
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
File: _ZFHrvajMNGN1MnP2GQvDtqnuQc.mft (raw, json)
Hash identifier: 89zPuyjvZA97M6j0JvvrP+rx/suf03zpu8vh8BP0XYE=
Subject key identifier: 8E:04:C3:D1:4E:C8:57:A9:0C:7F:D8:E6:39:67:E9:22:11:12:DA:0E
Authority key identifier: FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07
Certificate issuer: /CN=A91E1853/serialNumber=FD9147AEF6A330D18DD4C9CFD8642F0EDAA7B907
Certificate serial: 8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
Manifest number: 8C
Signing time: Mon 27 Jul 2026 09:45:34 +0000
Manifest this update: Mon 27 Jul 2026 09:45:33 +0000
Manifest next update: Mon 03 Aug 2026 09:45:33 +0000
Files and hashes: 1: _ZFHrvajMNGN1MnP2GQvDtqnuQc.crl (hash: Yo6+DGzul9L2AdAuRfDTYMST0E890tXMpQ6PPQ3F2qk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.crl
rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:45:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1853, serialNumber=FD9147AEF6A330D18DD4C9CFD8642F0EDAA7B907
Validity
Not Before: Jul 27 09:45:33 2026 GMT
Not After : Aug 3 09:45:33 2026 GMT
Subject: CN=6a6728bd-4764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5d:80:a9:90:64:7e:05:2f:00:dc:45:5d:9d:
29:4f:74:08:43:29:b7:37:b1:20:10:78:7d:bf:79:
04:98:68:e2:76:5f:b7:28:17:d3:ce:10:67:58:a2:
c8:08:a7:f1:b0:62:a9:e9:13:a7:4b:3a:df:15:8d:
64:fb:29:ea:f5:df:84:b0:e6:99:c5:45:d6:53:e7:
56:a9:1c:6e:15:7d:bb:e6:5d:e7:d2:13:9e:77:e8:
81:79:7f:03:93:70:6b:ca:c9:7e:36:df:46:61:a9:
45:31:ba:06:ba:9d:f6:b0:2d:97:eb:2b:de:50:cb:
49:e5:d6:a4:33:f2:39:f3:8e:98:6c:74:d7:bf:a2:
04:70:3e:ec:4e:2e:39:73:79:a7:cd:99:aa:b6:a6:
9c:7f:55:19:d7:ed:14:10:78:22:5c:e4:3b:a9:29:
fb:a3:94:23:68:b6:37:8d:86:74:c3:83:d9:04:9b:
33:15:a4:4c:ac:34:2b:c5:83:9e:9d:eb:6f:32:89:
ef:07:c8:38:93:33:e6:e5:2c:95:f7:b0:a5:c9:3e:
53:ab:69:a7:55:b2:51:b4:1a:07:bc:da:6b:cf:1a:
d5:5d:a4:27:4c:42:ef:87:69:db:96:0b:09:e8:ac:
01:41:1a:81:43:41:e6:90:13:e6:d6:c2:a1:9b:69:
01:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:04:C3:D1:4E:C8:57:A9:0C:7F:D8:E6:39:67:E9:22:11:12:DA:0E
X509v3 Authority Key Identifier:
keyid:FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:71:6e:17:07:aa:52:fe:bd:e9:5c:dc:82:f0:3a:d9:18:77:
f2:e4:bc:c0:88:66:3a:15:59:b4:4a:f0:fc:2b:9c:58:d6:6f:
94:ac:c2:e5:5e:29:d2:f6:b7:ff:9a:aa:75:90:11:87:98:19:
eb:de:96:cb:cf:f6:0b:6f:79:53:46:32:10:a8:b5:2d:db:f1:
99:45:dd:82:c6:5b:e7:6e:48:4f:5e:68:94:10:5a:f2:d3:53:
80:9c:9b:5f:69:d2:6e:9e:84:38:9b:72:b2:96:ca:08:12:b3:
5c:6a:1d:49:a0:04:69:84:33:b0:b2:c5:e3:34:69:35:d4:aa:
62:f9:22:5e:34:a1:45:f1:09:bd:40:fb:36:c3:52:b3:31:4a:
c1:d1:59:54:2d:78:92:cd:6f:a4:6d:dc:a6:61:36:f9:04:99:
e4:25:7d:09:75:e1:ed:f7:07:8b:ac:12:92:fa:0c:de:99:eb:
b8:e3:24:46:6b:8f:b6:4e:e8:69:06:72:7c:b8:92:e0:00:89:
80:43:3c:80:4b:5f:b1:76:0d:b1:33:7b:63:ae:97:41:d4:56:
84:98:fe:d4:fd:97:b9:db:a5:cf:5e:9f:43:49:96:95:a1:b6:
e5:b6:e8:48:d4:cb:18:f9:31:33:a6:6c:c9:df:b3:2d:1d:6e:
ab:ad:ed:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:27:55 2026 by rpki-client