
$ rpki-client -vvf rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft
File: ZH5crcsfv367iZpyGcOg8D0_ew0.mft (raw, json)
Hash identifier: rCWPSUtZqS6ztHaq/2NhLpDY9B01+zBG85vVaMebJlc=
Subject key identifier: 00:2F:D7:BE:A6:3C:70:71:51:B8:AD:69:A7:3E:8C:17:18:C0:84:ED
Authority key identifier: 64:7E:5C:AD:CB:1F:BF:7E:BB:89:9A:72:19:C3:A0:F0:3D:3F:7B:0D
Certificate issuer: /CN=A91951DE/serialNumber=647E5CADCB1FBF7EBB899A7219C3A0F03D3F7B0D
Certificate serial: B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft
Manifest number: AE
Signing time: Sat 13 Jun 2026 07:15:16 +0000
Manifest this update: Sat 13 Jun 2026 07:15:16 +0000
Manifest next update: Sat 20 Jun 2026 07:15:16 +0000
Files and hashes: 1: ZH5crcsfv367iZpyGcOg8D0_ew0.crl (hash: 544QsSddt1FyZvsLpL4iOGsjCLTMnjvKExQbIP9/ogM=)
2: 533DC25E60B511F0AB567568C4F9AE02.roa (hash: 3eyoBtxWZnVo9d8QTWGg5n0zVCETmWq673Im+Ia8NGk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.crl
rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:15:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91951DE, serialNumber=647E5CADCB1FBF7EBB899A7219C3A0F03D3F7B0D
Validity
Not Before: Jun 13 07:15:16 2026 GMT
Not After : Jun 20 07:15:16 2026 GMT
Subject: CN=6a2d0384-dd16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5d:d5:f8:fa:6a:86:da:54:69:45:77:c9:dc:
21:01:23:e7:e9:2d:44:33:51:33:85:d3:7b:d4:86:
57:dc:f0:8e:64:e9:5e:1a:80:96:d4:95:ef:c7:e2:
d6:85:70:f6:b2:5a:df:7d:56:13:8d:ba:2a:f7:64:
75:5a:6c:2e:ef:54:af:f8:94:68:5c:33:31:93:7e:
42:38:c5:3b:08:1a:39:86:29:a6:87:6d:dc:23:4f:
22:b0:12:88:28:dd:18:15:8b:eb:5b:62:0b:90:3e:
a4:36:3d:43:78:f1:8d:44:8c:26:44:06:e8:83:78:
cc:80:5c:53:0a:0c:3d:b7:c6:5a:89:0c:78:7e:ae:
8b:a1:e0:80:0f:bf:1a:77:01:4e:7d:25:8b:55:ef:
1b:63:de:2b:f5:3f:ee:1a:a2:95:ad:d7:ae:a3:1c:
2c:9a:bb:d6:d2:75:ca:13:1b:be:97:57:5e:2d:a7:
6f:b2:2d:c2:c3:9a:ca:1e:ef:65:47:b7:d8:46:a4:
75:2f:05:31:e7:9b:18:88:7e:a4:1e:5b:c2:1d:08:
25:12:41:90:59:a3:1b:e7:00:24:41:45:84:86:ff:
8e:aa:de:e8:eb:90:05:33:a8:4e:f9:4a:70:e2:ea:
39:b7:d9:2e:4b:5c:56:76:db:00:32:84:56:9c:64:
8b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2F:D7:BE:A6:3C:70:71:51:B8:AD:69:A7:3E:8C:17:18:C0:84:ED
X509v3 Authority Key Identifier:
keyid:64:7E:5C:AD:CB:1F:BF:7E:BB:89:9A:72:19:C3:A0:F0:3D:3F:7B:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:50:17:f4:d7:51:89:38:74:e8:b6:ed:24:a3:e9:43:e7:80:
af:8a:4f:e6:2c:03:1a:34:a4:e4:09:42:ff:e2:91:ed:6f:9a:
cd:3f:ad:50:b1:3a:18:e2:5e:c1:bb:b8:de:4f:cd:4e:6d:53:
54:89:a5:11:03:df:05:df:2e:bd:6b:93:22:ee:79:a5:a3:8e:
6b:a6:7f:f2:ee:15:5c:39:8a:43:5a:aa:da:b5:9a:a0:25:19:
b1:d6:83:d5:d9:40:bf:32:85:fd:8e:10:81:08:03:fb:fa:3a:
22:dd:7c:67:8a:6d:88:9d:13:99:8f:63:30:03:17:f8:3e:3a:
c7:44:ec:e8:8d:a1:ef:13:22:04:4a:ef:14:a8:20:4b:e1:28:
55:65:34:12:d3:ee:d4:e5:09:7e:ce:6b:7a:1b:9d:9f:0c:88:
81:77:8f:8b:b1:08:92:41:05:98:9f:7f:1b:00:ad:a0:67:4d:
77:0e:c1:18:e1:97:85:9d:36:6a:3d:3a:fc:ce:37:0e:44:52:
47:95:b5:26:07:13:fd:f1:96:2e:a8:a2:67:47:20:c9:5c:42:
25:00:70:39:e7:2d:4a:3e:c0:cd:93:d2:74:d4:a2:60:ff:b9:
50:e6:93:43:07:8c:cd:82:ec:30:53:09:65:ea:95:21:10:f1:
22:e8:47:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:04:37 2026 by rpki-client