
$ rpki-client -vvf rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft
File: Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft (raw, json)
Hash identifier: dutTr0mRNCMpfjEpoV0Q86YOJTD+45dK6O0oCdGzteA=
Subject key identifier: 3A:64:6E:EE:B0:F7:36:8B:EB:03:24:29:F4:9B:10:4F:32:84:EB:28
Authority key identifier: 67:4B:8D:06:01:34:EC:3D:18:68:D0:54:0F:7C:D8:4F:14:B9:C9:59
Certificate issuer: /CN=A91253B9/serialNumber=674B8D060134EC3D1868D0540F7CD84F14B9C959
Certificate serial: 7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft
Manifest number: 7A
Signing time: Mon 27 Jul 2026 10:00:20 +0000
Manifest this update: Mon 27 Jul 2026 10:00:19 +0000
Manifest next update: Mon 03 Aug 2026 10:00:19 +0000
Files and hashes: 1: Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl (hash: 3F/Sk/GyEuZ/oQ/PCyKPbU+ZxRbkeMmdx/2DHP1NY4s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl
rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91253B9, serialNumber=674B8D060134EC3D1868D0540F7CD84F14B9C959
Validity
Not Before: Jul 27 10:00:19 2026 GMT
Not After : Aug 3 10:00:19 2026 GMT
Subject: CN=6a672c34-02c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:69:7f:c3:73:16:23:60:be:44:eb:34:39:87:
e6:7b:fd:b2:4d:92:dc:9e:6e:1c:21:a6:1b:70:9e:
e7:d4:8e:d3:ba:f8:a9:6e:cc:c2:5d:aa:23:20:6e:
96:b9:f7:40:66:05:c2:c5:0b:c3:2e:51:5f:12:a4:
f8:db:01:99:e2:b1:dd:b2:76:5c:21:6e:d1:6d:ec:
fe:39:de:f7:0b:74:81:74:be:49:80:ca:f3:68:2c:
41:61:75:b7:92:8c:e0:46:51:a3:7c:b4:0f:4d:77:
94:af:a7:84:50:70:26:0d:6f:87:e9:67:45:b6:d4:
3f:09:7e:51:49:6b:e8:08:57:80:d3:ee:f4:c3:04:
80:81:51:c5:48:0d:60:6f:67:dd:4c:45:2a:d7:be:
0c:cf:93:b7:e8:8a:06:a6:73:24:a5:de:6c:79:24:
c6:9e:eb:2d:eb:eb:1c:89:bf:23:07:22:64:ea:44:
97:12:ad:83:cb:bd:53:11:2a:f3:c4:4e:08:40:c5:
ed:31:23:94:df:dd:15:7c:ad:8c:4d:3b:b2:f1:23:
9c:82:ca:08:fa:08:3b:db:57:cc:72:01:23:e8:ac:
60:37:17:00:85:2d:d6:dc:8f:30:94:9b:2e:e2:b7:
a0:88:9e:10:12:29:2e:9e:7b:9c:aa:67:c0:cb:bc:
80:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:64:6E:EE:B0:F7:36:8B:EB:03:24:29:F4:9B:10:4F:32:84:EB:28
X509v3 Authority Key Identifier:
keyid:67:4B:8D:06:01:34:EC:3D:18:68:D0:54:0F:7C:D8:4F:14:B9:C9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:fe:76:e2:95:73:4a:41:86:a8:e2:92:4b:1f:2b:55:fa:14:
d8:d2:aa:32:6a:68:f6:67:f7:a5:8a:1d:7d:39:95:44:be:23:
5c:bb:eb:af:d9:39:28:0d:61:7b:63:ee:db:f1:e4:b7:49:5b:
53:a7:d5:9e:06:eb:c3:b2:b6:43:5e:75:39:b4:ee:39:f6:99:
44:b9:6b:28:d2:81:46:2e:47:f1:ec:e5:11:82:d3:13:4a:ad:
8b:1c:f9:24:43:f6:bc:c6:e7:3b:f5:30:48:d8:5c:0e:63:f4:
f3:a0:b9:26:b1:26:25:3e:8e:e9:80:58:17:0e:a2:06:ab:92:
de:6c:10:21:ad:66:06:8e:d8:17:6f:74:a6:b2:f1:b3:ac:53:
8e:23:8e:1b:59:8b:bf:49:be:0f:48:9c:3c:09:b5:2a:03:50:
51:0c:7e:8f:83:90:02:66:e7:6f:b3:7c:ae:04:ee:d2:f8:1c:
73:c3:78:2e:58:b9:ee:f6:ed:bd:1f:71:c2:f6:c7:7f:dc:e6:
d3:40:15:f0:8b:c2:4f:53:55:bd:ba:4e:06:3c:96:b4:b8:14:
4d:f7:17:ca:30:7a:fb:37:78:b3:87:f3:d6:a4:0e:f0:1c:65:
8c:84:68:f8:9f:f0:64:d0:d1:c2:db:12:63:5e:ef:9c:5b:0e:
e1:e1:01:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:10:07 2026 by rpki-client