
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.mft
File: zFYVfHLcxpczY2dD21AIdZMtpB8.mft (raw, json)
Hash identifier: RHe/GMG7wDbYiz1Al4k/AcUaf7SZVr4RMyz+5WdasBk=
Subject key identifier: B0:DE:53:DD:12:68:24:BC:7A:62:56:B8:45:13:9D:64:8F:09:AA:F1
Authority key identifier: CC:56:15:7C:72:DC:C6:97:33:63:67:43:DB:50:08:75:93:2D:A4:1F
Certificate issuer: /CN=A91A6CD6/serialNumber=CC56157C72DCC69733636743DB500875932DA41F
Certificate serial: 0703
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYVfHLcxpczY2dD21AIdZMtpB8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.mft
Manifest number: 06FA
Signing time: Sun 26 Jul 2026 22:56:16 +0000
Manifest this update: Sun 26 Jul 2026 22:56:16 +0000
Manifest next update: Sun 02 Aug 2026 22:56:16 +0000
Files and hashes: 1: zFYVfHLcxpczY2dD21AIdZMtpB8.crl (hash: J/J8oLXehjo4dXJ6DzJS+SmIpgb+vGf/Tl3YizYDN8w=)
2: A210E7309CAB11EBAB87D43AC4F9AE02.roa (hash: oPai/6JGqqBsiLWvrKLeP/3ai1A03sc+JH8DwYOimx0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.crl
rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYVfHLcxpczY2dD21AIdZMtpB8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 22:56:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1795 (0x703)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6CD6, serialNumber=CC56157C72DCC69733636743DB500875932DA41F
Validity
Not Before: Jul 26 22:56:16 2026 GMT
Not After : Aug 2 22:56:16 2026 GMT
Subject: CN=6a669090-d39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cd:22:84:ff:52:57:9e:e1:17:94:27:02:b7:
d6:de:80:a4:c5:be:99:a6:78:ce:02:1f:19:d4:22:
1f:f0:11:a8:10:ad:fc:57:7d:76:07:1b:0b:4f:72:
b4:96:59:4a:f8:df:b1:8f:75:59:85:26:e5:d6:42:
cb:6a:c4:a9:36:68:86:f8:97:b4:26:61:88:a1:06:
87:e6:33:13:34:17:19:96:69:45:3f:21:4f:cf:a9:
40:b2:5b:79:53:e5:3d:56:9a:ed:48:72:7d:39:2a:
b9:df:be:7a:42:5d:19:04:05:21:2c:de:e0:47:04:
97:8a:7b:44:98:df:05:a9:58:16:a3:92:c6:2a:8b:
4b:fa:db:2c:a9:ed:26:2a:03:c7:4e:85:24:a7:ac:
b7:05:8e:34:20:cb:79:a0:e9:10:09:41:1a:4d:fc:
ae:3f:8c:3d:5f:4a:74:d2:ac:2a:75:1c:cc:7b:fd:
f1:1d:30:ba:90:50:6c:32:f3:3a:f3:1e:2c:6d:46:
0f:02:05:08:0e:41:3e:c7:b9:5d:16:0a:f3:a1:50:
cb:77:f0:79:08:4b:dc:aa:62:b6:b2:0a:b3:36:3b:
fb:04:f3:21:d5:4a:7f:1b:a0:11:67:1a:05:2c:6f:
fd:86:0e:a1:5d:19:fc:53:15:6a:d3:b4:13:87:99:
cc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DE:53:DD:12:68:24:BC:7A:62:56:B8:45:13:9D:64:8F:09:AA:F1
X509v3 Authority Key Identifier:
keyid:CC:56:15:7C:72:DC:C6:97:33:63:67:43:DB:50:08:75:93:2D:A4:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYVfHLcxpczY2dD21AIdZMtpB8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:13:56:3f:4d:35:fb:dc:e8:17:5b:5a:8d:5e:a4:db:a0:ea:
eb:9e:7b:33:88:37:76:05:01:5a:7d:d6:4c:df:6c:7c:18:33:
8a:c1:7e:75:4b:52:b5:1e:45:5a:7a:04:69:50:34:48:fa:ef:
ab:a8:c4:15:c6:db:4e:c0:23:e1:74:78:40:cb:87:f9:9d:d1:
a0:9b:57:1f:c8:64:c1:af:b2:a6:34:6a:cb:2e:15:19:74:37:
c9:e9:cd:41:f3:1e:1a:88:79:8c:ed:92:ce:75:57:e0:cd:0a:
ee:2f:cd:f2:47:82:be:e5:e4:17:65:41:e4:fd:73:60:3d:85:
bb:d2:d2:f8:b1:4c:b5:66:56:dc:1a:45:87:f3:1b:ef:f4:3c:
93:50:f5:96:9e:51:a6:8b:1d:dd:8a:a1:11:f1:a2:c1:c3:c6:
27:30:8d:84:5c:13:3d:fb:d1:8e:fd:07:15:e2:b0:b5:84:c5:
3a:d9:6e:82:2f:84:f8:4d:d6:ad:76:94:31:18:a0:b6:40:a4:
ae:ce:f7:e3:68:6a:bb:e1:70:ce:b1:42:10:ab:86:94:2f:b9:
b1:41:56:92:63:c3:68:64:fc:b6:4d:6a:b7:eb:01:02:24:7c:
eb:f8:01:9a:a2:0a:72:3a:4f:d4:1a:ae:97:96:7a:1f:a4:3e:
22:12:17:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:06:54 2026 by rpki-client