
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
File: ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft (raw, json)
Hash identifier: Yv0ucaeyDGvaZqLD+S20wGPiPXGQixaLeDqAv1nNQnY=
Subject key identifier: 9D:DF:14:A0:C2:AF:0E:66:19:26:BC:42:C7:5E:12:84:32:7E:C4:2F
Authority key identifier: 64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD
Certificate issuer: /CN=A91FF14D/serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD
Certificate serial: 7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
Manifest number: 79
Signing time: Mon 11 May 2026 07:51:55 +0000
Manifest this update: Mon 11 May 2026 07:51:55 +0000
Manifest next update: Mon 18 May 2026 07:51:55 +0000
Files and hashes: 1: ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl (hash: OI0v13rWuVLfKRM9YQTgsiAItF42qlY0oMJjNn9gfQQ=)
2: 18F61C18939B11F0820C0E13C4F9AE02.roa (hash: ywYpRYCAQwXCZMjr3c7Rlx0ujNmnV92c95uYASJL2t0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl
rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:51:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF14D, serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD
Validity
Not Before: May 11 07:51:55 2026 GMT
Not After : May 18 07:51:55 2026 GMT
Subject: CN=6a018a9b-e543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:ab:e9:bb:1b:d7:6f:ec:3a:e6:b0:8b:29:
5e:9b:ba:0a:60:41:ae:92:cf:8e:5f:7e:92:77:14:
d8:35:dc:c5:6b:9e:72:4b:57:72:22:e2:b8:6f:45:
6c:ac:29:58:d6:63:3c:a2:36:b3:2f:55:95:6e:bf:
33:06:f2:e3:68:df:57:2b:68:8d:5e:10:4d:b5:e3:
85:cf:26:7c:1d:1b:13:5a:d1:06:d1:b1:bb:8a:f9:
54:1d:fc:30:9f:c5:40:57:6d:44:38:6f:0c:6d:66:
30:7b:d1:d7:cc:6d:4f:67:27:3a:b6:90:01:74:e2:
96:8d:86:4c:0c:69:0f:15:90:7c:62:6d:37:a5:fe:
ce:1e:c3:4d:fc:62:41:a0:7a:43:82:8d:16:d9:2c:
b4:49:4d:ea:99:8b:a1:cb:3c:46:11:ec:f5:0f:42:
3e:34:0b:e0:68:44:22:df:85:86:c2:04:3b:67:cf:
15:8b:1d:32:60:5a:e0:0b:5a:ef:68:44:5f:da:6d:
e2:5d:5d:c6:f5:51:04:96:41:b5:b4:52:38:33:b5:
88:0f:b3:7e:81:ed:3f:f2:50:d1:ef:d3:8f:f1:ac:
b6:52:a6:ff:b5:b7:c5:87:a7:b0:d3:a4:b4:56:3b:
7c:a7:6b:20:de:f1:65:de:d1:6f:ea:92:04:d9:70:
87:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DF:14:A0:C2:AF:0E:66:19:26:BC:42:C7:5E:12:84:32:7E:C4:2F
X509v3 Authority Key Identifier:
keyid:64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:80:7e:c9:2a:01:5e:b1:fa:c4:6a:18:55:a1:2d:44:40:10:
6b:0a:9d:db:41:66:91:4d:85:b6:9a:92:c9:e6:82:de:7e:f4:
95:a9:63:cb:f3:07:36:48:a0:d2:29:2e:2c:04:16:ce:93:b8:
bb:02:a3:c1:88:1c:6d:1f:aa:3e:cd:5d:cf:69:5c:7b:30:aa:
f0:60:36:ba:dd:2c:b8:cc:eb:9b:3e:6f:ea:62:a3:14:cd:42:
f8:06:d4:db:42:31:af:5b:e2:3b:4e:4f:91:2a:a6:8b:b6:b1:
12:ef:5a:e8:74:fd:51:66:a6:b1:8b:1b:9f:fb:3a:42:46:d7:
6a:fe:44:bb:b1:df:e8:1d:83:45:4c:66:d7:8c:e7:ec:d0:7e:
dd:f5:d0:5b:01:21:f6:59:e3:8b:54:a8:48:55:e0:38:5b:08:
6b:bc:ab:88:1d:63:01:7c:29:a0:da:9a:70:9d:4d:9f:e1:e2:
2b:8d:82:9d:b9:49:32:b5:98:1c:20:5c:d4:96:11:16:75:9d:
91:67:af:6f:3d:16:08:33:3f:3b:be:86:aa:64:5c:45:80:80:
0d:f6:c2:d0:6c:7a:1e:6f:8d:f2:c8:32:e0:ab:01:48:83:6b:
40:5b:58:75:6b:bc:03:17:80:12:d9:ec:26:a1:ef:18:c2:99:
11:3d:85:f6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
RjE0RDExMC8GA1UEBRMoNjQzNzdFODcxODY2REQzNzRFQzU5RTIzODNCQTEwRkE2
QTMxRkZGRDAeFw0yNjA1MTEwNzUxNTVaFw0yNjA1MTgwNzUxNTVaMBgxFjAUBgNV
BAMTDTZhMDE4YTliLWU1NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+4avpuxvXb+w65rCLKV6bugpgQa6Sz45ffpJ3FNg13MVrnnJLV3Ii4rhvRWys
KVjWYzyiNrMvVZVuvzMG8uNo31craI1eEE2144XPJnwdGxNa0QbRsbuK+VQd/DCf
xUBXbUQ4bwxtZjB70dfMbU9nJzq2kAF04paNhkwMaQ8VkHxibTel/s4ew038YkGg
ekOCjRbZLLRJTeqZi6HLPEYR7PUPQj40C+BoRCLfhYbCBDtnzxWLHTJgWuALWu9o
RF/abeJdXcb1UQSWQbW0UjgztYgPs36B7T/yUNHv04/xrLZSpv+1t8WHp7DTpLRW
O3ynayDe8WXe0W/qkgTZcIcjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnd8UoMKv
DmYZJrxCx14ShDJ+xC8wHwYDVR0jBBgwFoAUZDd+hxhm3TdOxZ4jg7oQ+mox//0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMTRELzkzNTJDRDVFOTM5
QTExRjA5OEI4MkMwRUM0RjlBRTAyL1pEZC1oeGhtM1RkT3haNGpnN29RLW1veF9f
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWkRkLWh4aG0zVGRPeFo0amc3b1EtbW94X18wLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG
MTRELzkzNTJDRDVFOTM5QTExRjA5OEI4MkMwRUM0RjlBRTAyL1pEZC1oeGhtM1Rk
T3haNGpnN29RLW1veF9fMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCZgH7JKgFesfrEahhVoS1EQBBrCp3bQWaRTYW2mpLJ5oLefvSVqWPL8wc2SKDS
KS4sBBbOk7i7AqPBiBxtH6o+zV3PaVx7MKrwYDa63Sy4zOubPm/qYqMUzUL4BtTb
QjGvW+I7Tk+RKqaLtrES71rodP1RZqaxixuf+zpCRtdq/kS7sd/oHYNFTGbXjOfs
0H7d9dBbASH2WeOLVKhIVeA4WwhrvKuIHWMBfCmg2ppwnU2f4eIrjYKduUkytZgc
IFzUlhEWdZ2RZ69vPRYIMz87voaqZFxFgIAN9sLQbHoeb43yyDLgqwFIg2tAW1h1
a7wDF4AS2ewmoe8YwpkRPYX2
-----END CERTIFICATE-----
Generated at Wed May 13 02:58:13 2026 by rpki-client