
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft
File: zfT3_b4nSk88Ji92EXceUi2uRfI.mft (raw, json)
Hash identifier: 22u7YSp6gMAL1QZ2dbaCux0a/3dHayVlnbuN44KSNb4=
Subject key identifier: C2:D3:95:EB:A9:FA:0A:1B:D7:DE:1D:8F:7C:72:9C:76:1A:9F:82:0F
Authority key identifier: CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2
Certificate issuer: /CN=A91A4026/serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2
Certificate serial: 0D04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft
Manifest number: 0CF8
Signing time: Fri 12 Jun 2026 18:17:51 +0000
Manifest this update: Fri 12 Jun 2026 18:17:51 +0000
Manifest next update: Fri 19 Jun 2026 18:17:51 +0000
Files and hashes: 1: zfT3_b4nSk88Ji92EXceUi2uRfI.crl (hash: n8wThGr7gX/sbt4K9SvU5A/ucH0r0iHrwkGtb8atJkw=)
2: 76DB2480090511EA8FFC6812C4F9AE02.roa (hash: AajdPkJ4rEa4vqdqvJqj9eo6LBkmjEKm6+u/Jv10pOA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl
rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:17:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3332 (0xd04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4026, serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2
Validity
Not Before: Jun 12 18:17:51 2026 GMT
Not After : Jun 19 18:17:51 2026 GMT
Subject: CN=6a2c4d4f-8678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:80:73:d0:00:19:03:60:3f:e3:f3:51:e4:
91:38:a0:cf:43:e4:c5:7c:96:5d:7c:b7:d9:9e:55:
1c:47:58:cd:2f:18:be:40:61:7d:e7:30:45:17:bc:
62:2c:47:50:66:e6:76:64:53:75:a1:54:1d:00:d5:
9c:1b:81:f6:b5:6d:c5:2f:80:f4:ac:cd:7b:ac:c2:
16:4a:4b:fa:e2:d0:47:3c:bf:0c:1a:86:82:39:d9:
a8:c6:7b:78:b3:21:6c:9f:dd:a8:7d:f9:c5:66:d4:
07:cd:0a:61:8c:90:42:36:c9:52:4d:ab:ac:7c:89:
8a:2c:ad:08:b5:3d:46:f8:43:ee:2d:7b:54:7a:a4:
ea:e0:be:95:5c:67:76:25:ba:2b:7b:e7:bd:58:59:
2f:63:0a:20:9f:40:85:fd:63:53:9e:27:40:f6:c5:
f2:14:9d:0d:4f:8e:98:8e:3e:e9:05:65:bb:80:e1:
1c:2f:7c:e3:8c:21:b8:e5:45:46:08:4a:ba:e1:dc:
4b:a3:1e:2a:46:7f:a5:09:a8:20:35:39:68:15:bc:
28:4f:5f:a8:c5:d9:64:83:43:e1:2c:94:23:00:5e:
57:1d:14:2a:f2:40:8a:70:0d:2c:66:48:0f:c3:b0:
83:e0:bc:af:e9:ba:5a:69:c4:18:37:ea:0f:bf:f4:
cc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D3:95:EB:A9:FA:0A:1B:D7:DE:1D:8F:7C:72:9C:76:1A:9F:82:0F
X509v3 Authority Key Identifier:
keyid:CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ff:d5:d3:b4:3f:56:f7:1a:b8:28:fb:7f:52:f6:44:1f:25:
45:b2:41:dc:64:53:80:50:a2:d8:e3:fe:0f:bb:f3:d3:26:b7:
8a:d8:64:2f:cb:5b:18:a9:94:c6:70:8c:e1:73:a4:4d:02:29:
34:28:21:3c:f0:22:4e:3e:7c:41:73:7c:d5:e4:87:d4:b5:e7:
32:51:eb:fd:08:23:b8:fb:ec:fe:a4:a3:44:cf:7d:59:78:d4:
25:fc:10:00:6b:70:d0:e9:e5:86:f6:0b:d9:50:d3:ca:58:20:
eb:ce:7c:14:2f:1f:c3:d4:d8:be:9b:de:08:f3:45:fd:6f:b2:
c0:b1:34:dc:d1:c6:9b:02:bd:ae:c9:99:82:5c:61:cd:97:06:
d3:d9:a0:a4:59:a6:b7:2f:87:a0:ba:7f:4e:62:66:44:4e:ab:
da:eb:2f:64:4a:be:8b:cd:73:35:df:19:22:39:f9:88:b1:d7:
64:25:9c:cd:b8:30:ab:6e:ec:df:d1:77:e5:b9:e0:1b:75:00:
f5:d0:ee:65:96:62:7e:c0:c2:5c:fc:e5:f2:a2:e7:e7:57:5e:
52:a9:c7:12:c5:b4:6d:52:f5:93:61:63:57:b7:26:94:a9:ac:
6f:d2:35:af:89:99:ff:6f:71:1c:4e:ba:f8:3e:77:64:47:4a:
d4:21:87:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:39:37 2026 by rpki-client