
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
File: zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft (raw, json)
Hash identifier: NBmk3N5I8/uq6Lt7atQMFrQgsX/YpbuVuYzJ1eUYvBw=
Subject key identifier: FC:4A:3A:31:3E:3B:50:0E:81:A8:C6:8F:27:4C:CB:9D:12:74:3D:55
Authority key identifier: CC:9F:2F:BB:FA:ED:C4:4C:76:32:B1:8C:2B:D3:BC:58:EC:ED:7B:F5
Certificate issuer: /CN=A91E8FFF/serialNumber=CC9F2FBBFAEDC44C7632B18C2BD3BC58ECED7BF5
Certificate serial: 37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
Manifest number: 35
Signing time: Fri 17 Apr 2026 08:17:56 +0000
Manifest this update: Fri 17 Apr 2026 08:17:55 +0000
Manifest next update: Fri 24 Apr 2026 08:17:55 +0000
Files and hashes: 1: zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl (hash: Ma76Rn2E5ensHk/oT+e4mjWw95GJBfJ0l8bACETPdik=)
2: DBA60106EED111F0AB3DEEA1736F56BC.roa (hash: Zm5NVQiX1B1lMh6YYC6ofTBSfpDnYcLSn7pw+rOzSFc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl
rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:17:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8FFF, serialNumber=CC9F2FBBFAEDC44C7632B18C2BD3BC58ECED7BF5
Validity
Not Before: Apr 17 08:17:55 2026 GMT
Not After : Apr 24 08:17:55 2026 GMT
Subject: CN=69e1ecb4-fd08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3c:0d:c0:35:8e:19:cf:81:d8:7d:64:0d:cf:
3a:91:87:e3:58:40:e6:9d:56:88:9e:61:2a:7d:f9:
30:94:bb:7d:4f:bd:91:6a:05:19:04:53:a5:b4:b6:
fa:ed:18:cb:1a:55:c5:99:b1:5f:1d:1c:c8:25:82:
eb:31:d8:13:ff:a7:11:59:17:3d:cc:7c:c9:da:35:
91:b4:1c:2d:12:b9:2d:09:55:6c:d0:02:c1:32:cd:
d7:0b:7b:83:3d:95:bf:11:42:75:73:ac:0f:b9:f5:
36:7c:7f:8c:1b:4b:4d:33:30:a5:1f:ca:90:59:72:
86:d0:f3:f2:80:28:4f:27:32:56:44:05:21:69:67:
b6:8f:02:05:82:35:71:18:17:14:39:ee:fc:8a:c3:
00:b1:cc:b8:c0:d3:de:2c:61:27:3c:18:8d:5c:41:
be:68:f1:5d:11:0d:87:26:dd:35:c8:b4:f6:45:4a:
b2:96:aa:7d:f6:ce:0a:f3:33:dd:2d:da:96:3a:3b:
b7:14:ca:ed:c8:4c:7c:c3:f3:ff:4a:34:8c:cb:e4:
24:82:fb:bd:78:87:f5:a2:93:27:f5:90:b6:e8:18:
68:21:a6:a4:80:0e:3d:89:08:15:b0:e4:68:a4:c1:
54:4c:6b:40:c9:83:fc:4a:ea:cb:c3:10:6b:2d:80:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4A:3A:31:3E:3B:50:0E:81:A8:C6:8F:27:4C:CB:9D:12:74:3D:55
X509v3 Authority Key Identifier:
keyid:CC:9F:2F:BB:FA:ED:C4:4C:76:32:B1:8C:2B:D3:BC:58:EC:ED:7B:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d2:f1:75:70:a8:6c:fe:53:91:e6:aa:66:cb:a3:d6:40:92:
89:b2:fa:16:2d:57:e9:a0:45:30:61:cc:49:3b:e9:92:4f:f5:
1e:da:74:e5:5b:75:af:6c:c6:68:ae:bc:e3:9a:16:db:0f:44:
eb:0a:cc:43:33:f6:df:22:c5:02:d0:8f:3b:1b:6e:27:9e:ed:
10:ad:84:d4:3f:0a:ae:4e:61:4b:6e:b6:ce:ee:3d:09:76:e7:
e3:4e:1b:a7:c2:bc:db:40:e3:2a:df:1d:83:56:b5:75:e4:e7:
c4:61:9a:52:90:85:3d:24:52:36:6c:89:a1:57:d6:78:35:e6:
2a:3c:bc:c2:b3:73:bb:ea:29:6b:b1:98:79:94:11:91:ff:8c:
97:e0:9e:99:5b:dd:65:45:a8:5a:5c:97:d6:fd:ed:54:00:6b:
58:f8:8a:bb:e9:3d:22:ec:b5:d5:74:d5:9a:ba:2d:fc:bb:cc:
02:3b:65:f9:17:5c:78:a0:ef:9f:52:d2:fc:3f:b2:83:bc:a3:
0e:dd:6e:76:1e:75:1c:03:bd:5f:82:ed:e8:ea:f8:01:f2:8c:
5d:0b:5a:49:b6:7a:96:84:45:0c:71:0a:22:ad:2a:08:5a:21:
72:2c:8e:ae:1f:04:4f:9b:18:8b:0f:ad:55:e6:47:db:3a:1a:
91:65:a2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:41:01 2026 by rpki-client