
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft
File: zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft (raw, json)
Hash identifier: UMdB4zJ/9NJkKNhYD1ncm7EYYZyRXqyv2X5Thffo0cA=
Subject key identifier: 30:7E:08:19:27:F3:5D:CE:1E:F9:85:58:C1:49:29:9A:35:63:4F:63
Authority key identifier: CC:70:D8:73:42:89:D3:05:A5:23:3A:99:B0:9C:D7:8B:8F:D6:66:4B
Certificate issuer: /CN=A91DFA25/serialNumber=CC70D8734289D305A5233A99B09CD78B8FD6664B
Certificate serial: 78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHDYc0KJ0wWlIzqZsJzXi4_WZks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft
Manifest number: 75
Signing time: Mon 27 Jul 2026 10:08:26 +0000
Manifest this update: Mon 27 Jul 2026 10:08:26 +0000
Manifest next update: Mon 03 Aug 2026 10:08:26 +0000
Files and hashes: 1: zHDYc0KJ0wWlIzqZsJzXi4_WZks.crl (hash: x6dBeVqxBstctkbvvi3opvd4+ULWEXTxTKkqGaEFUTw=)
2: 9E283D22E07A11F0AD28F7913A6F56BC.roa (hash: zM/gqOyVFktPoDA/WeuwpVQb7+CuTjfIizkBCA5c5Lg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.crl
rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHDYc0KJ0wWlIzqZsJzXi4_WZks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120 (0x78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFA25, serialNumber=CC70D8734289D305A5233A99B09CD78B8FD6664B
Validity
Not Before: Jul 27 10:08:26 2026 GMT
Not After : Aug 3 10:08:26 2026 GMT
Subject: CN=6a672e1a-aaa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d7:bf:8a:18:d7:92:ac:f8:ef:87:58:5e:4c:
5b:5f:8c:95:cd:0c:65:20:78:18:5f:07:fb:ac:37:
a4:24:f4:71:c5:72:80:5d:cd:86:4e:71:e2:b2:e3:
4f:fe:75:61:cb:cd:07:d2:06:ad:d6:e5:a0:01:bc:
3e:45:b9:be:10:cc:3c:80:05:e3:4c:f5:fd:f7:fe:
e6:62:8a:19:45:41:6e:bb:77:22:c5:0d:f7:6e:d2:
91:45:22:ef:ba:b3:9a:f9:54:48:90:48:c8:fe:e1:
29:10:42:d8:b9:6f:7e:bb:ee:45:02:bd:4a:39:7c:
2c:18:ee:2d:50:d6:58:12:90:fb:42:69:80:62:1c:
c6:0d:5d:81:68:9d:29:0f:a5:ff:dd:55:76:97:5e:
7b:f9:9c:34:1d:7a:02:61:11:5a:c0:82:3b:6e:71:
df:1c:82:49:08:25:b0:f8:a0:d8:97:03:fa:c8:91:
fb:57:7e:f7:9e:df:80:3f:26:62:a2:e6:5a:d6:e5:
12:08:a2:45:5e:63:79:bf:ad:73:91:4d:79:93:6c:
4c:07:21:73:61:3f:58:67:a7:43:5f:32:7e:3a:1e:
b1:9c:f7:fe:ef:22:f7:78:ef:b1:f3:48:de:29:44:
c3:ff:91:53:36:5e:fb:ce:8c:92:34:f6:c3:0f:4a:
bd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7E:08:19:27:F3:5D:CE:1E:F9:85:58:C1:49:29:9A:35:63:4F:63
X509v3 Authority Key Identifier:
keyid:CC:70:D8:73:42:89:D3:05:A5:23:3A:99:B0:9C:D7:8B:8F:D6:66:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHDYc0KJ0wWlIzqZsJzXi4_WZks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e6:89:7a:8e:15:da:e6:23:e0:09:a1:ac:04:7f:ca:9b:1a:
d6:d6:28:56:5f:ba:fd:77:7d:ae:47:b7:26:ba:76:38:a3:65:
02:6c:5d:3c:1a:ce:0a:f4:a8:d1:0f:85:2d:cc:48:f2:42:ca:
a4:3b:3e:d7:e8:95:db:c6:7e:83:51:38:36:93:9a:1d:88:11:
0f:40:a2:f8:1c:8f:10:5d:fa:b5:de:cd:7b:61:38:46:1d:78:
13:fe:ec:f8:5a:4f:fd:f0:c4:6c:77:9c:59:b4:ba:12:b1:c7:
69:67:d3:d3:18:8f:1e:1a:b0:dc:4d:e5:2d:68:7e:27:64:03:
de:46:85:3c:34:1b:b6:c7:9a:31:51:92:a1:14:7d:72:71:37:
64:e7:2e:e4:e5:6d:08:1e:8e:7a:11:c3:12:06:d8:98:b2:ef:
61:15:b0:e4:bc:56:68:bb:cc:16:8d:8b:3d:4c:62:35:d9:8d:
10:fd:81:88:02:5c:95:14:b8:4b:d7:9b:0f:46:71:94:a4:d0:
2a:a1:a6:68:37:b8:bd:c9:d5:97:c4:d1:11:65:3d:a7:6c:bc:
c6:47:35:23:bb:27:57:c9:7e:d6:42:b4:21:de:c2:67:f7:f6:
32:da:d8:a3:43:66:82:d0:bd:d7:3c:df:07:5c:23:91:e7:4d:
78:05:63:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:16:17 2026 by rpki-client