
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
File: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft (raw, json)
Hash identifier: OxYx6myj0OwV0UT56VXvon5xCc8D/t/iAFxa01TVffE=
Subject key identifier: 6B:57:8F:EA:1F:29:F0:0E:CA:A4:47:7D:09:F8:54:DF:D2:10:0F:F7
Authority key identifier: 65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD
Certificate issuer: /CN=A91E77F3/serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD
Certificate serial: 0163
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
Manifest number: 015D
Signing time: Sat 13 Jun 2026 05:01:52 +0000
Manifest this update: Sat 13 Jun 2026 05:01:52 +0000
Manifest next update: Sat 20 Jun 2026 05:01:52 +0000
Files and hashes: 1: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl (hash: 7mUnBEzUIeGSMSXh/cgLIQQ53k3xRGbtmneJHhrDfyY=)
2: 92EBC90CABD111F0B4462F16C4F9AE02.roa (hash: Y/OOSY60AbWXfzo+A9kK6oMwS+RTIvrW3ZiwtXUzU20=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl
rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E77F3, serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD
Validity
Not Before: Jun 13 05:01:52 2026 GMT
Not After : Jun 20 05:01:52 2026 GMT
Subject: CN=6a2ce440-a493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:df:25:12:76:07:63:79:32:54:63:ef:64:
72:ca:39:3a:40:13:3c:5c:94:6c:a2:37:17:b4:57:
6f:11:27:fd:77:54:04:4c:93:af:26:23:89:08:99:
be:46:27:19:9f:87:ad:68:2b:28:9a:d6:84:22:ea:
d3:0a:61:d7:f8:1a:08:77:1e:d7:1f:c5:ea:e1:f2:
c3:0d:a8:89:60:14:ff:34:51:b0:96:e9:bd:70:1a:
54:ff:d1:9c:e8:48:99:db:56:70:cf:c0:e2:09:ab:
27:d7:9f:30:e6:a5:5c:a8:6c:3f:1b:ce:1d:f2:02:
65:10:cb:80:d1:e2:5a:67:f1:0d:c0:92:d1:ad:c0:
02:4a:1f:91:0d:8d:ec:e2:ab:bf:19:db:94:15:9d:
a7:65:46:5a:00:d1:28:78:8a:37:03:97:3b:25:d3:
2d:29:ed:0a:0b:08:e2:36:30:f3:85:ca:27:56:8e:
04:24:6a:b1:0b:78:95:31:7f:c4:4c:e4:09:53:d2:
1b:b7:22:0e:9c:4f:ac:a9:6f:9c:0a:c9:ef:f5:d7:
25:3b:97:a4:d2:ef:e3:77:86:94:49:77:66:57:b4:
83:1a:77:d2:7f:9f:6e:ac:20:71:01:7b:dc:64:f7:
57:43:25:ad:db:34:90:b2:8b:68:12:20:2e:a1:c2:
72:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:57:8F:EA:1F:29:F0:0E:CA:A4:47:7D:09:F8:54:DF:D2:10:0F:F7
X509v3 Authority Key Identifier:
keyid:65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0a:71:da:20:3f:fe:58:d2:66:99:b1:10:bd:b4:a3:96:1b:
b1:f4:f8:fb:75:cc:d0:c9:71:24:6f:4c:38:5e:c9:c5:ae:7c:
44:1a:ae:e1:71:70:48:7d:a8:4b:51:81:67:b1:90:3e:8f:73:
4f:c0:39:80:45:4a:73:5b:e9:81:c8:9d:e7:da:5c:95:15:e5:
b9:53:d2:c9:ce:b9:e2:22:33:83:f2:81:83:50:dd:66:29:ae:
82:b9:d9:96:a3:8e:09:33:54:02:7a:a6:90:f4:df:26:49:fc:
4b:cd:4c:c7:5e:fe:ae:68:b9:6a:78:5d:da:3b:48:70:c3:00:
f0:98:2a:32:cc:94:a5:06:89:3c:2d:53:11:fc:b2:61:da:d6:
5f:e8:3c:1e:66:24:8e:97:92:32:46:54:20:3b:37:29:2c:8e:
f0:0b:bb:df:51:a3:cc:e6:c5:4c:f3:9b:ff:a5:48:31:2e:bf:
e2:10:c2:12:2b:36:f8:8a:0f:9f:0a:0d:39:17:d3:b6:7d:71:
c9:dc:dc:5f:e1:22:79:fa:a1:93:34:7c:a1:56:c4:b5:91:82:
23:7d:e1:bc:5e:dc:ab:aa:d1:62:70:90:c6:cd:49:74:fd:a5:
00:60:d6:79:bb:73:3c:89:f7:bf:f4:8f:df:9d:cb:74:06:39:
c3:7d:75:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:08:01 2026 by rpki-client