
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
File: Zw46BnIWhKtHO7vlzCLPBdAkv20.mft (raw, json)
Hash identifier: xjNIBbDEbHBv+VVI3aGdDjg3PdaWB8zBlewgKy5bahY=
Subject key identifier: E1:2B:36:31:A4:6C:11:6E:9B:80:C3:C6:F9:C5:89:A1:5E:4D:47:53
Authority key identifier: 67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D
Certificate issuer: /CN=A91EAE0A/serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
Certificate serial: 012A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
Manifest number: 0120
Signing time: Sat 13 Jun 2026 05:57:41 +0000
Manifest this update: Sat 13 Jun 2026 05:57:40 +0000
Manifest next update: Sat 20 Jun 2026 05:57:40 +0000
Files and hashes: 1: Zw46BnIWhKtHO7vlzCLPBdAkv20.crl (hash: pjPiXAjCg+NzIsMQi0RdT09dGDz1E36Pob8sCqq/+5Q=)
2: 2018750A5FC411F0ACE3A087C4F9AE02.roa (hash: R8o39adrmBVnGQ0//ScQ4qDFf9KvWQlMZLY/6u7Uyoo=)
3: C491ED725A7A11F083B3F885C4F9AE02.roa (hash: 7WBAHsig/Kovz/pUrk3p+Cxc7oQA5m4kNqg7vSnWYU8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl
rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:57:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE0A, serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
Validity
Not Before: Jun 13 05:57:40 2026 GMT
Not After : Jun 20 05:57:40 2026 GMT
Subject: CN=6a2cf154-2e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d0:41:e1:fd:ed:c1:ed:77:b1:6f:77:0e:fe:
23:6c:83:6b:34:4d:64:13:18:90:bb:76:2c:20:20:
64:6f:cb:71:c5:9a:4d:38:ba:b2:9c:88:5f:a0:20:
06:5b:4b:8e:f0:ee:84:9c:1a:7f:42:67:04:3e:f1:
a7:ea:93:06:ff:14:38:34:7f:42:eb:2e:57:53:4e:
91:5c:8b:07:4e:38:05:4d:38:f7:03:a5:6a:ae:77:
7e:d1:ce:d6:bb:03:af:1a:26:9d:1e:a8:31:cc:69:
3b:4f:27:c6:b2:f5:a8:68:e4:7b:0f:32:d1:17:ac:
03:4e:9f:19:44:3a:b6:0e:ad:d4:da:8c:0f:bc:61:
4b:93:00:bb:7a:fb:43:4a:c1:98:73:fb:2a:52:48:
f6:d1:73:45:15:9e:48:c3:47:a2:b4:35:09:42:da:
80:5f:23:86:1c:fe:08:5c:a1:60:32:f6:92:68:12:
b4:cf:96:41:f9:d6:66:94:46:ec:4e:17:e0:cd:b9:
cf:53:13:f3:73:18:7e:ba:3a:b7:6f:84:1b:f1:d6:
d9:8e:b6:27:71:75:d2:01:dc:b7:6f:72:81:c2:53:
e7:05:11:68:ae:9e:59:eb:0b:f6:a2:67:e7:16:b6:
2c:59:d0:e1:06:8e:22:38:64:6e:3b:b1:6e:9f:fe:
2f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2B:36:31:A4:6C:11:6E:9B:80:C3:C6:F9:C5:89:A1:5E:4D:47:53
X509v3 Authority Key Identifier:
keyid:67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:1c:be:17:b0:06:68:79:e4:9a:d3:cc:0e:71:2b:86:6e:19:
d3:24:48:ad:11:9d:0e:3a:6b:b7:e8:59:ab:17:7b:03:04:ef:
5e:f6:98:9b:5a:8a:5c:61:3b:c8:fc:68:26:d4:d4:17:40:99:
85:39:e6:4a:39:92:83:6f:7d:bf:0e:ab:cd:df:02:19:df:7c:
d1:3d:a9:f3:e7:28:36:4c:16:2e:47:68:6e:db:01:49:ec:5e:
5b:64:af:a1:cd:f7:a3:fd:c0:be:3e:c7:2c:f1:82:a2:f9:aa:
97:da:32:b9:77:74:81:3c:93:a2:7e:a1:f4:5f:98:17:c8:3f:
e6:61:4b:17:38:ee:bd:5a:a2:dd:95:85:14:5f:b9:7d:08:61:
37:e9:eb:b6:f8:85:6c:84:00:b5:c2:08:4f:b2:9c:7f:bc:37:
05:6c:e4:b1:f6:77:ce:ec:95:53:8a:ee:48:a8:57:a0:29:4a:
0f:15:23:6c:e1:f4:75:dd:d8:92:8f:e9:55:8d:28:7f:67:c3:
37:a1:18:1f:d1:72:f1:7e:a2:51:c1:44:f7:50:d9:5f:0a:ac:
e9:19:76:2d:41:38:f0:db:64:37:df:69:35:af:32:aa:f2:8d:
aa:40:5d:2b:ed:e1:de:b1:4f:75:d9:97:ee:57:24:e3:ad:2e:
bb:57:39:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:23:45 2026 by rpki-client