
$ rpki-client -vvf rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft
File: Z-1VajxcS_wnyhWKWXdWTDIHzso.mft (raw, json)
Hash identifier: VXdljAKLBK5CvI13py3Pv3TvrIKEkMsAjDZaCiAOMDA=
Subject key identifier: 42:A6:25:68:61:36:CA:58:15:EF:A4:C3:F0:EA:90:66:0E:A5:9E:D6
Authority key identifier: 67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA
Certificate issuer: /CN=A91752F4/serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA
Certificate serial: 30EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft
Manifest number: 30DA
Signing time: Thu 16 Apr 2026 15:25:19 +0000
Manifest this update: Thu 16 Apr 2026 15:25:18 +0000
Manifest next update: Thu 23 Apr 2026 15:25:18 +0000
Files and hashes: 1: Z-1VajxcS_wnyhWKWXdWTDIHzso.crl (hash: 67MVmTApzRatSWPIeve1g9JSxVMrs+kaZ/jk3FUnZ9I=)
2: 22E2E3C24E2911EF8BEE8E10C4F9AE02.roa (hash: EZBXtatzDllfCW2rTDFXkEXED9M+uf0VNnXIRtQVlAo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl
rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:25:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12522 (0x30ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91752F4, serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA
Validity
Not Before: Apr 16 15:25:18 2026 GMT
Not After : Apr 23 15:25:18 2026 GMT
Subject: CN=69e0ff5f-f743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4e:bd:b6:3c:b9:d0:92:30:70:d3:ee:e4:24:
97:b7:cb:79:db:14:76:9e:82:4c:06:6d:15:e8:fb:
65:d8:86:73:df:68:94:14:4d:a1:81:9e:9e:a0:22:
4a:a1:f4:b4:82:ce:85:d7:7c:d6:90:55:8c:89:4e:
fb:3f:78:dd:83:6f:c3:7a:62:2f:e9:36:b8:61:27:
0c:53:68:89:cf:31:e0:c5:bd:5f:67:2a:15:e6:b5:
42:7e:f5:f2:2d:94:bc:76:ad:c1:3e:c2:76:07:b0:
9f:4a:9c:9b:a7:8f:b2:5d:58:78:93:1a:8c:fb:9e:
4c:0e:ff:34:e9:16:78:c7:d1:0f:45:46:47:c2:8a:
03:7f:f2:7b:ea:0a:52:b6:e8:39:b8:cc:28:09:96:
26:75:f0:3d:96:52:2c:67:db:48:10:ec:42:d6:89:
7a:bb:d4:18:a2:2a:17:71:85:3c:68:c8:e5:35:a4:
18:07:e2:b8:aa:e4:0f:0a:0a:6d:34:73:2f:af:ec:
32:f6:1d:15:54:86:3a:32:43:f8:4b:a8:5d:06:c6:
a2:ae:63:74:57:53:da:26:9b:23:4f:02:55:29:86:
fc:d5:37:6b:0c:9e:07:4e:b7:e8:48:2e:eb:70:90:
0d:47:d8:c6:62:ca:2e:aa:ac:c5:58:5a:2e:df:14:
3b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A6:25:68:61:36:CA:58:15:EF:A4:C3:F0:EA:90:66:0E:A5:9E:D6
X509v3 Authority Key Identifier:
keyid:67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:9f:d4:b8:67:b9:0e:59:c5:63:79:1c:58:0a:d2:57:83:c0:
d2:c3:b8:f3:cc:99:3f:cb:cb:6b:a9:49:bc:c2:6e:aa:84:e8:
a2:7a:c6:13:9f:22:7e:d0:63:e9:dc:4a:7c:0e:db:4b:52:05:
20:0e:87:98:5f:42:2f:db:93:ad:aa:2d:f7:b0:38:3b:bb:f7:
4d:db:b5:4e:f6:c8:d4:76:b9:89:2e:95:e4:fa:50:01:c3:42:
97:87:80:15:03:e2:88:5f:48:a4:a0:78:8f:5b:99:1b:d6:7e:
d7:7c:65:ef:65:53:49:f8:86:5e:ad:6f:ef:e2:47:47:80:eb:
13:8b:a3:23:5f:09:36:cb:39:26:30:2b:5a:6b:12:9a:61:a4:
a3:03:77:d5:cf:eb:18:e8:55:41:84:b9:a9:bf:a1:be:50:eb:
80:25:59:f2:27:8a:0f:82:bd:ca:a6:4f:12:ab:4a:bc:eb:5a:
27:4e:80:41:59:a4:85:3a:3d:c4:42:72:c7:44:2e:38:18:42:
59:2b:a6:74:e2:7d:27:29:b8:00:4d:c8:f0:e4:3f:93:93:22:
93:7b:fc:28:e7:92:72:3b:83:89:cc:f5:58:f5:60:b1:c5:d9:
27:a1:27:8d:e1:f0:a2:37:07:b4:c7:0f:d6:5b:bd:5b:ad:2c:
01:b0:96:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:58:27 2026 by rpki-client