
$ rpki-client -vvf rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft
File: ZeUkJf-EHg40jVL7EXypaQogvlQ.mft (raw, json)
Hash identifier: cqSO7xGXuLVwyBTSfIdkWAv+THRg26ve4zonWFxJFtE=
Subject key identifier: EA:ED:A4:44:DB:D8:20:16:BD:16:BC:C1:1D:90:E7:AC:25:4C:72:A0
Authority key identifier: 65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54
Certificate issuer: /CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54
Certificate serial: 03C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft
Manifest number: 03AF
Signing time: Sat 13 Jun 2026 00:43:08 +0000
Manifest this update: Sat 13 Jun 2026 00:43:07 +0000
Manifest next update: Sat 20 Jun 2026 00:43:07 +0000
Files and hashes: 1: ZeUkJf-EHg40jVL7EXypaQogvlQ.crl (hash: LCEF+FLGMZZlb/sLlG0q6AG9F857IXAdl83wZYdN6Ms=)
2: 0B014EBA408E11EDA80A5272C4F9AE02.roa (hash: BJLFfTv6txJA1qp4H2illbVhs9gJxgXvN/Bl0UJLlTU=)
3: 463D6908E2BE11EFB6E1E780C4F9AE02.roa (hash: 8Ynwe+p9uI6D1qeWkMhQ/D9BQagY17JBH02rV/NaGt4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl
rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 960 (0x3c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91889C2, serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54
Validity
Not Before: Jun 13 00:43:07 2026 GMT
Not After : Jun 20 00:43:07 2026 GMT
Subject: CN=6a2ca79b-7965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f7:5c:ad:21:b2:7d:fb:04:a5:08:3a:2f:44:
50:ac:81:56:05:bd:c1:c6:66:d9:c5:e6:52:7b:7b:
c5:44:ed:56:e7:59:5a:a0:d8:da:21:3b:3d:72:42:
10:6c:7c:1c:63:13:eb:3f:c1:ff:fd:18:76:0a:32:
b6:45:4d:1e:5c:37:4d:b5:5c:30:f6:d1:35:d6:c4:
b1:6b:bb:f5:9f:ea:b1:63:89:a3:49:d3:6b:7a:b0:
e8:e2:4c:7a:08:97:84:f2:a3:8b:6a:e1:65:64:8b:
40:32:2b:47:f1:9d:f0:f7:86:9f:01:ea:83:32:f5:
c8:e9:7a:fa:16:37:29:0a:2e:92:ab:85:84:35:1c:
d1:98:34:8f:18:48:7a:61:ca:82:0e:85:6d:16:be:
cb:4a:81:1e:e2:8f:45:9d:97:53:66:5b:63:cc:b3:
ca:08:92:da:ca:b5:fe:d7:8b:43:d3:a9:22:61:e3:
7c:75:8f:11:8b:8b:2e:88:02:7a:cd:99:70:fd:93:
77:ca:7e:bd:7d:4f:ae:70:a9:1e:85:d3:bb:fd:14:
a8:38:b1:90:55:01:64:e5:ed:98:e8:31:d0:9e:d8:
4e:a2:fd:3a:5c:d6:1f:64:4a:12:d1:c7:a2:06:29:
ca:53:30:9f:17:89:1c:8f:0f:4d:aa:8e:fe:8d:ba:
11:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:ED:A4:44:DB:D8:20:16:BD:16:BC:C1:1D:90:E7:AC:25:4C:72:A0
X509v3 Authority Key Identifier:
keyid:65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e9:b3:04:d8:dd:42:86:29:eb:8e:32:6b:2f:5b:c8:8e:03:
55:ef:f2:dc:da:4c:45:23:54:70:7a:68:3d:0b:fe:56:6b:60:
d9:6d:56:23:fd:a9:1f:f4:9a:ba:b3:76:8f:d2:ec:30:8f:f5:
50:0e:e4:c7:c0:fc:b2:a5:e7:46:35:ac:c1:c4:d4:a3:31:60:
bd:c1:cb:eb:3d:7e:ce:6b:4f:b1:5c:36:8b:29:c3:c8:bd:69:
a6:16:1b:f3:1d:e9:99:39:60:83:2b:2d:4f:18:e3:b7:1f:35:
29:65:71:7b:9a:4a:07:2d:fd:66:d4:d8:ca:d7:b9:1d:2e:bf:
57:41:8a:f9:d4:6b:99:35:49:29:7b:57:36:37:cf:97:77:bf:
73:e7:0c:a2:bc:99:ef:97:80:b4:34:00:88:6d:60:ee:d6:18:
aa:4a:92:7b:c2:02:1b:38:17:79:26:88:82:ba:50:ba:c6:d1:
68:ed:4b:35:7a:c2:fc:6f:ec:4d:82:66:c6:db:32:9a:d4:96:
b9:1a:5a:49:b3:cb:6f:6e:06:39:26:cf:0e:b2:86:ab:ae:b7:
c0:ca:ba:c3:d6:57:36:bf:3a:40:7a:73:17:7b:41:58:20:c8:
af:8b:d8:8c:30:74:57:31:7c:9c:78:f6:2f:d1:c7:bd:39:cd:
02:ea:26:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:22:50 2026 by rpki-client