
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
File: ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft (raw, json)
Hash identifier: 2z+WTLpgBhNd9KoH5mb1btMnwCyAK1aGPIwrpanVQjY=
Subject key identifier: 90:7F:2C:12:05:94:AB:AE:FB:D8:98:C4:7E:35:D8:87:DC:99:26:7D
Authority key identifier: 64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD
Certificate issuer: /CN=A91FF14D/serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD
Certificate serial: 9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
Manifest number: 9D
Signing time: Thu 23 Jul 2026 09:09:12 +0000
Manifest this update: Thu 23 Jul 2026 09:09:11 +0000
Manifest next update: Thu 30 Jul 2026 09:09:11 +0000
Files and hashes: 1: ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl (hash: Ag11tI3ERqUK8Bqq/XnNBWvd9Cq6BiRLofpPzNIhY7U=)
2: 18F61C18939B11F0820C0E13C4F9AE02.roa (hash: ywYpRYCAQwXCZMjr3c7Rlx0ujNmnV92c95uYASJL2t0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl
rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:09:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF14D, serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD
Validity
Not Before: Jul 23 09:09:11 2026 GMT
Not After : Jul 30 09:09:11 2026 GMT
Subject: CN=6a61da38-413a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c3:1e:80:2c:81:7e:95:9d:90:8a:c7:66:bc:
c0:46:c7:60:36:e2:4a:05:a9:bf:c5:5b:22:c6:0d:
54:62:da:62:af:d0:b9:2e:ec:13:5c:44:ce:93:05:
50:d1:ad:05:79:1b:cd:95:47:26:24:63:ae:aa:f2:
88:10:c8:58:95:ae:e4:ac:d8:6e:b6:32:8d:47:48:
44:2b:4c:e8:72:18:59:5e:6b:5e:74:dd:20:a3:02:
40:3c:56:45:4a:b5:1c:d7:7a:ab:cb:19:c8:3c:d7:
91:fd:cd:64:43:2a:7b:89:65:1e:c6:5d:0a:6b:3a:
52:c7:d1:14:04:d0:b8:aa:68:e1:e6:4a:9b:8a:b3:
9e:b8:07:59:60:e5:53:ef:7e:b3:b9:9c:79:e4:93:
ba:77:0c:30:bb:ad:e0:ec:d7:99:15:4b:42:b3:51:
fd:9c:c9:f9:6f:d8:1a:4a:b1:9c:c5:d4:cb:5f:2e:
0d:6b:10:ec:56:fc:36:14:b6:4a:af:ec:4b:d8:2a:
e4:38:77:80:54:09:89:0d:d4:e8:d0:a8:0a:db:8d:
e4:e8:f2:e3:3d:16:c0:59:9e:05:24:7b:52:3b:9a:
13:22:12:c4:83:f6:01:84:9b:b0:d6:14:70:ec:96:
e2:6b:39:ea:03:76:6c:04:78:69:cf:22:cb:ab:20:
39:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7F:2C:12:05:94:AB:AE:FB:D8:98:C4:7E:35:D8:87:DC:99:26:7D
X509v3 Authority Key Identifier:
keyid:64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:b0:a4:65:d6:d5:08:98:b9:e7:fd:cd:6c:e7:3b:5f:32:eb:
da:46:cc:60:a1:21:32:09:4a:df:f2:54:6e:4f:47:c7:2e:5d:
89:10:53:6d:ea:83:2f:54:5a:2a:74:43:92:b5:83:9c:19:cb:
37:12:af:f4:6a:6a:b7:d1:15:af:4a:94:62:7e:8b:95:ef:6e:
b9:af:3f:6a:67:7e:71:e3:3d:ec:28:51:79:4f:38:2b:3e:2d:
ff:80:f8:89:66:c8:a2:df:22:cb:b5:3d:c3:31:77:80:b1:14:
b5:58:e8:55:39:0d:ab:55:cb:f3:02:94:d6:23:1b:df:34:16:
d8:92:12:fa:33:ff:9f:a5:5a:8a:bd:2e:bf:3c:2b:85:79:10:
d5:86:a8:ac:04:e9:1c:06:6e:04:18:64:e2:1f:62:fa:b3:39:
eb:4a:fe:de:9b:cc:c0:cd:b9:ba:4b:bb:69:88:b7:57:10:96:
38:97:d0:c3:8b:3b:e5:09:58:d9:1b:90:3e:93:02:fc:f9:82:
24:45:7e:ac:c4:be:36:32:5f:a4:cc:3a:93:68:71:a6:83:2e:
88:e2:f9:2c:55:b6:73:41:f7:1f:05:04:46:a4:25:79:8b:e6:
f0:f1:71:89:52:96:e9:b2:62:6f:56:3f:a3:cb:3c:5f:6a:c0:
dc:c4:81:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:57 2026 by rpki-client