
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
File: zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft (raw, json)
Hash identifier: MN0pEAGjUqxs7laEIzGliL6ipxBzs4bUJ5Xc3hiW+0w=
Subject key identifier: 73:74:1B:BE:3C:57:CC:0E:DC:93:11:9D:9B:97:4F:58:5F:F9:49:DE
Authority key identifier: CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71
Certificate issuer: /CN=A91AAE63/serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71
Certificate serial: 027A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
Manifest number: 0275
Signing time: Wed 29 Jul 2026 03:01:57 +0000
Manifest this update: Wed 29 Jul 2026 03:01:56 +0000
Manifest next update: Wed 05 Aug 2026 03:01:56 +0000
Files and hashes: 1: zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl (hash: +cp23vMgvX+7O9f1ahr9N8mNdQKDjsVu/pZCLiOf/XE=)
2: 5DCF3814CA0E11ED9251861DC4F9AE02.roa (hash: w0oQeZggvbfthkL7cxUDIxqBwGev5s767WcKvkpmAZQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl
rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 03:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 634 (0x27a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE63, serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71
Validity
Not Before: Jul 29 03:01:56 2026 GMT
Not After : Aug 5 03:01:56 2026 GMT
Subject: CN=6a696d24-c807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:07:cb:95:88:69:72:f1:8b:b9:37:b1:6f:
66:07:e4:a7:5e:76:40:1b:f5:08:0e:3c:7a:93:ee:
e4:54:6a:2f:00:75:79:2e:71:8f:01:12:04:c6:a0:
f2:ea:17:af:a3:dd:d5:ff:72:48:29:c7:31:76:28:
05:29:f9:82:66:a2:69:c8:8a:6a:bb:ad:4d:2a:0d:
cd:23:81:32:b7:fa:9b:1f:3e:41:71:b8:b6:81:73:
9c:24:a4:2b:e9:40:17:67:c9:1b:66:4e:34:ee:9b:
7d:4d:e9:2c:62:6f:89:6a:fc:28:6f:c0:78:6c:c7:
19:04:78:a8:64:d5:b5:12:e9:1f:8c:06:a1:0e:28:
12:a2:93:9d:68:70:ec:02:79:6e:04:05:11:95:80:
da:e0:34:84:b1:32:3d:58:7a:b3:5d:bc:38:d2:6f:
f2:40:aa:6b:ec:bc:ba:d9:1c:02:27:57:c6:a6:cb:
7b:52:9f:72:df:9c:a5:90:88:6d:14:32:7c:70:50:
d1:66:33:d5:d0:9d:16:b7:6f:c9:25:dd:86:57:fc:
33:d3:60:8e:db:e1:a4:a7:f6:07:6e:7f:8b:4f:e0:
34:55:aa:df:10:92:7b:b0:60:46:c3:9d:82:80:29:
75:af:f6:f9:7c:b1:84:8e:7e:c5:9c:d0:99:72:f5:
55:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:74:1B:BE:3C:57:CC:0E:DC:93:11:9D:9B:97:4F:58:5F:F9:49:DE
X509v3 Authority Key Identifier:
keyid:CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:03:d5:77:32:57:4a:1a:ba:cc:b1:66:4e:fd:74:cf:51:2f:
35:d3:15:ee:13:2e:b2:72:c5:dd:5d:e6:33:26:9e:53:08:7b:
fa:7f:81:1c:85:1c:4e:57:26:a3:c8:59:b9:45:a0:3c:8e:de:
16:db:23:59:8d:c6:f8:08:3b:bc:68:2f:cd:63:f7:d7:5a:3a:
0b:1d:e2:be:cf:b0:9c:90:16:f8:32:cb:2a:73:f7:92:14:93:
ef:af:43:03:41:2f:6a:ac:c2:f3:cb:ec:e9:2a:a9:2e:3a:f9:
83:77:3d:58:25:85:8a:8e:e8:42:65:5c:c0:0c:ea:d9:30:d2:
58:06:63:b1:0d:1c:92:10:7c:5c:e5:17:62:72:3d:9e:08:8f:
a6:04:93:5c:40:95:7e:50:91:90:3f:51:4d:95:bc:81:ee:da:
b5:24:6a:18:1a:e8:2e:1b:16:a6:23:47:c7:1b:77:96:4e:9e:
0d:cf:58:43:70:1c:1f:79:11:bf:82:aa:1e:c5:89:24:87:40:
da:1a:74:ac:59:86:45:89:66:cd:98:2b:e2:34:87:03:46:c8:
d9:68:17:1a:8d:3a:10:2c:52:7d:ff:63:b7:43:6c:c3:12:89:
32:05:df:f1:be:a7:bb:76:3a:72:85:dc:28:03:20:92:2e:d4:
9a:dd:07:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:03:43 2026 by rpki-client