
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
File: ZKte21ESYrc2r4F0HU1zFBTTSlc.mft (raw, json)
Hash identifier: w5IdQBSJXD7Wij9zEp2cABxWtf0Ay507iKSrFphS+og=
Subject key identifier: DA:38:19:5C:9B:ED:B0:E0:01:FB:85:79:CF:F6:B2:BE:33:7A:70:F2
Authority key identifier: 64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57
Certificate issuer: /CN=A91DD11A/serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
Manifest number: 6D
Signing time: Thu 11 Jun 2026 10:21:38 +0000
Manifest this update: Thu 11 Jun 2026 10:21:37 +0000
Manifest next update: Thu 18 Jun 2026 10:21:37 +0000
Files and hashes: 1: ZKte21ESYrc2r4F0HU1zFBTTSlc.crl (hash: HCe3M1+lPi30mWZwHI6NSfHmzB8kIQ6v8k7QHffZ+DI=)
2: E4DCE562284911F19931E6E894833773.roa (hash: 0yKy3aBVwlRdNI3lMwh0VFIrVrZK1Q3eetgCew0uics=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl
rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 10:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD11A, serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57
Validity
Not Before: Jun 11 10:21:37 2026 GMT
Not After : Jun 18 10:21:37 2026 GMT
Subject: CN=6a2a8c32-c2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:59:87:a5:70:89:b1:8a:4b:95:3f:86:7e:5a:
0a:ed:52:2e:2d:35:a1:76:90:fb:dc:d2:90:5c:8a:
e7:7e:a4:bb:c9:7a:fe:27:4f:3a:08:2d:b6:d2:82:
46:52:36:a0:21:08:72:e3:44:3c:cf:74:39:24:bc:
7b:b9:e9:b0:67:13:6e:82:38:07:b1:9e:44:01:14:
a9:c0:8f:79:15:db:1a:31:11:7a:39:4a:c3:e5:5e:
e5:56:80:e0:2c:d5:9d:2b:47:24:6f:59:51:17:5d:
fd:3b:14:64:83:29:ae:af:0b:db:e9:7f:66:86:31:
90:0b:de:20:7f:ab:3e:03:39:76:e2:5a:ff:35:32:
c2:47:a1:68:48:b1:0d:9a:10:55:fc:c4:ed:c5:81:
3c:1f:5a:7d:bd:d0:06:f2:e5:6e:1e:b5:74:51:66:
f0:ea:50:54:53:94:fd:bf:16:87:36:56:30:4f:1b:
72:5e:0a:64:ac:8b:3f:b7:77:60:17:f2:fe:1e:f5:
34:18:e3:b0:21:37:4c:ce:ab:b5:11:48:8b:8c:b3:
ea:96:97:46:ed:00:6a:40:18:84:78:6a:77:25:cd:
e4:41:3c:1a:6b:b3:af:0f:8d:c8:97:c2:1b:2f:01:
87:f8:10:a3:a9:44:d7:8e:08:0e:35:3f:f7:02:f4:
85:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:38:19:5C:9B:ED:B0:E0:01:FB:85:79:CF:F6:B2:BE:33:7A:70:F2
X509v3 Authority Key Identifier:
keyid:64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:26:13:84:ca:93:a9:6b:1b:e1:01:2c:2a:04:8a:b7:8c:9d:
da:ca:88:ba:ce:33:68:e1:bd:c6:17:fb:a1:a8:87:8f:2e:b2:
de:f1:37:c6:16:f8:91:57:e3:5a:ac:1e:e7:54:ff:20:35:43:
61:46:74:81:7b:82:4f:7a:9b:75:d1:1f:88:5a:81:b0:46:df:
ed:0b:4f:68:89:d3:6e:cc:f3:c7:9c:ad:49:b0:09:ba:37:63:
3f:87:5a:93:9c:78:c0:38:db:da:14:7e:53:95:b0:ac:fb:87:
aa:02:57:9b:f5:94:cf:6d:e8:79:39:5c:1c:42:63:1e:28:d3:
00:5a:3d:ac:b4:96:28:e9:b2:6e:33:2c:c1:ac:c4:4a:9a:21:
d2:6b:a3:d3:08:e0:ce:b3:83:6d:b6:25:94:2b:3d:5a:98:33:
a9:84:c9:cb:7d:b9:60:23:6c:19:3a:d8:55:8e:84:16:44:6f:
b5:e1:31:09:e9:27:15:2b:62:a1:07:42:28:44:76:8e:1e:03:
d9:86:29:b9:03:ce:6f:bc:74:c9:91:12:d6:9a:e2:6e:13:62:
80:03:c7:3a:c3:49:f3:d6:e2:cb:54:99:c2:cc:f8:9e:d9:37:
a0:14:48:49:db:6d:3c:d3:26:bb:aa:87:38:55:a3:0f:ec:32:
5a:64:f7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:02:04 2026 by rpki-client