
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
File: zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft (raw, json)
Hash identifier: fScJTMGTMVIuc97og6aOyVWtbWHsprrjaaKLDGvsQ00=
Subject key identifier: 8F:9E:47:A6:45:C5:70:EE:94:74:59:3D:5D:08:FA:69:7A:51:0E:21
Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14
Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
Certificate serial: 07EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
Manifest number: 0782
Signing time: Fri 12 Jun 2026 22:01:19 +0000
Manifest this update: Fri 12 Jun 2026 22:01:18 +0000
Manifest next update: Fri 19 Jun 2026 22:01:18 +0000
Files and hashes: 1: zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl (hash: V1gCI7IlDT5wDtC29mx/QLSJYF+LYmWc0ukmXZzPWgs=)
2: B23B879EE89C11ECA30FD20EC4F9AE02.roa (hash: x07pQS6pEgJZLrxI+4SzaUGa4YwQ96qN1jF+DrtdcJY=)
3: 90BBD1B6884C11EB88489B75C4F9AE02.roa (hash: H5yiTmZmqNzfgLkNUSshTejgEC9QW5DzJpuCaDVZPHo=)
4: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (hash: Ro74anOTti8QG6vyjwS8aXc9bfV+QmfdwMUJorqRPP8=)
5: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (hash: td9+M54k5hj2c/thTOFATgj6CforEojuE42TknTzpYk=)
6: 337DA192C3FC11EF8C3B0B5DC4F9AE02.roa (hash: jdZ9eU0HcGePAnaPpQJ/8+6uq872C01hZ+qnBvUiNlQ=)
7: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (hash: a9anV1wkhAhqukLm8HrqODKS0piPOQEQ02jiRXV3Ak4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl
rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2030 (0x7ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
Validity
Not Before: Jun 12 22:01:18 2026 GMT
Not After : Jun 19 22:01:18 2026 GMT
Subject: CN=6a2c81ae-04a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0c:0a:96:d6:85:35:cc:8f:5c:67:89:16:7a:
64:4e:8c:ca:65:a5:7a:ce:3b:82:6e:1c:22:33:3b:
34:50:f1:5c:bd:0e:9f:b9:26:ab:a6:8b:95:ea:fc:
2e:63:e1:70:a3:d8:38:ac:fd:a8:f1:ca:6f:06:d4:
21:a3:23:ca:5c:de:a2:0c:f0:78:aa:ab:00:b4:c7:
ff:52:b5:ca:f3:12:8b:b6:8d:0b:cf:bf:74:98:6d:
34:de:1c:21:f7:07:8b:c2:46:e9:9c:7e:f7:bc:bb:
67:0d:64:24:03:bb:5f:d9:f5:2b:ce:6c:23:eb:75:
52:8c:5c:76:2a:a6:e3:fb:3f:41:fb:60:fd:5a:f0:
cf:76:f9:15:64:ef:44:f1:f8:fd:8a:56:78:93:07:
70:f8:69:4d:08:2b:b0:bc:db:9d:af:58:7d:2d:4f:
d3:66:6a:ec:40:bc:8a:a3:48:c7:f9:28:93:54:0e:
88:b4:b8:d6:da:9b:b2:b1:c2:95:0b:05:30:a7:b5:
94:f5:39:2c:d9:67:b4:30:84:7a:00:fe:03:05:f5:
25:7b:5c:58:23:98:44:b5:06:39:14:90:4e:d1:6b:
be:f6:2f:d1:c7:8b:83:4f:a5:22:71:10:69:33:05:
a3:8e:94:52:e8:c6:2f:7d:02:e0:8c:09:7f:97:cd:
91:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9E:47:A6:45:C5:70:EE:94:74:59:3D:5D:08:FA:69:7A:51:0E:21
X509v3 Authority Key Identifier:
keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:5e:a3:7a:5b:c1:13:48:9d:3b:e5:29:0a:f5:63:0e:19:c1:
41:dd:f1:7e:f0:b3:3d:2e:be:74:2a:7f:0e:c0:2b:79:0f:33:
db:6b:af:3a:57:67:cd:16:e6:75:ab:15:60:3c:2f:e9:c0:a5:
94:7f:74:a7:3f:29:08:bd:ce:a4:72:58:cd:c0:2b:3c:1a:07:
10:4f:ef:71:a6:1f:4a:30:b4:18:77:0f:76:10:88:21:a5:1d:
b3:4c:03:23:42:59:ff:a0:c5:38:88:59:4b:c7:00:55:ca:57:
e2:db:2d:54:ab:0c:d5:fe:97:9e:bb:3d:44:52:e1:f3:ca:32:
c7:da:09:ae:74:50:15:02:ac:92:cc:19:c2:34:0b:f0:03:63:
0e:be:fa:8d:77:90:c2:f6:9c:1e:80:fd:9c:6d:51:5c:41:8c:
ff:71:1e:18:8d:67:91:b5:0d:28:b0:40:eb:03:f9:41:a0:54:
12:a8:0e:67:e1:b8:0e:34:40:eb:46:d3:d0:ba:75:0a:d3:6b:
eb:6d:bb:42:01:93:2d:10:e2:25:0f:38:0e:76:e2:03:ea:f6:
dd:6b:7c:c7:c7:16:a7:df:14:18:2e:28:2f:86:04:a3:00:bc:
d5:cd:12:91:d3:1f:c9:2c:5e:92:15:62:81:30:d5:e1:67:2a:
0a:bd:e1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:15:34 2026 by rpki-client