
$ rpki-client -vvf rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft
File: ZeUkJf-EHg40jVL7EXypaQogvlQ.mft (raw, json)
Hash identifier: 0VjXO+6hg9B5lvQ2/DhwKiRgmQNxdlPwfdJih+l6n/o=
Subject key identifier: 2B:D7:D7:C0:5B:0B:A6:7E:A4:F0:7A:A7:51:99:CC:23:08:FA:36:73
Authority key identifier: 65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54
Certificate issuer: /CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54
Certificate serial: 03DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft
Manifest number: 03C7
Signing time: Mon 27 Jul 2026 01:41:57 +0000
Manifest this update: Mon 27 Jul 2026 01:41:56 +0000
Manifest next update: Mon 03 Aug 2026 01:41:56 +0000
Files and hashes: 1: ZeUkJf-EHg40jVL7EXypaQogvlQ.crl (hash: oIHNtg7hPQX3SRz7FC+atrDvajLdbVqRqYPvldzxn8M=)
2: 0B014EBA408E11EDA80A5272C4F9AE02.roa (hash: SWNOrvn46oDLTg74T4Hbq7v10iWBDBnWv7LSwdGRRPQ=)
3: 463D6908E2BE11EFB6E1E780C4F9AE02.roa (hash: cduqgA+zcJPsXKGFgp0PZtzwmtzbUO7Jgg9Jg1V6cLM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl
rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 986 (0x3da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91889C2, serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54
Validity
Not Before: Jul 27 01:41:56 2026 GMT
Not After : Aug 3 01:41:56 2026 GMT
Subject: CN=6a66b765-7dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:12:88:fd:4a:94:64:f4:30:01:58:dc:96:
c0:d5:54:d1:16:d9:66:09:5b:18:65:25:b9:6f:2e:
e9:a7:1f:7a:d8:d3:be:45:bb:3d:34:af:55:67:27:
7f:e0:12:43:31:2d:ee:50:b1:5c:b5:5b:10:e9:e8:
64:15:fc:c1:b2:a9:9e:9c:ac:3c:e4:9e:71:64:e4:
5d:4d:bc:77:87:84:5a:44:b4:38:c2:cb:92:bf:bc:
8a:ff:1c:11:d9:8b:b9:cd:2d:b1:7d:8f:fb:c3:6a:
99:55:07:3a:99:81:54:fe:ee:5a:eb:7e:89:bd:d5:
f5:5d:39:e0:a7:af:24:d4:0b:98:3e:c4:32:1a:b2:
0b:c9:c7:48:22:49:2b:42:9d:46:e8:d5:32:41:fa:
3d:85:5d:a9:af:a0:4f:8f:bb:34:b3:4d:9f:cc:03:
f4:3e:1b:82:8e:0b:62:4f:95:dc:58:94:c2:d9:d1:
dd:36:ac:dc:5a:85:75:f8:92:d9:30:39:ee:a1:f5:
a0:ce:4b:4b:65:b1:4f:24:5a:7b:48:4d:68:e0:12:
09:ec:d7:e7:6f:40:0a:b3:b1:bc:cd:4c:43:94:d1:
af:9b:5f:d1:16:59:00:a2:9a:9c:c1:25:56:8f:64:
c5:cf:d3:8b:39:a8:92:7f:88:f9:76:0b:22:98:13:
7d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D7:D7:C0:5B:0B:A6:7E:A4:F0:7A:A7:51:99:CC:23:08:FA:36:73
X509v3 Authority Key Identifier:
keyid:65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:e2:eb:af:83:4a:c4:53:94:de:06:d6:3a:61:49:18:ea:57:
e0:6b:a5:a7:78:8c:13:2b:80:3a:bc:7b:ef:7e:c0:00:78:28:
93:33:3b:2a:b9:2f:46:d9:f2:e7:72:7e:1f:89:4a:a7:5e:46:
0a:25:6c:8b:54:b3:bc:3a:44:ae:5d:ca:37:91:33:89:2b:29:
04:6d:0b:1e:44:94:0f:71:0b:cd:06:fc:08:b7:af:68:2c:44:
6e:4f:9a:f3:ed:75:0e:3f:f5:8a:d6:66:ea:b9:fa:da:73:19:
f8:39:3c:63:80:f0:0f:85:3f:12:71:0d:d5:0d:5f:76:ac:b7:
7d:d7:fc:30:c2:d4:41:9a:31:59:02:88:ef:31:bb:64:5a:7b:
ee:c3:73:ac:10:c6:2f:aa:d8:fe:a9:72:bd:ad:76:53:ea:5e:
53:cc:84:e0:5f:4d:9d:fb:fd:90:9c:7e:eb:2f:ac:fc:68:63:
45:19:5b:2e:dd:10:0e:7e:e3:0e:dd:dc:25:70:13:20:5a:ab:
a7:ed:b6:30:7d:89:2e:0d:2d:30:6f:3b:8e:3e:6a:93:e4:d0:
f5:38:b1:5c:e4:44:7b:03:b6:4c:13:ea:66:32:7f:d7:51:0a:
27:12:dd:bb:28:02:71:46:ec:02:2f:8a:bb:ec:fb:9a:1d:b2:
85:5e:04:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:44:10 2026 by rpki-client