
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft
File: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft (raw, json)
Hash identifier: 5V01jhIRDLyurKBcSbY6v3jr1FRR6Y9eDzleav/3AjM=
Subject key identifier: CB:C8:C5:2E:DC:EA:A4:92:E7:BD:75:10:07:5A:D4:26:80:C3:40:5B
Authority key identifier: 64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00
Certificate issuer: /CN=A91C5ED0/serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200
Certificate serial: 0F1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft
Manifest number: 2C4D
Signing time: Tue 28 Jul 2026 16:57:48 +0000
Manifest this update: Tue 28 Jul 2026 16:57:47 +0000
Manifest next update: Tue 04 Aug 2026 16:57:47 +0000
Files and hashes: 1: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl (hash: lOndfERWcOisgosVnkI5Jpljr7pS/0iuvE4rsEX1waw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl
rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:57:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3866 (0xf1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5ED0, serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200
Validity
Not Before: Jul 28 16:57:47 2026 GMT
Not After : Aug 4 16:57:47 2026 GMT
Subject: CN=6a68df8b-369f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:39:c7:e1:50:5d:c9:e8:8e:9c:20:22:9d:7d:
4a:ae:7d:4d:f0:ba:7a:20:49:61:49:01:55:ce:a1:
87:e8:16:a7:db:72:5b:4d:7e:d6:98:5d:0d:ca:f1:
6f:f5:1d:cb:c3:9d:e9:b4:61:14:53:66:a9:75:9f:
07:fc:1f:3e:eb:8b:f3:9a:cc:e0:39:64:11:39:db:
2f:48:ca:4c:4d:c3:2a:be:8d:7b:c7:e5:72:47:10:
c7:53:58:26:e4:e0:25:d4:90:ba:e1:93:46:64:cf:
23:4d:0e:5c:7f:7c:cd:13:ff:45:48:47:23:a7:62:
56:fa:e3:a9:29:4f:77:91:6a:1d:fd:95:58:1b:6c:
04:2f:d8:1e:b5:2d:06:77:45:7f:7f:1f:45:24:b9:
0a:47:ea:77:bb:78:a4:84:9c:2b:49:57:9a:4e:a8:
9f:bb:d8:28:94:26:8b:d6:a7:6d:33:b7:97:48:e4:
4c:c2:82:97:63:4f:ed:3e:a9:45:83:a5:fa:06:a3:
a3:8b:bb:21:63:a2:0d:15:47:a6:24:3a:ce:32:15:
f7:4e:2c:f0:8b:4e:d7:6a:96:24:30:04:8e:7f:c9:
0f:c5:b1:1e:9e:d2:52:c0:86:b3:27:6e:d6:c4:5c:
a9:56:c7:4a:58:b2:df:7e:ba:dd:da:5b:38:4a:a7:
b6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C8:C5:2E:DC:EA:A4:92:E7:BD:75:10:07:5A:D4:26:80:C3:40:5B
X509v3 Authority Key Identifier:
keyid:64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b2:e3:43:47:90:d5:52:e6:ea:0d:67:22:e2:91:47:ca:21:
2a:53:40:59:62:be:e6:07:64:3c:b5:89:54:25:0e:6a:b1:f5:
a0:d0:ab:24:01:b4:a6:4a:9d:50:d3:82:66:ba:20:af:b4:0e:
47:77:ab:75:d1:0b:8d:7e:e8:c5:e0:1b:64:ff:93:e7:10:79:
17:ad:ce:e1:9a:d9:57:b7:1f:6b:a2:ce:81:5e:d0:92:f0:b9:
a9:1b:8a:90:6e:89:0e:b4:81:cb:8e:ed:e1:ec:4d:2e:63:72:
24:c6:f0:47:8b:1f:f8:6d:4f:28:8d:c9:79:6e:58:ae:b6:2b:
b4:58:aa:10:ae:dc:71:61:0f:79:9f:b8:3f:72:8f:cb:76:03:
8a:82:4f:f6:40:df:de:37:64:a3:20:7c:3d:76:f1:e1:be:4a:
57:0d:c3:aa:a8:f6:02:28:0f:a6:1e:d6:db:64:be:cd:ca:d4:
6d:5a:53:8c:49:08:dd:34:6e:0f:df:0f:31:97:62:fd:52:7e:
6e:94:5a:ef:67:7c:6a:3a:1b:0a:fd:bf:41:aa:7e:79:2a:3e:
79:21:e7:23:58:84:f7:1c:39:2d:b8:62:52:cb:66:c3:87:11:
5e:48:b5:3a:40:10:ac:65:6d:15:ac:92:b2:b0:d9:09:1a:f3:
0e:e5:b5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:07:44 2026 by rpki-client