
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
File: Zye49DPvL-CAhCxu6KbMPcJEYm8.mft (raw, json)
Hash identifier: 5kX20WvfECXErdoFtD1hFQJcvK2H2yvl5ecW9XTOwR8=
Subject key identifier: 91:6D:2B:30:DF:9B:B0:06:D0:A2:E8:89:D0:39:84:61:D0:11:7A:44
Authority key identifier: 67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F
Certificate issuer: /CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F
Certificate serial: 0D4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
Manifest number: 0D37
Signing time: Tue 28 Jul 2026 18:14:53 +0000
Manifest this update: Tue 28 Jul 2026 18:14:53 +0000
Manifest next update: Tue 04 Aug 2026 18:14:53 +0000
Files and hashes: 1: Zye49DPvL-CAhCxu6KbMPcJEYm8.crl (hash: p4Lg54tR+ayECX7Ia5iCOeGhNbBj8XkIO5mj7IykKto=)
2: E14507F8011411EAAB0EF153C4F9AE02.roa (hash: qiDkvBGA0vQoRNYuuefBl5X6My9S37pGkNHkOEYdfqI=)
3: E0BC0B4C011411EAAB0EF153C4F9AE02.roa (hash: hGCYtCOIvO4umfp83BHr43BYp8vvO8LHfZyo0x1hdrM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl
rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:14:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3406 (0xd4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4023, serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F
Validity
Not Before: Jul 28 18:14:53 2026 GMT
Not After : Aug 4 18:14:53 2026 GMT
Subject: CN=6a68f19d-2e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:43:be:9d:1a:35:cc:32:7b:c0:f1:f7:a7:62:
04:be:b2:5f:a9:57:2c:a3:37:d6:d9:1d:0d:e2:d1:
34:4f:50:0b:dc:8f:4d:ea:4f:8c:2e:23:fd:6e:63:
49:1c:d8:d3:a8:79:fb:58:23:96:ed:f1:4d:1d:b7:
e1:05:2d:ae:d4:4d:ed:15:ed:34:50:cf:ae:8b:15:
26:4b:fa:48:63:0c:e0:31:64:d9:45:c5:e7:f9:e6:
3c:bc:c1:b3:b4:0a:0f:8e:ae:bc:6a:c6:23:14:7d:
ae:86:c0:7a:44:07:4b:e3:d6:3f:39:af:c7:1a:6f:
2d:48:5a:e4:1c:6f:57:03:97:e0:52:91:37:c8:4c:
9a:f5:18:f2:41:6a:7c:28:f2:4c:b3:0a:53:e4:42:
6e:6a:85:46:5c:77:86:68:4f:55:26:7f:ba:08:bc:
72:2d:fb:cb:70:ff:38:46:93:60:05:1f:ef:a6:1b:
44:71:4f:33:7f:b0:ce:5a:75:b1:73:8c:1f:55:dd:
46:45:63:74:31:16:2c:ac:0f:ed:44:2d:c0:12:3d:
81:83:bd:54:14:69:93:04:7f:b9:fb:54:12:72:fe:
61:87:ca:9a:22:8a:67:c3:8e:c8:95:ea:e2:8f:bb:
57:30:ef:02:f6:e3:c3:31:67:b9:db:64:1c:65:73:
f0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6D:2B:30:DF:9B:B0:06:D0:A2:E8:89:D0:39:84:61:D0:11:7A:44
X509v3 Authority Key Identifier:
keyid:67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:bd:89:4b:4c:e4:31:78:ba:62:6f:eb:f1:3d:7d:77:2e:d3:
c7:ad:e2:61:ff:ae:f2:6f:19:63:f7:5e:33:70:36:8e:48:64:
ca:7e:c5:b7:bb:e6:f1:f6:3c:a5:72:51:d4:ae:31:a2:82:0a:
5d:57:79:72:f1:77:a1:42:0e:e0:4b:d8:51:dd:06:ec:e4:12:
a7:62:3b:3a:74:2f:19:2e:ee:43:7e:36:42:3c:b9:6a:52:69:
d1:21:f1:84:59:35:a9:4f:f5:90:32:0f:f6:5e:29:bb:fd:98:
19:62:70:01:6d:35:6b:97:15:dc:21:68:aa:f7:94:55:ee:b0:
2f:04:b3:42:ec:87:9c:40:2f:4a:c1:8f:81:40:a6:12:66:74:
87:d3:58:d4:27:2b:1a:c4:c4:f9:2b:41:a5:da:ae:f3:c2:04:
75:c5:5d:33:2c:ba:46:2e:e0:9b:27:13:ca:81:20:27:83:58:
74:52:10:18:9c:2a:98:12:a0:65:d5:3f:7a:91:78:e8:d8:49:
f1:3b:2e:5d:2f:48:6a:08:4a:23:8a:72:45:40:7e:ed:e5:8a:
1c:24:11:9d:49:b0:f8:40:95:2b:df:92:90:1e:52:96:b1:ed:
de:54:c9:62:26:9a:7b:d7:17:50:71:d6:42:aa:82:0f:a4:c1:
c7:0f:10:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:12:19 2026 by rpki-client