
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
File: ZJQ7HSvi-T3WQOAk65TY043OaoM.mft (raw, json)
Hash identifier: viDCo86jJepNPPlvN2aq24pxD0+yXcfeyXEuCmo9nG4=
Subject key identifier: F1:C6:C2:BE:91:C9:13:9F:4B:C8:5B:BA:67:91:30:F9:66:CC:F1:69
Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83
Certificate issuer: /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
Certificate serial: 01E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
Manifest number: 01CF
Signing time: Sat 13 Jun 2026 03:48:42 +0000
Manifest this update: Sat 13 Jun 2026 03:48:42 +0000
Manifest next update: Sat 20 Jun 2026 03:48:42 +0000
Files and hashes: 1: ZJQ7HSvi-T3WQOAk65TY043OaoM.crl (hash: CuzmsEpt5voZ6uUqBWZRvbFWpl+WBJ+zHrensXOQe5Y=)
2: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (hash: oegRAcugKLatUbTXSLvKEbrye0Tdi4sy7aoKF/I5tTI=)
3: 0D5F2416B5B811EEA8ACF557C4F9AE02.roa (hash: MiKf/hrtY4nGNwWt8u8etuZ0Gw3xF9JGpGA4BCKSaOs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl
rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 486 (0x1e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8F34, serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
Validity
Not Before: Jun 13 03:48:42 2026 GMT
Not After : Jun 20 03:48:42 2026 GMT
Subject: CN=6a2cd31a-52d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:b6:fe:49:95:6b:a1:1e:bb:d3:8d:74:45:
82:cd:b3:40:e1:6c:a2:ae:b2:fd:18:7d:fe:a9:e4:
5b:74:c2:fd:64:f5:b7:21:61:62:60:89:41:f3:7b:
d9:db:97:6c:50:df:22:09:d4:b2:2c:87:45:6a:a4:
37:83:d0:bb:8a:e4:ee:1a:d1:35:cf:d9:36:1a:45:
be:bd:22:47:f0:ff:df:c5:96:7d:e7:01:62:b6:51:
5d:b3:2e:8e:73:58:44:dc:75:a7:8a:83:66:89:d3:
04:93:d5:2a:ef:5a:05:4b:e0:23:d0:d5:c3:53:5d:
02:a8:32:14:f3:5e:7b:24:96:16:21:67:70:96:bc:
38:38:7c:6d:f2:c9:f5:9d:0b:36:e2:07:40:b6:1a:
67:e4:15:8e:56:78:71:1f:fd:63:33:fc:77:46:7d:
d5:5f:8e:33:00:eb:0f:32:ef:90:ab:30:80:08:41:
23:98:4b:7b:db:19:27:e9:ed:63:dd:a6:d5:af:97:
98:81:17:cf:ce:5e:e8:cd:9e:42:9c:bc:c3:8e:f2:
e8:22:5a:5f:ac:3b:92:68:1f:96:dc:f0:89:06:35:
f0:e0:bd:e1:6e:c9:62:6c:0d:10:20:46:ef:16:1a:
5e:c9:55:e9:67:7b:02:c3:a8:0d:2c:01:c2:e9:00:
82:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C6:C2:BE:91:C9:13:9F:4B:C8:5B:BA:67:91:30:F9:66:CC:F1:69
X509v3 Authority Key Identifier:
keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:a0:cd:49:74:4d:02:cf:f7:9b:64:b0:f6:fc:f6:5e:d2:e9:
d4:a3:68:46:02:18:f5:44:8c:3d:6d:ad:91:0c:5b:42:e5:6a:
53:54:0d:f8:32:a1:df:d8:0b:b4:c6:dc:c5:d2:8f:dc:2f:40:
01:f6:26:f4:dd:55:53:5f:0b:79:ac:f7:f7:a9:26:71:70:da:
68:0f:d8:38:e7:a6:b2:87:ef:a4:10:7d:94:23:08:88:e4:fe:
96:ca:91:91:76:98:ea:5f:1b:14:a3:ed:d1:dc:ca:9c:f2:13:
08:b0:e6:4d:39:fa:0c:25:a6:7a:69:7a:75:07:a8:da:b0:86:
00:f1:f6:a6:5f:0c:5e:85:02:c4:71:9c:af:ea:c4:ad:e5:a0:
81:41:ab:45:a5:67:db:61:f5:9d:59:4c:da:b0:db:00:ec:ad:
55:c2:7b:5b:bf:fb:a8:83:f2:30:44:59:a0:ad:5e:33:87:a0:
16:9f:ee:43:21:e8:90:e9:86:f1:69:bd:a3:76:80:29:14:d7:
69:08:6b:47:2e:a6:b6:31:ed:ba:46:aa:81:3b:a7:36:0e:7c:
e0:6a:2e:17:d4:5d:c9:82:b2:4a:5c:ed:04:b7:54:b9:6f:67:
d3:b7:56:4a:c3:b6:47:34:e0:47:87:e9:b0:50:30:75:e6:4f:
04:42:d0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:07:33 2026 by rpki-client