
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
File: ZKte21ESYrc2r4F0HU1zFBTTSlc.mft (raw, json)
Hash identifier: rej42wA1S5D6ub7sih2wMX1OFjn0ocC8HoNKQeQ9K5g=
Subject key identifier: 7C:32:A6:E1:6C:C4:AF:F3:9D:A7:54:28:F7:4A:82:C3:19:4A:90:04
Authority key identifier: 64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57
Certificate issuer: /CN=A91DD11A/serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57
Certificate serial: 58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
Manifest number: 51
Signing time: Wed 15 Apr 2026 08:43:30 +0000
Manifest this update: Wed 15 Apr 2026 08:43:29 +0000
Manifest next update: Wed 22 Apr 2026 08:43:29 +0000
Files and hashes: 1: ZKte21ESYrc2r4F0HU1zFBTTSlc.crl (hash: jTT1kU9danhTvaSuGtf3odCtslRCmMWPjzuHc8O3qGs=)
2: E4DCE562284911F19931E6E894833773.roa (hash: 0yKy3aBVwlRdNI3lMwh0VFIrVrZK1Q3eetgCew0uics=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl
rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 08:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD11A, serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57
Validity
Not Before: Apr 15 08:43:29 2026 GMT
Not After : Apr 22 08:43:29 2026 GMT
Subject: CN=69df4fb2-f61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f6:e3:e8:7d:a5:68:76:ea:d2:cd:67:16:69:
2b:ef:f0:c0:3a:b2:de:ae:c7:89:c7:70:09:d0:ab:
f9:3a:ac:59:cb:85:30:f4:63:7b:4b:2a:7d:ff:c6:
71:63:15:fe:38:7d:d0:8a:35:81:11:36:18:78:c6:
6e:dc:e2:ce:2f:1a:fb:b0:ee:c0:17:49:82:58:fb:
66:52:17:c1:65:cc:9c:cf:7f:af:d8:65:a6:00:93:
39:53:07:0b:63:e3:78:9c:6e:8b:1e:c3:ae:fd:41:
d5:70:2a:21:ac:59:fa:ed:ce:72:6f:21:22:56:52:
30:4a:5c:c5:e2:4a:7a:72:42:b6:d0:aa:72:d9:ed:
93:0f:ec:91:f8:59:d0:d0:1d:14:c3:4c:a7:e3:f0:
1b:52:44:c8:fb:ee:32:09:06:9f:ce:8d:f2:89:1b:
df:ab:95:ca:89:d3:2d:09:00:62:14:6a:f0:e7:b3:
85:94:dd:20:76:6c:00:2d:8c:42:25:f4:5e:75:51:
32:59:8f:4d:bb:f6:33:93:89:3e:5e:9f:fb:a2:8e:
1c:6e:bf:84:fd:06:8d:b4:25:93:cb:d0:2c:1f:32:
68:62:a0:b7:e2:01:ef:81:41:da:91:d0:ed:60:a5:
c8:05:1b:12:73:33:ba:b7:03:64:e3:d2:ee:ba:fc:
d5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:32:A6:E1:6C:C4:AF:F3:9D:A7:54:28:F7:4A:82:C3:19:4A:90:04
X509v3 Authority Key Identifier:
keyid:64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e0:cb:ce:91:0b:91:5c:c3:33:33:7e:ed:a5:98:9f:86:17:
a9:df:a7:a6:e5:91:cc:ab:94:6e:ae:14:51:fa:d4:cd:51:65:
81:b3:67:4a:bb:e7:8f:68:5a:6d:e0:f3:3f:ab:7a:ec:fe:57:
c2:c8:10:df:a6:65:25:6b:19:71:44:df:14:ec:21:7f:39:a0:
6f:1d:e2:e2:00:b6:b7:d0:0b:f7:8f:f4:07:f6:0a:6d:8c:db:
09:8e:6e:c4:4b:cc:fd:05:1f:52:a9:71:d1:3d:8b:cb:e8:a2:
33:48:60:6d:0d:26:2f:48:0f:0c:74:80:c8:c4:c8:12:25:7f:
98:4a:66:b9:7c:c2:3e:ca:8a:9b:85:82:5d:de:f4:02:d3:e4:
1b:e6:1b:12:bd:6c:74:86:17:cf:54:c7:29:90:77:4d:2c:3a:
a9:bf:f1:a7:0b:30:ec:61:54:4d:a2:3e:56:84:b5:25:63:ce:
2f:98:48:97:6b:d2:a3:c3:1e:b5:fc:ac:b5:fd:b5:ce:15:9d:
6d:56:e6:06:ad:b4:e3:0a:bb:d9:80:27:30:42:04:1b:67:5d:
23:89:d0:e9:a6:32:44:53:a1:0f:70:67:51:8b:2c:03:a7:9f:
45:6f:37:2b:71:44:e6:d9:df:f9:b4:5a:8a:55:d7:fa:50:f1:
75:97:6c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:53:38 2026 by rpki-client