
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft
File: ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft (raw, json)
Hash identifier: MB1Vw5idoQWIXl1Me58cF1IMPUB9Ar7OeXkBhRgfvoc=
Subject key identifier: B0:13:6D:C0:64:30:85:66:43:33:3E:C0:9A:2B:00:8B:BB:66:C3:CA
Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
Certificate serial: 1BBF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft
Manifest number: A255
Signing time: Fri 12 Jun 2026 14:30:22 +0000
Manifest this update: Fri 12 Jun 2026 14:30:22 +0000
Manifest next update: Fri 19 Jun 2026 14:30:22 +0000
Files and hashes: 1: ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl (hash: cUvlGxEXgEIT+Ak9btssAcqxKPRGNyl6QARFh42jrtQ=)
2: C89FD6DA557611EBA04C290BC4F9AE02.roa (hash: IDu51NoCXLX0fGSXN0JfKGuNOGTw6RNrNximD3D412U=)
3: 3D68F8C29A4A11EA94706012C4F9AE02.roa (hash: gxt7j0/qgDHDY4eOy9nTFq4yiN1wN4Azb/F6N/jLPQo=)
4: 959AC422557911EBBD21EB2FC4F9AE02.roa (hash: YKfVc/1kWhtiSN/JgbbvpApeCbmTeJDdHpPmRnKp0f8=)
5: 4FF339D8F01D11EB8C4B505BC4F9AE02.roa (hash: kzmw6JQnHsEPxWEaFvMAvmSNfBwkvf6++ngi0TT5BK0=)
6: 191363A69DD911EC99D91668C4F9AE02.roa (hash: 9ywt3YgdGMPifjHDU8GOY5yDR3rcKL5WS/6sXlZSwSk=)
7: 9907DC46D4BC11EF9BDDAF2EC4F9AE02.roa (hash: DNaQzWtObT5DaBf5rMkdrtx4HMZbyrfOB84Oiv/VTA0=)
8: FC6A19D892D511EC8FBFF32AC4F9AE02.roa (hash: OXGvG47egb4PF/onwPC9e0QERfLfAY+ZqPCLmsNj8TE=)
9: 20C6F2EC699D11EAA33EAE83C4F9AE02.roa (hash: noBHpHcIG4F8PCP16+JaDrGG+bfZLo/xyhvvRrrAwbc=)
10: 1BF3A43C15BE11EF93ABFD7DC4F9AE02.roa (hash: lhNS+ojnip3W9c6D2+vK5Jj0fFUXb3jMTgYthGAVWGE=)
11: 0B24875C7A4411EB804B7430C4F9AE02.roa (hash: +Z0l5rtFf9gejJdRbzGI1Tev7wUao9HHsXdVWsy9gIw=)
12: ACC8833824DE11EDAEC0E529C4F9AE02.roa (hash: H0mHu5foM/0Hr0y7LJoGoqxfCYM8HtP6k45eEW8ACTA=)
13: E38D6798533911F18A27312FCB833773.roa (hash: gk5/uS+O/CM+N18jIFqFxpCeyO2gku+HcapU0YVTG5c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl
rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7103 (0x1bbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6D5D, serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
Validity
Not Before: Jun 12 14:30:22 2026 GMT
Not After : Jun 19 14:30:22 2026 GMT
Subject: CN=6a2c17fe-cd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e9:9f:3b:c7:ed:ac:55:b7:1c:d2:9a:11:c8:
c1:9e:52:c8:7b:4b:5e:82:24:93:49:87:7e:a9:06:
89:aa:cb:40:64:bf:a7:6a:cc:95:65:a4:5d:3d:08:
0a:f0:36:d4:6c:9c:94:29:ca:a2:be:9c:af:ad:e8:
4b:05:62:32:79:bd:15:cf:39:80:65:99:49:dd:6b:
0d:9f:72:af:8a:04:6e:b6:30:88:fb:73:7f:04:f8:
38:ba:13:32:a9:db:0f:19:99:7e:4c:1d:ca:53:0f:
a2:51:09:47:83:1b:90:71:28:06:df:09:3f:e8:9f:
ae:5f:1e:8d:89:ab:d5:1c:c8:f1:10:f4:82:d6:92:
f5:df:8e:f5:e8:9c:29:da:79:34:ed:39:12:73:02:
ca:1b:68:2a:61:20:00:55:81:a0:cf:e0:ae:81:5c:
16:a8:e6:60:59:c9:51:26:f3:f5:c1:3b:e5:70:a1:
47:84:78:60:59:91:91:05:93:82:62:85:c4:2a:46:
c4:23:54:0c:9d:b9:95:78:9a:55:ce:80:98:b0:55:
cd:03:1a:b3:4d:e4:fe:6a:cf:12:85:0b:69:36:3f:
11:63:c5:e8:95:ca:2b:ac:fb:1c:62:4a:bf:7c:fc:
54:9c:57:66:8d:91:5d:2a:68:14:1d:6e:ca:28:83:
ed:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:13:6D:C0:64:30:85:66:43:33:3E:C0:9A:2B:00:8B:BB:66:C3:CA
X509v3 Authority Key Identifier:
keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c2:b0:ea:e6:18:0b:ad:c4:43:ec:df:ef:6b:01:59:69:09:
b2:6d:19:ca:ed:32:41:65:27:5b:e9:52:a7:e4:f7:af:b5:9a:
16:ec:89:e7:68:69:85:da:f4:e6:56:a9:44:cb:34:aa:42:4e:
c2:00:65:2f:f7:c8:34:8b:5a:be:8d:5c:e2:4c:60:3e:cb:54:
04:4e:08:2a:d4:ca:6e:61:38:64:8d:35:2b:65:b5:9f:e3:f4:
aa:78:6f:d6:c4:06:6d:80:e6:7b:fb:03:2f:25:dc:0d:a8:29:
64:7b:0c:2c:5a:b8:e2:14:8f:65:10:17:0d:a9:f5:d6:b6:6e:
5f:dc:38:86:ea:df:ad:56:a0:55:7c:c9:10:d7:03:18:09:4b:
d3:76:50:2d:95:b8:ee:e8:30:c3:1b:24:ed:8b:02:61:90:12:
f3:1d:61:50:ff:db:0d:d5:98:21:fb:48:a7:4e:dc:22:06:38:
c2:96:2a:49:b9:66:6e:54:c8:75:a4:47:c9:85:b4:9a:e8:e8:
c3:57:09:20:23:3d:7d:90:fc:9e:3b:b7:2c:4e:0b:7f:d7:f6:
02:72:09:d5:98:0e:de:68:e6:5b:18:d5:d7:51:7a:cb:4d:ff:
53:09:2e:f5:58:f1:c9:60:1f:3a:1d:07:c0:38:25:b4:c6:6f:
e9:60:61:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:35:20 2026 by rpki-client