
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft
File: ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft (raw, json)
Hash identifier: cA2nPL+bL+dcq/6bq4fNKBxZfapDZOpmok985Dc8Zpo=
Subject key identifier: 54:E3:9C:C0:29:C1:CE:7D:D7:87:B6:95:BE:22:95:52:04:E4:2B:E9
Authority key identifier: 65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E
Certificate issuer: /CN=A91D58F6/serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E
Certificate serial: 0EFA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft
Manifest number: 0EEB
Signing time: Fri 12 Jun 2026 17:36:34 +0000
Manifest this update: Fri 12 Jun 2026 17:36:33 +0000
Manifest next update: Fri 19 Jun 2026 17:36:33 +0000
Files and hashes: 1: ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl (hash: qQMJj7Be/wnD02e3r9VFv2tUP0JDVlX3wlpQ6em3A+s=)
2: C0743AE8A6B611E9AB731B69C4F9AE02.roa (hash: iihOs73vGdIvHbM2jbGXnunoWi4oTaT680dFjp4s8/Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl
rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:36:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3834 (0xefa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D58F6, serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E
Validity
Not Before: Jun 12 17:36:33 2026 GMT
Not After : Jun 19 17:36:33 2026 GMT
Subject: CN=6a2c43a1-9ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b4:92:02:3d:f3:b8:45:bd:cd:52:ca:ad:dc:
8b:6e:40:d2:49:0a:6b:d2:90:3c:69:e4:e6:af:a5:
eb:09:19:4b:49:5e:7e:c1:0b:81:fb:d1:8f:2d:12:
ec:f0:1f:53:17:eb:a6:05:84:5d:88:38:b9:ff:0f:
96:99:fd:0a:34:8f:11:8e:5b:a1:46:02:0f:78:fd:
2c:21:8f:bc:2d:e2:1c:55:a2:f8:b4:2d:41:50:cf:
0e:06:4d:a5:23:e1:ac:23:d3:71:e7:a5:77:1b:47:
56:a9:11:e6:41:e9:d6:6a:80:56:21:04:48:40:e9:
65:37:d5:9c:aa:be:04:ec:70:35:33:0b:b5:48:cc:
22:b9:7c:c5:2a:e4:f8:9b:0a:e5:98:d9:47:ce:47:
56:d0:9b:1f:45:97:b2:2e:76:e8:1d:29:58:03:7d:
fe:0c:49:bb:77:d0:66:af:b8:ab:b8:1d:ed:16:28:
d4:32:60:e5:40:ba:91:ec:e8:e1:6f:28:a9:f3:fc:
f3:8e:62:a5:91:2a:ed:2d:1c:76:33:40:ce:c3:67:
bd:36:ce:b6:08:1f:9a:0c:5c:be:d2:29:5b:b5:8c:
45:c2:ce:f8:90:f4:9f:3b:59:93:30:a6:f8:8a:5e:
d7:c4:f4:2d:08:71:aa:6d:d1:37:84:da:06:58:c6:
cc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E3:9C:C0:29:C1:CE:7D:D7:87:B6:95:BE:22:95:52:04:E4:2B:E9
X509v3 Authority Key Identifier:
keyid:65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8e:ca:58:79:9e:90:0d:30:a4:da:a6:1a:9b:27:4c:a3:6d:
38:ae:aa:0e:b5:61:ca:46:30:dc:3d:be:63:53:8e:79:44:79:
6a:52:9b:98:a8:05:1a:c6:95:59:5f:d5:7a:f0:67:d5:fb:dc:
d7:44:61:a7:86:cc:51:b3:42:86:a1:8d:17:e8:0a:0c:ba:32:
aa:04:39:b0:e1:85:88:81:48:73:cc:c9:c6:37:88:de:be:fb:
d2:f4:81:76:8d:fd:1b:d6:63:3b:f5:ee:2b:02:15:cf:28:7d:
e9:14:4f:4d:40:a8:e2:44:dc:36:a1:f7:41:3c:00:4b:f1:01:
41:88:e0:80:ca:da:0f:b6:30:b4:ca:2a:a1:ac:f1:34:c8:30:
19:e4:db:fa:97:5c:11:dd:f0:92:0c:9b:89:b5:67:c5:5a:80:
dd:32:51:d5:ca:e9:ed:68:6a:e9:79:12:26:d0:ea:ad:7b:d1:
bd:3b:2b:08:f6:98:d8:3d:38:d4:3c:33:93:55:7b:5b:4b:65:
f8:af:ac:18:94:eb:8b:ed:af:82:6a:e5:cb:21:7b:73:64:c2:
87:8c:9c:60:35:60:47:ff:44:e6:1c:13:0b:f9:44:d8:ed:f3:
60:6f:90:a8:38:3b:10:f3:da:ee:b1:ec:8a:b1:9a:d6:24:a7:
25:ea:56:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDU4RjYxMTAvBgNVBAUTKDY1RDkxOTBGRkM4NjlDOTRGNTgyMTkwRkFBRDQwRjA1
MTRBNUJBNEUwHhcNMjYwNjEyMTczNjMzWhcNMjYwNjE5MTczNjMzWjAYMRYwFAYD
VQQDEw02YTJjNDNhMS05YWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8rSSAj3zuEW9zVLKrdyLbkDSSQpr0pA8aeTmr6XrCRlLSV5+wQuB+9GPLRLs
8B9TF+umBYRdiDi5/w+Wmf0KNI8RjluhRgIPeP0sIY+8LeIcVaL4tC1BUM8OBk2l
I+GsI9Nx56V3G0dWqRHmQenWaoBWIQRIQOllN9Wcqr4E7HA1Mwu1SMwiuXzFKuT4
mwrlmNlHzkdW0JsfRZeyLnboHSlYA33+DEm7d9Bmr7iruB3tFijUMmDlQLqR7Ojh
byip8/zzjmKlkSrtLRx2M0DOw2e9Ns62CB+aDFy+0ilbtYxFws74kPSfO1mTMKb4
il7XxPQtCHGqbdE3hNoGWMbMLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFTjnMAp
wc5914e2lb4ilVIE5CvpMB8GA1UdIwQYMBaAFGXZGQ/8hpyU9YIZD6rUDwUUpbpO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThGNi81NkJFMEM3Q0E2
QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25KVDFnaGtQcXRRUEJSU2x1
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pka1pEX3lHbkpUMWdoa1BxdFFQQlJTbHVrNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NThGNi81NkJFMEM3Q0E2QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25K
VDFnaGtQcXRRUEJSU2x1azQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnY7KWHmekA0wpNqmGpsnTKNtOK6qDrVhykYw3D2+Y1OOeUR5alKbmKgFGsaV
WV/VevBn1fvc10Rhp4bMUbNChqGNF+gKDLoyqgQ5sOGFiIFIc8zJxjeI3r770vSB
do39G9ZjO/XuKwIVzyh96RRPTUCo4kTcNqH3QTwAS/EBQYjggMraD7YwtMoqoazx
NMgwGeTb+pdcEd3wkgybibVnxVqA3TJR1crp7Whq6XkSJtDqrXvRvTsrCPaY2D04
1Dwzk1V7W0tl+K+sGJTri+2vgmrlyyF7c2TCh4ycYDVgR/9E5hwTC/lE2O3zYG+Q
qDg7EPPa7rHsirGa1iSnJepW/Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:32:35 2026 by rpki-client