
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft
File: zlgHMAQJCIdOtirydgUp51w9XGg.mft (raw, json)
Hash identifier: 2KtrlWSt1vWKTZ1k5YWVpgYAUyoqum/2iX3HLtHmZpU=
Subject key identifier: AC:E3:8E:3E:24:ED:5F:4D:1C:97:97:A9:B6:C9:2C:78:65:16:8E:C2
Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68
Certificate issuer: /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68
Certificate serial: 09B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft
Manifest number: 09A1
Signing time: Fri 12 Jun 2026 20:00:45 +0000
Manifest this update: Fri 12 Jun 2026 20:00:45 +0000
Manifest next update: Fri 19 Jun 2026 20:00:45 +0000
Files and hashes: 1: zlgHMAQJCIdOtirydgUp51w9XGg.crl (hash: s+sN3AhKwquFCbeVSYN1z6APPWiqs7gQWPJkKXK8eX8=)
2: D3ECF4B8E61D11EBB92C167BC4F9AE02.roa (hash: JpJW44EKjdDGS9i2UbNxoq47VGQn3OM7oBb7lk+F9fo=)
3: 8698CD28A42211EB91621734C4F9AE02.roa (hash: QYOZ1apbmHEgFA/KTyiwZS4fSNem6E5RLUuLMFBIYIM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl
rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2486 (0x9b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E89CD, serialNumber=CE580730040908874EB62AF2760529E75C3D5C68
Validity
Not Before: Jun 12 20:00:45 2026 GMT
Not After : Jun 19 20:00:45 2026 GMT
Subject: CN=6a2c656d-41b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b2:aa:2e:8e:97:f3:ed:04:a9:0b:0b:da:40:
8f:30:cb:be:7d:76:ac:79:37:f8:b5:55:fb:73:44:
50:a9:93:76:36:5f:4a:b9:50:e2:52:a1:9a:af:20:
19:0b:d1:12:b3:90:12:e1:6b:bf:2d:4d:ee:03:b2:
82:7c:14:a8:c4:d2:9a:3f:d4:90:12:e2:3c:d9:1a:
00:22:5a:d7:dc:95:74:6f:9d:bf:c9:4b:16:0e:3e:
f3:e9:1f:50:23:8f:64:7f:5e:26:95:20:97:49:1d:
87:36:c6:a6:bc:87:c7:cb:59:a9:81:9e:dd:67:7a:
2d:e5:1b:37:a1:29:4c:3d:f2:30:35:52:5b:cc:a0:
a1:e7:52:bb:f0:4e:c3:35:9a:0d:55:2f:68:2b:c4:
d4:50:ee:89:20:d9:bc:ce:15:c1:be:3d:17:cb:f2:
e4:74:d8:06:83:ba:10:09:b4:8d:7c:8c:ca:c7:76:
0f:1b:77:c9:62:8e:dd:38:14:43:61:c9:4e:1e:e2:
b6:fe:30:64:90:31:35:d3:78:d1:a0:09:24:38:36:
b7:c7:b2:cb:12:d5:d1:a3:4a:80:6c:8b:58:b7:03:
0e:02:09:31:39:cf:06:87:65:12:67:3f:c4:5d:ae:
e0:ff:a7:5b:c7:c3:13:c9:a9:af:c8:84:58:8b:51:
e1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E3:8E:3E:24:ED:5F:4D:1C:97:97:A9:B6:C9:2C:78:65:16:8E:C2
X509v3 Authority Key Identifier:
keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:35:45:fb:ea:73:da:c3:55:03:64:89:1f:33:ad:58:80:df:
e5:82:a9:10:18:7e:82:fa:cf:25:15:03:f2:d0:03:f3:a9:16:
82:7f:e7:26:f7:dc:0c:a9:16:7a:a0:5f:35:59:34:4a:7f:6c:
88:d1:0f:cc:7f:3a:b1:af:14:c8:45:fb:8a:2f:1c:74:32:e2:
cc:14:02:3d:61:1b:6b:3d:64:22:5a:fe:17:88:2c:ce:6c:ec:
25:38:9d:be:3a:be:5a:0c:b5:0c:1d:4b:17:88:32:5d:12:de:
f0:71:a5:47:0a:1a:ea:3d:f1:1d:8f:d8:f4:94:52:65:09:55:
19:8d:d6:70:ea:3c:e3:55:c0:bd:8d:af:50:63:19:4d:9c:7b:
11:2f:38:71:87:14:fb:ae:7e:bb:8c:31:26:e2:04:13:a5:0a:
fa:2c:91:9e:64:5a:a7:90:5a:22:9f:59:31:71:d0:88:10:58:
d3:a1:dc:5c:6d:3d:59:68:f4:ea:86:8b:b1:36:86:0a:ef:5a:
33:41:94:f9:21:b7:e1:bb:3d:6c:5e:82:f1:80:f8:61:c6:8a:
5d:4a:57:df:a7:31:42:8d:b8:3c:b1:1d:2a:8a:c2:15:85:10:
af:49:f1:9a:6f:a6:04:74:b9:e1:ba:e1:2b:26:9c:c0:07:11:
be:97:67:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:25:02 2026 by rpki-client