
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
File: ZJQ7HSvi-T3WQOAk65TY043OaoM.mft (raw, json)
Hash identifier: dl3GDxK0i7kUEm3yGqcao0R1SFEO4sFTJLJ1MFvcyG8=
Subject key identifier: A5:3D:91:A8:34:EA:9C:3A:21:D4:D7:E6:CB:3D:8F:2B:0B:75:4B:28
Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83
Certificate issuer: /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
Certificate serial: 0200
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
Manifest number: 01E7
Signing time: Mon 27 Jul 2026 05:12:35 +0000
Manifest this update: Mon 27 Jul 2026 05:12:34 +0000
Manifest next update: Mon 03 Aug 2026 05:12:34 +0000
Files and hashes: 1: ZJQ7HSvi-T3WQOAk65TY043OaoM.crl (hash: mvoOayDFSiD4/cquboMJkOllK70Qod0ye4aDsNnbhvg=)
2: 0D5F2416B5B811EEA8ACF557C4F9AE02.roa (hash: qfFd1OkdxxfsdrGhnn3dqFBraYFvXPIV0iQiCI0Bu+U=)
3: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (hash: vS3X0b44bYIp6/Y6sLtHQmuycQrRy1x+aaB6Q+t5xg4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl
rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:12:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8F34, serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
Validity
Not Before: Jul 27 05:12:34 2026 GMT
Not After : Aug 3 05:12:34 2026 GMT
Subject: CN=6a66e8c2-41e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:c1:60:3c:5b:f1:1e:e2:37:fd:64:b7:7e:
ee:96:ad:0c:86:87:c0:91:66:0d:fd:40:f4:ea:25:
52:46:7f:39:87:a5:c9:bf:5b:f6:b2:08:72:ce:9d:
60:8e:a1:30:81:4d:b3:cd:8c:8e:20:d8:bf:a6:93:
8c:62:15:7f:3d:cb:b2:1b:fe:76:7b:59:d1:af:98:
d3:7a:3d:96:d4:e5:a1:96:88:71:b0:44:64:01:ca:
82:d8:77:0c:6e:17:9a:7a:cb:ba:df:42:3f:ba:26:
98:80:ff:70:ba:46:4f:96:af:f3:cf:19:cf:df:58:
40:a7:71:d0:70:e5:2b:a5:94:3c:ab:91:1a:7f:03:
fd:02:3a:c7:0d:13:02:fe:e2:9c:cd:2d:eb:63:e4:
7f:82:e0:15:6a:09:a6:33:0b:b1:7d:24:c5:44:33:
97:db:68:19:d5:9b:31:4e:c9:9b:c7:77:9f:97:9c:
5a:95:5d:67:bc:11:f6:a2:97:ca:b3:fa:d3:13:48:
88:3f:a8:93:b3:da:73:a0:13:54:38:4e:56:fd:c5:
93:39:55:66:63:c0:cc:83:7a:2a:2a:1a:72:55:6c:
df:a9:72:05:9d:8e:67:a5:c4:7c:84:e4:49:7c:cf:
05:52:4f:c1:e8:30:ff:a4:ca:25:39:eb:5a:11:11:
8a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3D:91:A8:34:EA:9C:3A:21:D4:D7:E6:CB:3D:8F:2B:0B:75:4B:28
X509v3 Authority Key Identifier:
keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:07:37:47:39:95:54:44:71:92:d8:91:c4:3c:8b:a8:f4:47:
f6:a7:56:fe:29:b3:df:2b:5b:b6:8c:ac:ef:ad:1b:76:53:44:
3c:82:d6:3b:e0:22:25:6d:30:b6:30:a3:5e:5a:90:69:57:40:
84:8b:75:61:86:1e:53:f4:7d:a0:ed:10:f6:90:45:bd:46:b3:
a6:7e:1c:28:77:6c:e6:79:39:84:4f:77:ef:75:40:35:6e:2e:
ee:59:8c:75:66:02:d2:82:08:25:2d:24:ef:b9:cc:e4:33:8f:
2c:93:97:38:af:61:ca:69:8c:6a:05:aa:06:b2:00:dd:c1:d3:
7f:d7:12:17:f2:ac:50:e9:d4:fb:8d:8f:b9:1e:50:db:ac:07:
1c:39:44:61:81:44:24:fb:bd:dd:25:ff:1f:5a:7b:32:e6:92:
e4:1e:e0:2a:38:90:98:cc:da:fa:ec:05:5f:86:79:fe:a5:39:
97:42:7c:ad:99:ea:fc:1c:63:01:ea:14:df:3f:d1:df:17:28:
c3:94:21:4c:ae:f8:7c:8e:28:40:94:9d:87:38:6e:8c:2c:0a:
d7:67:3b:58:58:07:96:65:a5:2c:41:06:c4:94:91:50:3d:d4:
4a:16:c2:d6:3e:8b:d8:89:ea:66:d2:c3:76:4a:a3:88:86:a8:
02:09:06:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:41:25 2026 by rpki-client