
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
File: pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft (raw, json)
Hash identifier: 9saCrlwi44Phqeu/TgKuOqhqpOqKP+/v7bSIKE3/XnM=
Subject key identifier: 60:61:6C:EA:05:79:39:E9:B8:FA:F4:A8:9E:BC:16:45:50:C3:2C:D7
Authority key identifier: A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF
Certificate issuer: /CN=A91A3AD9/serialNumber=A739387478C8AD9DD5D19553AB4B1DEEF1A961FF
Certificate serial: 6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
Manifest number: 68
Signing time: Mon 27 Jul 2026 10:22:07 +0000
Manifest this update: Mon 27 Jul 2026 10:22:07 +0000
Manifest next update: Mon 03 Aug 2026 10:22:07 +0000
Files and hashes: 1: pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl (hash: tDersr+hqxPtCcihzFLLNTg/wFDrtu+sz6HDWkTw660=)
2: 8B10B888061111F18D858310203D8C67.roa (hash: qh+VyOJbj+ug4XtQyEZqsUr8GU3LhsaDi56G0+/mtA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl
rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:22:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3AD9, serialNumber=A739387478C8AD9DD5D19553AB4B1DEEF1A961FF
Validity
Not Before: Jul 27 10:22:07 2026 GMT
Not After : Aug 3 10:22:07 2026 GMT
Subject: CN=6a67314f-8d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a4:cb:e3:e2:b6:5c:1c:19:93:3f:10:2d:74:
c9:ba:af:86:d0:86:2a:de:4a:7b:21:b7:35:b7:e3:
ba:7b:88:9e:05:db:0d:2b:92:75:32:e3:91:ba:68:
10:4d:be:67:0d:d9:2d:09:ba:6e:d2:5c:e2:bd:26:
fd:32:77:21:2c:38:83:fc:32:4e:79:d6:65:d4:19:
f0:01:fd:b6:9b:26:0b:40:3d:04:d6:7e:33:e4:c2:
b6:33:47:68:c9:eb:41:a6:d2:69:6c:b6:20:ee:01:
0b:fc:79:81:04:c8:95:db:13:40:85:21:5a:e0:12:
41:e4:3c:bf:58:b5:8f:ab:5f:d9:3e:af:2b:9f:3a:
5e:b3:6a:95:7e:d9:3d:7d:4e:bb:a3:76:ff:b2:4a:
90:1d:e4:53:57:9f:da:a8:5e:c8:50:15:73:61:05:
64:1f:14:4d:41:a1:8c:0f:bb:ae:67:4a:4f:cf:65:
51:81:d4:ee:ca:b7:63:50:30:57:80:db:22:d3:6b:
90:4b:3a:f7:74:95:a5:99:96:a7:78:80:9a:05:9b:
9c:ce:34:d6:cc:4d:f2:60:a6:c6:fb:f9:33:ef:05:
1b:36:2a:df:fb:f9:a5:04:65:d9:9b:70:b7:2d:07:
82:c4:da:0b:f2:66:05:0d:b2:f7:12:ed:6a:4e:1e:
92:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:61:6C:EA:05:79:39:E9:B8:FA:F4:A8:9E:BC:16:45:50:C3:2C:D7
X509v3 Authority Key Identifier:
keyid:A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:6c:34:67:c4:a4:75:0c:50:8c:16:88:ea:42:fc:21:11:44:
be:a5:37:40:4e:9e:0a:ca:6e:09:d6:1e:2c:10:eb:ab:72:c0:
82:39:03:c0:99:3c:bc:31:6f:62:05:ba:f0:1f:9d:69:9b:db:
e1:96:b1:5a:44:8e:8c:42:73:33:7b:c7:27:2b:b0:01:41:fd:
93:3d:0a:69:c5:0e:b1:43:33:de:b6:a2:ea:fc:f3:95:3c:36:
49:75:c1:66:cf:df:09:e7:c1:36:8c:07:43:32:b5:bb:f7:b3:
1b:aa:d8:d0:ba:ae:b2:fc:50:f3:a6:f9:62:64:d1:72:9b:b7:
71:d8:d6:54:3e:e8:a9:12:c9:e7:c7:41:e4:f7:4f:fc:bd:66:
b4:07:d9:23:22:10:71:d8:20:2b:84:21:0a:d0:3c:11:a3:b9:
dc:5d:29:c7:86:f1:55:10:c1:37:87:68:44:f4:7c:87:32:ec:
64:6c:00:90:22:50:93:b2:8d:64:86:3f:c6:72:37:28:07:6f:
59:00:96:9a:3c:fe:4a:bf:28:75:f0:a6:5c:83:2b:41:8a:cc:
e5:9c:39:5a:7d:24:e3:0b:49:a6:2e:93:d8:8b:1e:9d:67:e7:
59:a5:58:75:53:66:e0:f1:d8:9b:c1:af:16:53:c2:a7:40:7e:
21:b6:97:aa
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
M0FEOTExMC8GA1UEBRMoQTczOTM4NzQ3OEM4QUQ5REQ1RDE5NTUzQUI0QjFERUVG
MUE5NjFGRjAeFw0yNjA3MjcxMDIyMDdaFw0yNjA4MDMxMDIyMDdaMBgxFjAUBgNV
BAMTDTZhNjczMTRmLThkMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCppMvj4rZcHBmTPxAtdMm6r4bQhireSnshtzW347p7iJ4F2w0rknUy45G6aBBN
vmcN2S0Jum7SXOK9Jv0ydyEsOIP8Mk551mXUGfAB/babJgtAPQTWfjPkwrYzR2jJ
60Gm0mlstiDuAQv8eYEEyJXbE0CFIVrgEkHkPL9YtY+rX9k+ryufOl6zapV+2T19
Trujdv+ySpAd5FNXn9qoXshQFXNhBWQfFE1BoYwPu65nSk/PZVGB1O7Kt2NQMFeA
2yLTa5BLOvd0laWZlqd4gJoFm5zONNbMTfJgpsb7+TPvBRs2Kt/7+aUEZdmbcLct
B4LE2gvyZgUNsvcS7WpOHpLTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYGFs6gV5
Oem4+vSonrwWRVDDLNcwHwYDVR0jBBgwFoAUpzk4dHjIrZ3V0ZVTq0sd7vGpYf8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzQUQ5Lzc3Mjc0REMwRjk4
MDExRjA4N0RBOTkwODRGNkY1NkJDL3B6azRkSGpJclozVjBaVlRxMHNkN3ZHcFlm
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcHprNGRIaklyWjNWMFpWVHEwc2Q3dkdwWWY4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz
QUQ5Lzc3Mjc0REMwRjk4MDExRjA4N0RBOTkwODRGNkY1NkJDL3B6azRkSGpJcloz
VjBaVlRxMHNkN3ZHcFlmOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBPbDRnxKR1DFCMFojqQvwhEUS+pTdATp4Kym4J1h4sEOurcsCCOQPAmTy8MW9i
BbrwH51pm9vhlrFaRI6MQnMze8cnK7ABQf2TPQppxQ6xQzPetqLq/POVPDZJdcFm
z98J58E2jAdDMrW797MbqtjQuq6y/FDzpvliZNFym7dx2NZUPuipEsnnx0Hk90/8
vWa0B9kjIhBx2CArhCEK0DwRo7ncXSnHhvFVEME3h2hE9HyHMuxkbACQIlCTso1k
hj/GcjcoB29ZAJaaPP5Kvyh18KZcgytBiszlnDlafSTjC0mmLpPYix6dZ+dZpVh1
U2bg8dibwa8WU8KnQH4htpeq
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:07:08 2026 by rpki-client