1:3a:88:ac:e9:7d:40:43:b9:bc:
b3:86:18:69:38:25:32:cd:30:27:23:02:d8:77:56:
1f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:76:98:B6:BE:32:77:52:27:9C:F4:21:9D:44:72:D3:7A:65:04:94
X509v3 Authority Key Identifier:
keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:00:11:ff:48:78:89:ed:5c:08:9e:c6:bd:ef:e1:9a:46:2d:
b0:eb:53:b2:73:17:27:b5:7c:13:da:75:c4:87:aa:56:32:bd:
c7:ba:e3:5f:6e:be:99:76:47:50:91:89:23:11:fc:43:d0:11:
83:b7:32:0a:1c:6b:de:cd:65:47:49:11:e3:4f:30:66:4e:85:
66:fb:df:68:07:dc:74:30:8e:24:82:52:9a:ec:af:af:c0:98:
0a:c3:e5:44:2e:0c:05:ff:3d:f5:9c:b6:7e:2e:c0:7f:d3:be:
28:b7:09:42:93:57:34:11:9e:1a:a2:b4:c8:02:d8:8a:4f:73:
90:8e:60:0b:8d:d9:0b:4f:27:8f:53:ac:0b:4a:e3:51:f4:d0:
5f:8c:2d:b8:27:49:60:d7:87:52:2a:3e:23:31:a2:9c:b5:50:
a8:c7:69:2e:8b:ce:69:ba:7f:8e:78:49:71:ab:83:59:e4:1c:
da:d0:38:17:5e:00:d9:e6:bf:66:25:35:a1:98:d2:09:44:36:
24:04:bf:0c:8e:fc:10:67:2a:65:00:d3:42:ff:b1:27:1f:60:
d5:72:61:09:00:bb:da:ba:fa:3f:d6:da:d3:27:d3:b9:d4:b3:
e7:d6:0b:3f:0d:f1:c5:2e:72:0f:a2:13:3e:49:d7:7d:77:9e:
d6:e5:9e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:23:28 2026 by rpki-client