
$ rpki-client -vvf rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
File: ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft (raw, json)
Hash identifier: rF90IUof1omMVm/pHbbqCduo1NRhBA72kCgZujSj9bM=
Subject key identifier: 7A:7C:C2:58:62:94:2D:18:81:AF:CF:41:84:74:7A:95:45:78:CA:57
Authority key identifier: 65:F6:16:1C:73:6D:1A:9C:41:91:FD:FC:C7:A4:F8:24:CE:11:23:2D
Certificate issuer: /CN=A91899BB/serialNumber=65F6161C736D1A9C4191FDFCC7A4F824CE11232D
Certificate serial: 06FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
Manifest number: 06F6
Signing time: Thu 16 Apr 2026 21:59:00 +0000
Manifest this update: Thu 16 Apr 2026 21:58:59 +0000
Manifest next update: Thu 23 Apr 2026 21:58:59 +0000
Files and hashes: 1: ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl (hash: /5JF1SaCoSJ3OHKTdRHqhMr/c/zbK0AdJlGyG2GWoqA=)
2: 54CB555C57A311F09664E82DC4F9AE02.roa (hash: 8zSq/rqaKjpysVvvXWgHeKeayL3TVMK2Emf1uVmygFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl
rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:58:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1787 (0x6fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91899BB, serialNumber=65F6161C736D1A9C4191FDFCC7A4F824CE11232D
Validity
Not Before: Apr 16 21:58:59 2026 GMT
Not After : Apr 23 21:58:59 2026 GMT
Subject: CN=69e15ba4-f74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b9:a2:28:c3:67:d0:11:a2:f3:10:d7:e4:03:
92:53:01:63:c5:4e:52:45:d0:9d:75:49:83:5d:31:
41:8b:0f:c9:e0:b2:fa:b6:9a:8d:f6:15:cf:98:75:
dc:dc:d9:e4:a1:56:dd:ad:b6:99:37:aa:dd:c1:52:
69:37:e3:8e:7e:a2:1d:89:02:d8:ef:32:90:ac:09:
48:7b:ef:8b:6c:95:fa:a5:c8:c0:fd:a3:5b:c0:48:
ac:f5:42:ca:ce:4e:de:a3:76:4f:c5:9e:b5:9d:81:
b2:65:2e:6e:85:49:df:b2:89:d8:a2:b4:90:04:27:
53:32:57:83:b8:f0:07:d5:0f:b7:d8:5f:f6:73:3e:
34:3a:97:30:67:92:7d:d4:07:45:4d:02:d6:19:94:
d5:cb:de:1e:99:49:0c:39:b8:a0:9b:79:7a:ba:3a:
73:f0:0c:a7:e3:f8:8e:19:1d:8e:ec:13:82:cd:9d:
ce:64:07:09:d3:36:40:29:f0:50:82:b4:9c:b9:e2:
57:8a:44:cc:48:e3:df:95:08:56:c0:b8:23:02:e2:
c6:ee:dd:a5:89:da:99:85:f8:0d:e9:b0:2c:11:07:
0d:8a:b8:78:d2:12:04:86:80:6e:52:cb:26:17:28:
07:19:8c:6f:67:8f:3e:57:5c:c4:9a:1c:72:61:12:
0e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7C:C2:58:62:94:2D:18:81:AF:CF:41:84:74:7A:95:45:78:CA:57
X509v3 Authority Key Identifier:
keyid:65:F6:16:1C:73:6D:1A:9C:41:91:FD:FC:C7:A4:F8:24:CE:11:23:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3f:93:41:d6:0a:91:1e:84:2d:8c:9e:7e:cd:15:e9:64:98:
56:7b:b0:74:bb:35:76:1b:3f:2d:d1:5b:ac:a8:a4:bb:e9:18:
39:4b:75:f4:96:28:1d:11:82:f5:57:b2:b2:1b:77:20:46:62:
bb:de:a6:9a:3a:60:12:05:80:45:2f:af:11:39:98:6b:4d:c3:
8b:53:69:fc:87:29:2e:fe:14:c8:90:a2:50:24:d5:4f:de:2e:
61:7b:86:b0:12:3a:4c:5a:9e:28:2d:e3:f5:13:89:40:b7:f4:
b2:2c:26:03:f7:44:dc:3e:e2:a7:93:aa:da:68:6e:4d:4e:93:
d8:ea:fe:44:44:74:cf:6f:b8:8e:4a:7b:22:85:43:da:be:f0:
50:39:c2:fa:75:6d:cc:d7:65:36:ab:7c:cc:da:5f:05:c6:2d:
01:5d:48:53:97:92:4b:2f:9f:49:64:f4:bd:90:94:cd:d1:74:
f4:20:36:2b:65:00:51:fb:ef:15:2e:cb:9e:01:a8:1a:b4:61:
33:ee:ad:a4:46:64:7e:c2:c4:03:8c:48:42:1e:ad:63:e3:92:
e5:4e:f1:a8:eb:c8:8e:e5:82:5f:c0:e0:00:a2:0c:50:07:a8:
c9:d7:a1:21:9f:86:d0:b9:aa:9d:bf:42:f0:86:4b:64:e0:b4:
8f:5a:62:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:23:15 2026 by rpki-client