
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
File: Zd_y7j-bsuskVR4dGPHWPewKbhc.mft (raw, json)
Hash identifier: aF83inYpWpAgrS9icuxFllx9T5+TCod0uYD5yuMYugk=
Subject key identifier: 45:B1:1C:F2:02:8B:BA:5F:2A:90:BF:FB:15:9B:EB:E5:0A:63:1B:57
Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17
Certificate issuer: /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17
Certificate serial: 0942
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
Manifest number: 0930
Signing time: Sun 26 Jul 2026 20:47:39 +0000
Manifest this update: Sun 26 Jul 2026 20:47:38 +0000
Manifest next update: Sun 02 Aug 2026 20:47:38 +0000
Files and hashes: 1: Zd_y7j-bsuskVR4dGPHWPewKbhc.crl (hash: lweVB6Ur+JhHqrb6oWurv1wdY5q42QsNZk0MqgY3qT4=)
2: A7034AFA7F8411EC9036F64CC4F9AE02.roa (hash: 8aOJR7dq5H1FSBWehu29UN5DlJmLrfgs2ryVPbFuTNA=)
3: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (hash: 2P5OTTpkzgPQNPnWpqe7PnEj5CbcnDOLb7qDMaxfHTE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl
rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 20:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2370 (0x942)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCB6, serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17
Validity
Not Before: Jul 26 20:47:38 2026 GMT
Not After : Aug 2 20:47:38 2026 GMT
Subject: CN=6a66726b-5e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:28:77:e8:a8:31:02:15:34:2f:a5:72:16:1c:
82:04:2a:56:ef:32:71:5e:af:46:83:d4:65:8f:ab:
42:84:a9:ae:41:e5:11:3f:07:3f:f8:0e:29:23:81:
77:51:0f:e4:e4:87:52:ce:27:ed:6a:89:d5:09:4e:
0f:08:66:ae:92:6e:2f:ea:01:b0:e2:6b:0a:d1:5b:
c7:35:c3:c8:a2:54:2b:0d:f2:ab:0d:51:2b:9a:b1:
be:de:64:52:97:fb:21:e5:53:08:ff:82:db:30:91:
9a:7b:38:34:1d:7c:03:f7:40:c6:ea:89:29:13:86:
d5:fe:45:d4:47:33:03:a6:b6:87:87:11:a9:b6:74:
a5:d0:24:36:46:f2:21:89:90:c2:f7:66:cc:2f:69:
5f:4d:7d:ab:55:fa:ea:61:3a:b0:00:a0:02:a4:ac:
3e:ea:a1:19:b2:16:55:61:74:fa:42:d8:37:1f:27:
15:f6:2f:1f:10:fa:f8:f9:3e:8c:47:83:d7:4f:30:
96:3d:96:61:cf:4b:78:3f:a2:60:e2:77:fa:0e:c7:
b8:c9:76:54:c0:99:bc:52:09:9b:10:0e:75:a8:be:
ad:1f:31:bf:80:20:07:28:fe:84:f3:50:63:da:b0:
33:e4:b5:3e:c3:2f:24:57:fc:22:ca:8e:54:ba:c1:
3b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B1:1C:F2:02:8B:BA:5F:2A:90:BF:FB:15:9B:EB:E5:0A:63:1B:57
X509v3 Authority Key Identifier:
keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:00:31:e6:f9:ad:f2:35:51:5f:cb:69:d8:5c:45:44:5a:9c:
d1:90:15:58:05:82:c8:61:27:5e:03:c9:ac:b3:03:8d:47:73:
f3:98:3c:b0:c0:50:eb:e8:e7:5b:c3:11:1c:c0:ed:70:02:f1:
cc:f2:79:f3:18:91:12:b4:f1:cf:89:0c:4c:53:26:a0:38:35:
65:ff:ec:44:2a:7c:32:a1:d1:5d:d5:07:87:d4:d3:28:d5:37:
1e:b5:1b:00:16:bc:32:cf:d8:3f:c1:5e:34:7c:d8:af:1d:67:
bf:5d:16:e5:99:a7:78:9b:a1:1a:a7:72:e0:18:a2:b9:a0:48:
e8:89:0a:fc:19:29:e9:7a:fa:6b:4e:a4:dc:80:18:64:79:48:
87:44:bf:35:76:77:89:4a:92:4a:b4:ce:41:e9:d0:d3:a1:d0:
4b:9d:27:8d:f4:5b:e4:f9:7b:2b:3f:27:3e:b6:68:05:c0:8c:
eb:75:a5:85:0c:39:0d:bd:b2:58:5f:2a:f3:55:0e:2e:49:ba:
f8:2a:95:8f:38:ad:f3:30:62:71:4f:a0:c5:63:03:87:d7:5c:
2c:2e:11:31:17:cf:b7:bb:72:3d:61:50:fb:c2:fb:14:7b:84:
38:1a:31:fc:cf:b5:68:1c:e9:2c:e0:ed:88:39:9f:60:aa:82:
d3:16:d1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:10:47 2026 by rpki-client