
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
File: ZnYczRtMiDhOakBAKM2an4Cd4nY.mft (raw, json)
Hash identifier: 1EzGnpvmti/ov00T6R/seLpAmyfoFFgRHwlhmH9EW+g=
Subject key identifier: 58:F8:09:1F:86:B2:F3:A7:60:30:A7:8A:A5:56:6C:BB:0A:C1:20:B9
Authority key identifier: 66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76
Certificate issuer: /CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276
Certificate serial: 020C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
Manifest number: 01F2
Signing time: Sat 13 Jun 2026 03:36:33 +0000
Manifest this update: Sat 13 Jun 2026 03:36:32 +0000
Manifest next update: Sat 20 Jun 2026 03:36:32 +0000
Files and hashes: 1: ZnYczRtMiDhOakBAKM2an4Cd4nY.crl (hash: oH/OXE3TV+qnqlN+tQ0a2HyS9WQxSiiSDw3r0KKYTAY=)
2: AD0C045C8C8511F0B59F1C60C4F9AE02.roa (hash: HGdDjcoTsUm7kJL5rC6tXKA4D2ZhJnskWqB8F3KifFs=)
3: BD8B68BA42CC11F1BD2C946EC6833773.roa (hash: DBXb6/VeFR/zv0bPvOEf3LFvbD14Qt+KDwY55i+OIyk=)
4: DD822DE842CC11F18C82326FC6833773.roa (hash: k2rUg/X8WAE8IJpYMJbr70n/z6HpIadKYDYrSsSt/+4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl
rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:36:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 524 (0x20c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C09C5, serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276
Validity
Not Before: Jun 13 03:36:32 2026 GMT
Not After : Jun 20 03:36:32 2026 GMT
Subject: CN=6a2cd040-ccee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b0:02:a9:37:59:b6:fa:c3:fd:e1:9a:d8:9a:
46:1a:8c:cb:12:85:23:ee:20:8c:1f:ee:cd:b6:da:
f5:bc:19:07:49:a9:75:e2:f7:3c:21:77:50:cf:39:
e5:fb:5d:35:6f:f3:ff:10:1d:2c:76:19:ca:3c:49:
04:e7:cf:2a:e6:43:2d:1a:02:82:36:e3:38:ec:a5:
03:7b:2f:58:56:53:f6:08:37:69:80:2e:97:29:31:
e1:b7:9f:44:8f:75:08:f2:12:5a:50:d1:e2:b1:49:
d0:1f:b0:97:b5:25:3f:f7:8d:1d:e5:2b:e5:ac:73:
e1:9e:55:8b:dc:e2:cc:c0:f6:3b:29:89:6b:f6:19:
2b:1f:27:1a:6e:86:70:a7:e6:a4:eb:8f:0b:0e:bc:
77:6d:6b:2b:da:4e:80:cc:2d:7d:95:c3:ee:c5:9f:
97:ca:71:9b:eb:ee:9d:82:62:24:ce:c3:21:d9:ac:
90:ec:66:d2:e9:fd:63:cc:91:a5:8c:5a:ef:76:6d:
11:14:cb:f0:bc:bf:3f:de:e4:b6:a5:82:c4:d8:80:
9f:6f:56:dd:9b:ba:fb:b7:4d:a9:c3:d9:94:c2:61:
3c:1e:f6:b9:ff:52:f5:08:99:5d:8b:98:72:fb:a0:
9d:c0:b3:a0:ff:66:4f:3b:7a:ff:75:30:77:2b:35:
05:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F8:09:1F:86:B2:F3:A7:60:30:A7:8A:A5:56:6C:BB:0A:C1:20:B9
X509v3 Authority Key Identifier:
keyid:66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ee:8a:31:08:c4:6b:ed:51:b9:05:d6:f0:e5:1c:cd:f8:6a:
7c:b5:1b:22:d6:88:a4:0c:03:23:e3:32:a8:e4:0a:1b:e6:94:
3c:ac:4a:c1:e3:56:a9:d6:5a:2a:79:71:9e:9d:d1:e7:b2:f0:
1b:1b:8d:2c:04:0a:16:cc:e5:3f:22:9b:10:fb:fd:16:bc:a6:
44:15:93:0a:a2:52:c9:2a:19:80:23:a2:d0:af:8e:8f:90:16:
96:ff:7c:44:3f:cc:bc:35:4c:29:7f:d7:e6:8a:e6:47:e3:70:
93:64:e1:a7:1f:60:3a:27:9d:60:11:f6:81:41:74:d0:11:9f:
1d:c4:81:b1:cd:cc:1f:1c:7f:ea:e2:48:4a:34:5b:82:fa:85:
9f:34:ba:83:67:1b:95:88:ee:73:4e:48:e8:ba:6c:3d:c3:28:
06:47:a7:d6:3f:a7:54:a6:f7:e3:3e:34:f4:21:fa:cf:b8:d0:
c0:fd:de:65:46:18:26:41:bd:08:e3:4e:07:64:50:97:d1:ce:
f4:0e:87:4f:c3:eb:8f:3a:d9:16:ea:60:d0:44:6b:e5:5a:27:
83:71:3a:8d:ef:45:e0:1b:6f:59:f1:25:c5:03:ae:ef:29:39:
07:1a:94:b5:e1:87:28:9b:53:d0:1c:29:52:64:16:a4:50:88:
f6:d4:35:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:25:51 2026 by rpki-client