
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
File: zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft (raw, json)
Hash identifier: dyTU11rUIQ7e0KbL6r0ezSLt5qhz1Fy0iFe85lcraG8=
Subject key identifier: 5A:4E:9C:6F:C7:FC:91:3F:04:D1:63:92:EA:47:9C:04:3F:D6:0A:D5
Authority key identifier: CC:9F:2F:BB:FA:ED:C4:4C:76:32:B1:8C:2B:D3:BC:58:EC:ED:7B:F5
Certificate issuer: /CN=A91E8FFF/serialNumber=CC9F2FBBFAEDC44C7632B18C2BD3BC58ECED7BF5
Certificate serial: 69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
Manifest number: 67
Signing time: Mon 27 Jul 2026 10:15:36 +0000
Manifest this update: Mon 27 Jul 2026 10:15:36 +0000
Manifest next update: Mon 03 Aug 2026 10:15:36 +0000
Files and hashes: 1: zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl (hash: OcFMx53/kG4FXKJJOEiOZ8IYkSEvcrAHHO7irpR7vz0=)
2: DBA60106EED111F0AB3DEEA1736F56BC.roa (hash: Zm5NVQiX1B1lMh6YYC6ofTBSfpDnYcLSn7pw+rOzSFc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl
rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:15:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8FFF, serialNumber=CC9F2FBBFAEDC44C7632B18C2BD3BC58ECED7BF5
Validity
Not Before: Jul 27 10:15:36 2026 GMT
Not After : Aug 3 10:15:36 2026 GMT
Subject: CN=6a672fc8-3a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:d6:33:7d:3b:d6:fc:45:33:6c:ed:7b:28:
3b:46:d5:57:e4:b3:85:c9:ac:70:29:c7:f9:99:61:
d1:66:54:ba:f8:a9:ed:d2:a9:cb:b0:6b:88:3e:a1:
e1:a9:68:44:e4:f7:10:18:82:0e:71:89:92:9d:6e:
15:c6:d9:ff:d3:b9:dd:d4:87:1f:9a:32:3e:57:76:
70:90:0b:8f:8e:ed:02:eb:98:81:34:9d:de:7d:8d:
b6:1a:63:c5:c5:c4:06:bb:52:16:85:21:7b:3b:b3:
44:16:51:ba:37:c3:d7:b6:81:2d:24:a1:e3:05:a9:
cc:39:73:f1:3b:89:d1:69:b0:5b:76:c9:b2:c4:0b:
9c:d9:bd:69:2d:57:15:c1:11:ba:08:96:9b:77:c9:
23:d9:f7:2e:87:91:21:e7:f9:e8:5a:f8:57:f2:20:
9d:99:af:35:87:fa:db:e7:05:51:ba:e7:39:e1:8a:
f6:fe:22:83:0b:53:1f:96:a9:5e:b4:2a:a0:48:17:
a1:6a:a9:a7:b8:20:95:21:3e:d4:91:11:68:a8:41:
5a:82:1b:ba:e9:9d:15:0c:60:42:37:fc:0d:b0:92:
a8:24:b3:7b:35:fc:c8:57:a9:94:67:e1:d0:c9:e3:
07:3a:e7:4b:c0:a9:88:3d:54:08:49:20:1e:5c:91:
22:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4E:9C:6F:C7:FC:91:3F:04:D1:63:92:EA:47:9C:04:3F:D6:0A:D5
X509v3 Authority Key Identifier:
keyid:CC:9F:2F:BB:FA:ED:C4:4C:76:32:B1:8C:2B:D3:BC:58:EC:ED:7B:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:67:a6:b3:e1:51:56:21:aa:1d:62:b9:5a:1d:da:8c:8a:de:
b2:40:59:44:a6:91:19:ce:c5:95:56:38:57:57:cd:fc:85:70:
32:15:fe:d3:86:39:26:a5:e3:eb:fb:ac:0b:ed:0c:16:36:9c:
71:f6:9d:a3:df:0e:cf:f2:f4:e5:a7:75:f1:43:58:b1:88:19:
38:b3:fa:f5:73:eb:e8:26:b4:b9:b1:9e:f6:f0:ea:41:da:44:
cc:cd:f7:fc:93:34:da:a1:94:9e:00:00:92:e1:eb:67:b7:72:
b2:84:97:68:1d:e2:68:1b:a6:8e:54:7c:8a:a5:32:be:67:30:
c9:0d:d6:a9:6f:6f:c9:70:df:58:63:9d:8f:15:b4:a1:0e:f7:
20:27:0b:98:fe:7f:c8:e2:6e:a4:33:91:de:cd:32:9d:f9:27:
fa:59:b9:80:8d:96:ff:11:af:7c:09:8b:ac:39:8f:84:6f:bc:
92:7d:b9:f3:af:00:57:bb:85:e6:e6:30:5a:1f:ed:66:88:b5:
85:aa:2c:f8:f7:32:ed:08:3c:38:a7:a6:7c:2c:ef:08:46:b0:
b5:5b:27:98:72:24:1b:c8:7c:af:3a:5b:43:b0:c9:be:a7:be:
bf:b1:2e:28:b1:bc:7c:74:a3:f1:fa:5b:25:95:5f:27:c4:db:
bf:f2:54:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:36:03 2026 by rpki-client