
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
File: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft (raw, json)
Hash identifier: oSMNS1xjDL8pKnLXIh+QheIwuLyKy6AYUyGhvkydSHc=
Subject key identifier: A2:15:66:51:8B:08:C8:BE:7D:B2:A9:FA:D4:D6:FE:68:02:0B:C5:0B
Authority key identifier: 65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC
Certificate issuer: /CN=A91B005C/serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC
Certificate serial: 066D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
Manifest number: 065E
Signing time: Sun 26 Jul 2026 23:31:01 +0000
Manifest this update: Sun 26 Jul 2026 23:31:00 +0000
Manifest next update: Sun 02 Aug 2026 23:31:00 +0000
Files and hashes: 1: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl (hash: lFQ3yOzcMUbPee49k5vTWLpQRSuub8tAANGch1X8h4s=)
2: FC28C1AE9BE011EC8EE90745C4F9AE02.roa (hash: N8Z5+djN5CjXBtCFKd+fBabCsOPTDCpY/BSexlhMsOA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl
rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1645 (0x66d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B005C, serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC
Validity
Not Before: Jul 26 23:31:00 2026 GMT
Not After : Aug 2 23:31:00 2026 GMT
Subject: CN=6a6698b5-c9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:de:02:73:77:f6:10:d8:44:58:83:11:b2:c7:
fb:f9:be:8b:38:62:ef:11:fa:59:57:3a:55:20:e5:
47:12:ef:c4:48:36:fc:b7:f7:d1:ea:6d:2e:cc:b5:
ab:7f:38:51:17:20:83:00:27:9e:37:a5:f8:ea:a5:
13:8f:05:17:55:8a:dd:8a:d8:de:54:9d:ad:b4:72:
0e:ea:e3:45:f2:94:c6:16:15:b7:59:67:a4:9f:93:
5e:31:16:31:a2:1e:23:db:c9:d7:b3:bf:ae:e2:3d:
57:53:6a:49:5a:1c:66:d6:1e:1a:e6:d0:d0:f9:0f:
f7:ff:af:cb:04:0a:ed:de:1e:7b:b7:a5:13:fe:50:
7a:74:a8:67:54:29:59:78:5a:7c:df:f4:ab:40:28:
47:69:ab:e5:99:8a:a2:3e:0b:f3:6a:5c:c2:d2:f7:
c4:7c:c5:af:83:d7:b5:d7:e2:6a:fc:c5:e9:18:1d:
10:31:1e:f7:75:c9:e1:6b:58:3d:d3:e4:c2:65:87:
14:01:85:d1:2e:74:77:ec:c0:ee:6f:67:24:fc:64:
4e:6c:12:b9:e6:ee:fc:a7:6d:7a:ef:ce:2e:d9:0b:
43:62:bb:55:01:46:a3:ad:bc:99:4b:60:f6:92:10:
3a:ec:4c:aa:71:17:b4:9f:a6:93:b5:c5:e8:25:cf:
45:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:15:66:51:8B:08:C8:BE:7D:B2:A9:FA:D4:D6:FE:68:02:0B:C5:0B
X509v3 Authority Key Identifier:
keyid:65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ea:e2:be:d5:3d:85:cf:28:62:ae:92:59:11:b0:b4:78:3d:
3b:e1:78:e7:59:05:3b:bb:28:c1:d2:73:99:ae:4c:8d:d5:b9:
7b:1d:84:86:d7:44:d0:a1:02:d7:46:33:37:29:03:4d:b2:f0:
e4:86:7f:be:a6:7d:48:3e:e8:8f:be:4e:23:c1:b5:6b:fd:ea:
0d:a0:c0:53:99:8c:12:a8:a7:24:9c:eb:85:b6:e2:11:d6:77:
0a:f5:8d:cc:7a:31:c7:ad:13:34:da:65:30:1e:45:93:a1:a2:
7b:8f:44:71:40:88:59:97:35:5c:c8:00:b9:5d:19:dd:a8:8c:
91:3d:b1:78:81:e6:01:c3:d4:ba:05:ee:80:93:1c:a8:1f:3e:
8b:ce:f3:65:4d:b1:e8:6f:bc:3d:14:69:d8:2b:53:85:c6:63:
2a:df:79:de:c6:e0:d4:9e:53:dd:65:a5:65:a5:6a:f9:40:fb:
ba:c0:0a:b3:8b:14:7d:2c:c8:1e:43:ce:9c:bd:ac:2e:3f:fe:
ac:57:e9:2e:47:49:7f:2b:7d:ca:e0:bc:e1:bc:81:be:bf:3f:
fe:3d:6d:8e:91:cb:7d:53:93:84:9f:8c:01:eb:bf:2c:db:eb:
90:3d:3e:66:b4:6e:12:36:4b:ec:7f:aa:f9:ba:09:f7:af:bc:
aa:da:90:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:46 2026 by rpki-client