
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft
File: zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft (raw, json)
Hash identifier: tj/NAAfJsIGv2s7zIXCVKtdUMFRPFztGqgHv7IGma4Y=
Subject key identifier: 04:F6:52:52:6F:11:1C:EC:E1:27:E6:48:3C:18:4C:44:06:E1:91:D8
Authority key identifier: CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49
Certificate issuer: /CN=A91ED8E0/serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049
Certificate serial: 0993
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft
Manifest number: 0979
Signing time: Fri 12 Jun 2026 20:05:49 +0000
Manifest this update: Fri 12 Jun 2026 20:05:49 +0000
Manifest next update: Fri 19 Jun 2026 20:05:49 +0000
Files and hashes: 1: zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl (hash: x6SYBJNN1ug02Q49UCUTMNqIN4Ee5ul7pkQK/bFhlRU=)
2: 2BEC62FA5DA011EF8E541175C4F9AE02.roa (hash: PDPdfJs3Sp/L4O6BvH4/f/PfyDghykuDm6tMTYKRkIk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl
rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2451 (0x993)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED8E0, serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049
Validity
Not Before: Jun 12 20:05:49 2026 GMT
Not After : Jun 19 20:05:49 2026 GMT
Subject: CN=6a2c669d-7a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ff:03:30:2a:5a:bf:a3:a6:7d:31:9a:f2:c1:
da:64:e0:07:e2:0b:7a:5a:b9:0d:fb:a0:b3:4a:67:
42:e1:84:98:f7:78:a4:01:24:ab:25:ef:9f:7d:2c:
38:97:66:fc:cf:89:00:e1:9c:a1:af:22:54:a1:b8:
65:19:86:fe:09:6a:09:db:98:f1:5f:62:21:b6:fb:
72:fc:f9:54:6a:fa:ab:7d:55:5d:36:38:87:13:1c:
32:0c:37:36:cd:38:ad:35:9e:1b:4b:5e:b2:0b:ff:
08:39:e3:53:a4:77:a8:9c:bc:95:79:50:91:f8:e2:
cc:83:bb:4f:3f:3a:ad:7c:5d:8b:e0:76:c5:b0:d3:
32:18:a7:a0:ce:d2:5e:75:db:9f:05:43:47:3c:b2:
54:df:de:39:70:c7:d3:4d:91:ed:11:97:ff:72:5b:
b7:e6:ab:a6:47:a9:28:eb:3e:c6:35:c2:26:78:04:
75:d6:c6:81:ac:4b:84:22:ff:56:8e:99:ad:af:ab:
bc:84:3f:e8:0f:f4:31:92:5a:c5:9b:a9:b3:73:ee:
84:1b:50:fd:ac:57:af:b7:82:2a:dd:02:3c:9e:18:
43:ee:9a:ba:4e:25:6c:2b:ef:c5:77:8a:b2:b5:25:
ee:f3:d0:7c:e5:05:8e:cc:0d:4c:9d:bb:49:b6:b2:
c7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F6:52:52:6F:11:1C:EC:E1:27:E6:48:3C:18:4C:44:06:E1:91:D8
X509v3 Authority Key Identifier:
keyid:CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:88:e3:27:3d:9e:60:f8:8f:16:71:e4:43:ce:1f:c3:53:82:
5b:9e:86:b9:6e:88:a8:2b:cd:3e:d0:c8:5f:57:ba:53:d7:7b:
3f:3d:18:d4:fd:e4:73:9a:04:20:9b:0f:09:24:20:b7:22:f0:
b5:8f:20:64:e9:88:90:9e:fe:a6:15:93:bc:e8:a4:96:2a:a2:
52:85:e2:3a:33:14:c0:30:1f:e0:75:ab:43:3a:cb:b0:17:27:
7a:99:c3:c7:8d:0d:3b:b7:ec:a2:b1:d4:ea:7e:d8:c8:95:f5:
f2:26:05:8b:66:ed:9d:91:f6:15:7f:03:52:2a:ef:7a:f9:9b:
b6:af:96:7d:56:ec:fa:49:20:f3:e5:1b:0d:ef:b9:2e:d4:28:
32:3f:2e:e2:ca:ab:3e:7a:35:e8:ba:1b:db:f4:81:87:ce:5e:
6a:d7:71:33:43:bb:05:8e:59:35:43:c6:1e:6a:fe:d7:89:97:
5d:4a:3c:f0:1c:d8:22:8e:b2:bf:0c:f1:7d:bd:59:49:3c:91:
84:32:9e:91:77:94:be:f3:5b:e9:65:9d:12:32:99:ba:fd:8d:
d7:c5:33:1b:ba:dd:72:1f:95:87:70:2f:73:0a:63:48:db:2a:
23:d7:e4:25:cf:34:77:81:c3:fe:6c:c1:2d:42:95:ba:33:b7:
2b:06:4b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:55:52 2026 by rpki-client