
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
File: zF1c4NwYIQkMvHU417txI3GQguc.mft (raw, json)
Hash identifier: C6davGovQx82siVI0gpgqxihIE7l688UdYWnCHT0COk=
Subject key identifier: BF:F8:84:0E:09:D9:A8:7E:14:EE:EF:C9:04:36:31:8A:C3:4C:0C:51
Authority key identifier: CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7
Certificate issuer: /CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
Certificate serial: 08F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
Manifest number: 08E1
Signing time: Fri 12 Jun 2026 20:23:21 +0000
Manifest this update: Fri 12 Jun 2026 20:23:21 +0000
Manifest next update: Fri 19 Jun 2026 20:23:21 +0000
Files and hashes: 1: zF1c4NwYIQkMvHU417txI3GQguc.crl (hash: lt8zX7EHJLoXZTMxobTEGl/BJ2/p9Lo8t7tffL47FDg=)
2: 3A4918D41DED11F18280100E163D8C67.roa (hash: Juhjiq7zpIGJ2ca6uyWvgKrk4pkgUf8b9Px9rrY5jmY=)
3: A3FFFAF41DED11F18835BD3E163D8C67.roa (hash: 5k8cO87Qj/gNgbt2kI9Eh+2F5/UczXoTj75VoZrq4q4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl
rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2293 (0x8f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C91A6, serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
Validity
Not Before: Jun 12 20:23:21 2026 GMT
Not After : Jun 19 20:23:21 2026 GMT
Subject: CN=6a2c6ab9-a39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:32:f7:e3:e0:29:d2:d7:7d:14:8b:ba:7c:
cd:d6:cc:3a:73:bb:36:68:2c:76:97:e1:df:77:f8:
b2:8a:70:71:27:ee:34:9e:f2:9e:8d:23:c1:95:aa:
55:be:7f:f7:c3:7e:9b:5a:ba:d7:11:f6:9c:fe:10:
1a:07:4a:e1:d6:5a:0a:60:09:6e:07:b9:34:40:2a:
2a:81:da:e3:1a:3d:b7:a0:be:12:8d:96:10:5e:66:
d5:fa:37:5e:c3:17:0e:cf:84:5c:0c:7a:90:2f:c0:
8b:b3:bd:c5:c5:49:11:5d:82:bc:f5:81:cf:79:10:
ef:f5:17:ef:5b:9d:87:e3:d9:af:cc:e7:ff:c9:65:
e8:db:de:b6:9f:11:4d:68:02:92:67:f5:57:6d:54:
0c:20:b7:ea:3e:d4:84:e3:23:36:da:11:25:4d:5d:
7e:b6:6d:8e:c2:a6:59:bf:b6:49:66:58:cb:58:84:
74:ec:36:9d:c9:bf:3e:ba:ca:98:14:de:68:c5:8d:
1a:b8:6a:a4:45:d7:0b:30:7a:dc:7a:cc:b4:23:45:
34:96:d6:84:1a:e2:4d:ca:f0:7a:4a:19:df:91:9f:
e0:66:04:94:03:2d:ea:2c:e4:51:25:e6:aa:57:b3:
01:85:b9:1c:ae:6f:81:03:ca:7c:2f:53:b1:f6:cb:
21:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F8:84:0E:09:D9:A8:7E:14:EE:EF:C9:04:36:31:8A:C3:4C:0C:51
X509v3 Authority Key Identifier:
keyid:CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:58:5f:3d:0f:b3:6b:7c:a2:36:d3:6e:2e:18:81:9d:9d:8c:
ca:4f:73:37:b3:ea:4b:3d:1e:1d:be:12:79:35:7b:39:3e:c8:
e9:70:1a:8c:97:5d:1d:03:24:76:ad:3a:9d:07:f0:1d:c9:6a:
7a:fe:1d:67:61:e3:79:c7:39:49:38:cf:7b:53:07:75:c9:18:
27:7f:d1:85:f1:40:02:56:58:81:43:6f:ed:e9:74:3a:c6:f7:
57:fc:10:6e:85:da:f2:cf:c8:4b:96:a7:5b:0d:6d:29:73:ac:
23:44:fb:95:7b:b1:cb:50:ff:ee:a0:fd:35:5b:ae:ee:a4:6d:
f9:d6:45:90:a7:4d:52:c7:5b:65:27:64:dc:13:f3:c6:7f:e9:
87:c3:5c:dc:87:b8:b7:d9:f7:a0:37:b6:cb:ff:cd:03:ea:5e:
ea:5e:77:e6:b7:71:4c:21:3c:cf:42:5a:f6:59:f3:46:d4:95:
66:73:71:94:da:b5:e2:7b:b0:c4:03:10:72:6c:94:78:3b:70:
80:71:42:08:5b:aa:7d:89:30:ec:3f:10:74:7a:b1:fc:bb:79:
16:e0:d4:c0:ea:50:ba:49:47:a5:b1:c0:42:18:76:a1:65:c5:
fe:b0:38:88:7b:0e:97:6d:cb:b6:70:d9:55:93:4e:22:ba:a4:
36:66:96:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:33:39 2026 by rpki-client