
$ rpki-client -vvf rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
File: ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft (raw, json)
Hash identifier: QXbq7Gwr9PIYn3K0IYihcQfeS29Ev/mcKYah/KQTfkc=
Subject key identifier: F5:A2:E4:92:94:CB:91:69:C7:5A:A2:6F:65:CB:F7:E7:CF:28:5E:5C
Authority key identifier: 65:F6:16:1C:73:6D:1A:9C:41:91:FD:FC:C7:A4:F8:24:CE:11:23:2D
Certificate issuer: /CN=A91899BB/serialNumber=65F6161C736D1A9C4191FDFCC7A4F824CE11232D
Certificate serial: 072E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
Manifest number: 0729
Signing time: Sun 26 Jul 2026 22:41:39 +0000
Manifest this update: Sun 26 Jul 2026 22:41:39 +0000
Manifest next update: Sun 02 Aug 2026 22:41:39 +0000
Files and hashes: 1: ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl (hash: cmPw1ZpZ6D4fWJWoeHW1SfMFdXwps9b/3nkXKRXDMs0=)
2: 54CB555C57A311F09664E82DC4F9AE02.roa (hash: 8zSq/rqaKjpysVvvXWgHeKeayL3TVMK2Emf1uVmygFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl
rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 22:41:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1838 (0x72e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91899BB, serialNumber=65F6161C736D1A9C4191FDFCC7A4F824CE11232D
Validity
Not Before: Jul 26 22:41:39 2026 GMT
Not After : Aug 2 22:41:39 2026 GMT
Subject: CN=6a668d23-03ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1d:8d:bc:56:11:52:bc:70:87:93:75:e9:cd:
c7:d3:d9:72:c8:96:8d:de:58:d0:44:9d:91:f7:4c:
7e:d9:80:2c:ac:1c:0a:5b:9e:ef:61:84:00:89:06:
c3:4a:14:a0:49:8d:23:ac:38:29:49:18:45:0f:1f:
fb:c1:7d:95:a5:45:d9:e6:b0:05:31:3b:39:b8:4f:
54:ee:f0:24:88:0b:41:ec:f7:da:04:c1:e9:7c:77:
75:ca:be:e0:df:d4:a9:97:6b:3a:88:74:36:b0:ee:
8f:91:37:74:98:c2:76:28:46:16:e8:79:5c:3a:ff:
45:28:14:2c:95:ab:84:92:e9:d2:e0:92:ad:a2:7c:
5f:16:fb:ff:2e:58:39:ea:0d:b7:33:07:c3:d4:ee:
71:a2:b2:8f:c9:a4:8b:70:03:6e:4f:bd:96:ff:33:
89:22:94:2c:59:a2:a3:f7:67:8a:aa:3c:75:ed:f5:
08:62:cd:be:c0:e7:3c:84:52:a4:9c:6f:e1:b4:84:
19:a0:93:d5:6f:7e:3f:44:ef:bb:47:7d:8e:6d:80:
4b:d9:c9:83:4f:8e:58:61:0b:aa:c6:2e:e9:e4:48:
6d:80:32:f6:de:91:64:d6:a5:07:18:d2:83:4c:1e:
fb:1f:37:6f:e9:f3:d2:6b:12:f3:b4:a4:ce:6a:a5:
05:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A2:E4:92:94:CB:91:69:C7:5A:A2:6F:65:CB:F7:E7:CF:28:5E:5C
X509v3 Authority Key Identifier:
keyid:65:F6:16:1C:73:6D:1A:9C:41:91:FD:FC:C7:A4:F8:24:CE:11:23:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:a9:6e:1d:98:bb:76:bc:fc:20:2e:1c:17:a6:3d:b4:e9:07:
d6:aa:c8:e2:28:ad:e0:e7:3a:e6:09:56:4d:7d:54:82:f5:5e:
7e:07:f5:a6:14:25:96:89:85:a7:22:49:20:22:fe:25:ca:c9:
22:3a:cb:ba:af:f7:b1:f2:f5:9c:dd:f0:60:13:1a:fd:3d:0c:
91:22:de:57:81:a4:a3:1c:f4:fd:23:a7:82:50:22:a7:84:dc:
62:cc:68:07:ab:b0:4f:b4:57:70:01:06:fa:08:5f:7e:fe:99:
b4:1d:39:ad:58:47:6b:26:4f:04:f3:09:e7:d3:31:f0:d6:f4:
63:81:0f:b4:bf:ce:7c:05:83:0b:8d:4d:84:d6:5c:08:89:42:
9a:ac:bb:96:44:7a:8c:77:14:a0:15:a4:1f:8d:bd:22:1a:41:
f8:fd:e4:65:50:c7:1c:44:9c:8d:dd:6a:34:3d:7b:ce:fb:09:
13:71:44:ff:1f:91:07:11:5b:6b:d4:2a:83:f1:4c:ff:a9:bb:
f0:f7:7a:20:3f:d3:34:2e:bd:a4:e2:c4:e8:70:28:22:ba:91:
df:cc:ab:b5:1a:37:c1:78:df:d5:a2:8e:9d:b3:bb:69:cd:bc:
ed:1e:b7:d6:1c:dc:b4:db:50:5d:cb:59:64:60:b4:6e:ce:16:
a0:35:6d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:44:22 2026 by rpki-client