
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft
File: 1RZ7lweHQQlX4l2fh1CFYPAFd24.mft (raw, json)
Hash identifier: VwkYnrb4GReaAMjKOIeUR8uhpAP19H32Iro9xp5ogco=
Subject key identifier: 42:58:DE:A5:5A:C5:E5:50:8A:DC:42:5B:76:3D:39:97:4F:51:1F:92
Authority key identifier: D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E
Certificate issuer: /CN=A91B9011/serialNumber=D5167B970787410957E25D9F87508560F005776E
Certificate serial: 0681
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft
Manifest number: 067A
Signing time: Fri 12 Jun 2026 22:35:54 +0000
Manifest this update: Fri 12 Jun 2026 22:35:53 +0000
Manifest next update: Fri 19 Jun 2026 22:35:53 +0000
Files and hashes: 1: 1RZ7lweHQQlX4l2fh1CFYPAFd24.crl (hash: FI4ybDcOqZtxZ/aRF2xJQDobHqzq9XvfuYFhu7sOcUs=)
2: 438893AC55BE11EDBDE51983C4F9AE02.roa (hash: gL7cp7BTVKF8NZn2TWA67vSTXMDPVWx2RqBEPS0dmPw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl
rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:35:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1665 (0x681)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9011, serialNumber=D5167B970787410957E25D9F87508560F005776E
Validity
Not Before: Jun 12 22:35:53 2026 GMT
Not After : Jun 19 22:35:53 2026 GMT
Subject: CN=6a2c89ca-c425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:45:2f:a2:57:f0:f3:d3:a2:d3:7e:84:1f:fc:
d8:26:dc:e0:8d:b6:89:be:bd:bc:5b:41:d2:bb:00:
a4:40:1c:28:a4:01:98:50:c6:69:57:b4:15:9b:d1:
80:46:f8:10:ca:ba:1f:8d:49:37:33:22:e1:de:d0:
18:b7:14:db:7d:8b:8e:1a:03:f7:3d:07:86:a4:6e:
31:93:27:37:09:70:b2:ad:05:90:cf:bb:94:75:5e:
6b:a8:6e:66:55:01:0f:85:3b:c4:24:a1:1f:17:10:
b2:49:95:ab:f6:28:3d:e1:25:90:ab:c9:44:05:04:
32:3e:89:88:17:5f:71:a7:fb:79:0f:a8:e0:59:b2:
5f:d4:db:b3:d1:71:37:7d:0f:b3:93:53:80:26:54:
f2:65:2f:ad:fd:ab:c5:38:23:06:37:e3:82:be:23:
6d:e8:26:de:30:68:82:03:8d:ba:01:56:d2:12:8e:
13:9d:68:ea:60:c7:f1:52:df:69:09:54:8d:33:3d:
f0:ec:1c:df:25:e0:2b:db:22:87:43:47:68:ad:04:
54:53:6c:46:0e:6b:50:75:5f:b2:ce:ed:eb:31:49:
6e:c9:9b:e2:ce:f9:2f:54:b9:c3:b8:9f:aa:e8:19:
99:79:44:b2:55:c1:e8:c0:54:78:53:39:df:0a:e0:
9a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:58:DE:A5:5A:C5:E5:50:8A:DC:42:5B:76:3D:39:97:4F:51:1F:92
X509v3 Authority Key Identifier:
keyid:D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:aa:ed:a0:b2:bc:cb:16:42:c9:a9:f5:12:90:4d:4c:c0:8f:
d5:3b:40:aa:e3:59:8b:7f:4e:b7:fc:2e:66:1b:66:9e:54:8e:
bf:45:84:45:8b:d5:5c:3c:03:71:83:e9:2c:2a:f0:33:71:88:
98:5a:73:79:9b:88:2f:f7:72:b5:02:7e:72:22:4b:07:a2:eb:
7c:1c:9e:00:17:d7:c4:67:86:49:d1:28:e1:f4:17:b6:0a:fa:
97:d9:a2:f3:37:92:3a:be:3b:cc:d9:10:d2:ad:d3:94:4c:57:
08:58:45:df:ec:6a:a2:87:d2:db:32:61:66:8f:41:ba:87:41:
6c:f1:50:3d:18:8e:b2:b7:65:69:3c:a5:6f:9d:af:52:ad:43:
19:55:0f:83:a5:70:23:ec:f1:0e:c2:eb:81:d5:0a:09:a6:19:
49:fa:a9:a3:da:95:3e:22:de:0d:82:9a:40:d6:7c:ab:26:0c:
18:6e:d9:70:02:c1:4f:6c:0e:e5:b9:e6:77:6c:75:a3:87:b6:
1c:ec:05:3f:5e:bf:cd:6b:1e:d4:27:cf:d6:af:16:b7:dd:c3:
c4:cb:9e:39:fc:f9:03:1e:11:11:c4:93:e3:ab:20:6a:66:90:
81:d9:39:4c:f5:91:2f:c0:1f:41:03:b4:64:c7:77:f8:1e:64:
54:e6:32:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:35:03 2026 by rpki-client