
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
File: Z913R6nbiwGl58yhRsSJZaIwgJE.mft (raw, json)
Hash identifier: rz0m+o6DJ/ONYg3uIKjXBO8dfQPKLWSSDmSSHb86iZQ=
Subject key identifier: 43:2B:79:90:C5:F3:A7:72:AF:4E:10:30:65:BC:C0:D7:9D:71:D1:EB
Authority key identifier: 67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91
Certificate issuer: /CN=A91E6194/serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091
Certificate serial: 060F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
Manifest number: 0601
Signing time: Thu 16 Apr 2026 22:50:12 +0000
Manifest this update: Thu 16 Apr 2026 22:50:11 +0000
Manifest next update: Thu 23 Apr 2026 22:50:11 +0000
Files and hashes: 1: Z913R6nbiwGl58yhRsSJZaIwgJE.crl (hash: cKuD1gVnwfbXxW2OF6WcQ7RTbeRScJSKw6HKT7n+5MI=)
2: 0FAA7244A7D211F0BEE84D58C4F9AE02.roa (hash: AlymbExV8oEUR9AGjMS6/XmXiFrOWjjjg6e09oggXfc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl
rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1551 (0x60f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6194, serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091
Validity
Not Before: Apr 16 22:50:11 2026 GMT
Not After : Apr 23 22:50:11 2026 GMT
Subject: CN=69e167a3-bbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:ce:13:c9:76:26:f1:66:c6:62:0f:2d:dc:
23:1a:f4:38:14:ab:13:ba:96:55:b7:47:de:34:4a:
47:e6:57:18:5a:02:06:32:c9:42:d9:cd:3f:c6:6c:
1f:bc:f0:e5:ba:14:a5:14:9a:65:58:8d:cc:02:72:
f8:fb:48:b7:7a:1a:ed:4c:d8:4c:87:22:0a:6f:43:
d5:18:c7:a1:0c:18:cc:be:21:14:4c:0f:9b:64:eb:
ee:57:a1:01:20:69:cc:a0:e4:79:38:39:62:94:e5:
65:21:5c:07:ec:39:51:fb:d5:9c:0d:43:f9:9a:91:
c3:d6:62:42:08:a2:3d:39:d1:02:ef:4a:ea:98:d7:
bb:db:08:d3:b3:a2:f8:89:53:d1:6a:16:84:80:82:
32:ed:5a:62:04:07:33:ba:20:df:86:e6:57:a4:bb:
3c:68:ff:b1:73:8e:01:5d:d8:01:d4:72:28:8c:97:
b7:fe:cf:88:d9:8d:09:63:b5:25:17:59:00:d6:d9:
22:43:6d:b2:36:6c:40:f8:9e:75:fb:b6:d6:4c:8a:
24:c6:61:86:a8:51:81:1a:c4:30:25:af:80:a4:a9:
6f:e7:27:04:d8:e4:5a:cd:46:7b:1f:46:91:b4:2e:
e7:2f:b4:c7:85:6b:c0:83:b8:83:2f:f0:04:95:72:
27:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2B:79:90:C5:F3:A7:72:AF:4E:10:30:65:BC:C0:D7:9D:71:D1:EB
X509v3 Authority Key Identifier:
keyid:67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e0:4a:2f:e7:cd:11:9d:d8:bc:80:0e:84:9c:7d:b0:d0:32:
02:43:ef:3f:ff:1c:f0:c2:27:f9:de:d1:bf:50:bf:dc:1a:8a:
f0:e8:7e:42:21:72:49:a0:79:78:70:c0:59:99:45:d1:63:8a:
5f:74:e1:0b:72:97:8f:c4:68:7d:e5:b9:a5:e7:90:bf:18:c9:
91:9f:98:12:85:64:c9:46:76:6d:65:b7:7a:6c:41:4f:fc:de:
7f:15:3e:72:ff:0f:b0:74:13:46:51:d6:b3:29:f4:4e:bf:e4:
c4:d1:33:17:e1:7e:e4:57:3c:50:62:55:9d:26:3a:94:e5:76:
08:95:69:a2:78:40:ba:c3:e4:22:f4:00:66:df:24:9d:4a:29:
56:54:cc:d9:fd:1c:b4:1f:4b:36:08:49:91:ea:62:89:99:0f:
c9:10:1b:2e:c6:d5:13:bd:30:48:55:48:c7:d4:6d:dd:46:6c:
3e:8c:2e:1a:3a:7c:e4:e2:e0:d5:6c:15:e9:79:c7:34:da:e9:
5c:ca:48:ec:30:86:cd:1a:aa:73:bd:64:f3:5a:12:df:40:79:
21:75:4e:8c:0a:15:bc:d2:07:d1:e4:e8:f6:44:72:da:f6:24:
a9:ba:93:be:9b:9b:e1:d0:ee:37:96:a3:4b:b2:d1:84:ad:0f:
7b:5d:d2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:16:00 2026 by rpki-client