
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
File: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft (raw, json)
Hash identifier: 8aJ0DHBdBgblykqc03dZ7J4vNzZyb1ARjcuPRYTJBCA=
Subject key identifier: 2C:77:E9:10:7A:C4:28:6F:88:86:09:AD:CB:A4:8C:8B:9A:F1:69:5F
Authority key identifier: 66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3
Certificate issuer: /CN=A91EB7BD/serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3
Certificate serial: 1265
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
Manifest number: 125A
Signing time: Tue 28 Jul 2026 17:12:20 +0000
Manifest this update: Tue 28 Jul 2026 17:12:20 +0000
Manifest next update: Tue 04 Aug 2026 17:12:20 +0000
Files and hashes: 1: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl (hash: DpaV8LkFKbOMKOuNsLeh1/TedPYGTGvhgEKPAd504Og=)
2: 84121C245CE111E9824BCF76C4F9AE02.roa (hash: 6P0QZul7deP/5azgpjbHdDKzo/8UCrH1J+Uoz59/kWw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl
rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4709 (0x1265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB7BD, serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3
Validity
Not Before: Jul 28 17:12:20 2026 GMT
Not After : Aug 4 17:12:20 2026 GMT
Subject: CN=6a68e2f4-4bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6f:50:a6:41:5d:30:69:ed:e5:43:2a:67:ca:
a9:54:6b:1c:03:b2:38:ba:a9:42:a1:25:e1:8e:ce:
cc:a6:02:cc:21:16:25:30:d0:6d:1e:e4:be:c3:62:
b3:a0:74:7f:72:5c:9e:89:f1:55:9a:e3:9a:39:c2:
d5:63:5e:f2:e7:de:13:d8:b7:bf:6a:0b:d1:73:e0:
36:ed:f8:1a:0a:e5:d6:6e:48:b9:77:dd:ce:dd:00:
b7:79:1d:40:d5:bb:80:04:f0:2f:9f:0a:bf:d2:a8:
3d:8d:50:76:85:bc:90:9f:38:2f:cd:5e:50:db:c4:
cf:10:2b:2e:ea:2e:5f:26:ec:e4:5f:c5:76:86:6d:
70:28:70:aa:49:d5:25:7b:8d:6e:57:91:e2:ee:e9:
e2:81:fe:fd:9b:ce:a6:1b:2a:59:d4:de:b5:14:13:
a8:dd:7d:b7:67:f5:33:49:10:94:c3:00:85:f1:32:
ed:74:67:67:68:8e:22:02:26:b7:da:53:61:1e:d4:
1f:71:14:bc:f4:4f:66:f9:c8:8a:be:30:e7:f7:96:
b4:51:43:c4:fd:11:2e:bb:e4:92:74:4e:3c:19:14:
d9:ef:12:03:7a:8d:bd:3d:eb:0b:a0:45:8f:b2:45:
c4:2a:de:f8:90:c9:a8:32:2e:c4:61:cd:06:bc:10:
6b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:77:E9:10:7A:C4:28:6F:88:86:09:AD:CB:A4:8C:8B:9A:F1:69:5F
X509v3 Authority Key Identifier:
keyid:66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:dd:16:05:4d:47:0f:af:1f:8c:d7:00:e8:d4:ea:b7:cc:21:
a8:4a:a6:39:0a:73:85:36:be:bc:f2:dc:f9:c9:62:d2:8e:6b:
65:b2:e9:04:44:9d:12:5b:f3:5c:55:9f:49:34:5e:eb:2e:30:
72:a1:1e:92:40:10:32:1e:7f:96:56:12:22:ce:77:d9:96:03:
b4:fb:c2:e6:15:1d:5f:5b:35:c1:94:e9:35:5a:d8:25:85:0a:
cd:77:f3:21:38:df:a8:34:d6:c9:10:99:17:92:ab:b9:c5:ec:
75:2e:ae:44:8c:2c:d6:f3:8b:1f:c0:f7:80:70:bf:3b:19:0e:
e1:e6:f7:c3:10:c0:42:c7:0f:10:35:bb:80:0f:85:12:80:17:
c9:28:9e:7b:fc:e3:40:94:a7:35:95:c1:8a:1a:63:3b:08:e5:
94:d4:ff:42:db:d6:75:01:62:5d:37:e3:a1:94:40:63:6a:f0:
d3:9f:85:9c:02:56:8d:81:0d:ce:91:2f:6d:f5:40:bc:31:a6:
b5:74:21:31:cb:d1:14:cf:eb:b1:87:dd:29:9d:b6:03:ca:a8:
f4:0f:60:f7:0a:f3:e4:bf:c1:78:6e:3c:85:8a:bd:68:44:6e:
21:74:7e:27:b1:8e:75:8f:1b:88:1b:da:d9:aa:42:b9:1a:2f:
c4:56:9e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:38:18 2026 by rpki-client