
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft
File: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft (raw, json)
Hash identifier: f+jCQzioC59aB69eX+AhObaIR79qOpnP5Zm4COuPd6c=
Subject key identifier: 78:AD:A9:3C:75:00:5C:5C:12:6D:CD:4F:83:D6:B9:7A:2D:64:1D:DB
Authority key identifier: A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34
Certificate issuer: /CN=A91E63E7/serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft
Manifest number: 013F
Signing time: Sat 13 Jun 2026 05:25:09 +0000
Manifest this update: Sat 13 Jun 2026 05:25:08 +0000
Manifest next update: Sat 20 Jun 2026 05:25:08 +0000
Files and hashes: 1: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl (hash: lzorBfdYsYmZXflYMCjK0ZFGd4x18JqkysTzHUnithE=)
2: A54B071C887211EFAC44513CC4F9AE02.roa (hash: A+hlWvL+lcb0OAC4v/UaMyQV/3V/t7kpEeh0OoWWKV4=)
3: 4694313A887211EF840E431CC4F9AE02.roa (hash: eif617S5bX0Z7ndJMVLfruP5oLQH3qStAeh61KPNYBo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl
rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E63E7, serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34
Validity
Not Before: Jun 13 05:25:08 2026 GMT
Not After : Jun 20 05:25:08 2026 GMT
Subject: CN=6a2ce9b4-79c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1b:fa:33:85:1a:b2:df:4e:af:20:cf:d8:9b:
06:d9:f7:a4:8e:16:9a:87:5c:62:e8:97:18:2f:fd:
72:7e:ce:6c:57:ac:04:07:eb:9b:d4:a1:0b:59:1c:
06:00:d7:88:79:cd:ff:24:a7:ca:de:a7:ec:78:cd:
fc:7b:68:86:99:97:fd:ea:f3:56:0e:95:f5:62:2f:
e3:f7:54:73:7a:39:36:c3:d1:cd:18:c9:ce:ff:c9:
56:dd:b1:0d:01:be:c9:93:7a:30:87:38:01:4a:95:
1b:72:c6:f7:a0:62:4b:ef:80:03:eb:39:94:3c:a7:
43:50:f2:95:1d:5f:ba:65:dd:e0:a5:d0:81:b4:a8:
f9:e0:20:e2:5e:db:23:fc:71:23:8c:f0:66:52:31:
e2:69:e2:11:b3:75:28:e9:52:3d:80:2c:f9:22:8e:
85:3c:44:05:1c:86:80:23:7d:49:c5:89:f6:b9:f1:
49:3e:2a:53:da:7f:b1:79:44:20:07:74:51:23:00:
4a:9f:a3:95:49:2b:20:79:49:ec:eb:d0:ea:88:d2:
bc:d2:8a:87:d7:ba:3b:c1:e5:de:67:a1:a1:61:33:
ac:4c:15:b3:d4:fd:dd:0a:c9:fa:4b:96:7e:19:30:
f2:8d:3a:3f:86:2f:1d:45:ae:22:f8:47:a0:dd:57:
4d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AD:A9:3C:75:00:5C:5C:12:6D:CD:4F:83:D6:B9:7A:2D:64:1D:DB
X509v3 Authority Key Identifier:
keyid:A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:81:a8:63:70:1e:c2:71:66:78:ef:99:7d:43:57:6c:21:4f:
2d:de:3c:f2:01:4f:98:1b:87:c3:1a:fa:d3:12:ee:a7:9d:02:
eb:13:e8:90:87:26:86:14:0d:c3:e5:3e:1e:9a:73:09:3e:29:
e4:fe:d0:d3:c6:50:7c:c1:ca:cc:11:75:8d:b3:17:8e:9e:e4:
99:50:77:bf:f3:e0:7d:2b:64:4f:54:24:79:6d:05:e1:07:3a:
b5:11:a9:7f:e8:57:25:b5:8c:65:0c:a1:d8:5a:15:6d:49:e4:
1c:21:c9:7a:59:96:7e:5a:ed:b4:62:27:3c:c6:00:96:38:f2:
da:78:4e:ef:86:91:82:5c:57:bb:a6:33:63:59:b1:c0:10:36:
d9:2d:47:8d:8e:54:f7:81:d9:ca:81:29:9a:8a:65:46:15:da:
15:7d:2d:87:e1:71:aa:c2:43:27:e9:c2:da:d1:c2:9d:ef:e8:
c2:cc:1c:66:36:82:55:af:a5:ee:36:fc:47:4c:17:b8:7b:79:
58:44:0d:a5:81:da:60:b9:f1:e5:58:c1:45:20:bc:a0:3a:04:
d4:f7:ae:68:da:16:58:f8:ab:50:df:4b:66:20:fe:e9:7a:00:
9b:0f:d9:39:b9:6b:1d:84:2a:8b:9b:b5:0a:9b:31:23:77:f3:
2c:4c:e7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:02:33 2026 by rpki-client