
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
File: ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft (raw, json)
Hash identifier: ExtxjxagQIoe6nGkU4kRUJGBKv9LYmx4EhWOrEdSjo0=
Subject key identifier: F0:EA:1B:2E:7A:39:07:30:29:A9:FD:5F:52:2A:9E:25:1B:82:70:FF
Authority key identifier: 64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD
Certificate issuer: /CN=A91FF14D/serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD
Certificate serial: 6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
Manifest number: 6D
Signing time: Fri 17 Apr 2026 07:33:48 +0000
Manifest this update: Fri 17 Apr 2026 07:33:47 +0000
Manifest next update: Fri 24 Apr 2026 07:33:47 +0000
Files and hashes: 1: ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl (hash: Lfzx/mdPJxmVRfzfylkJkR3jW/NCM94g3KpmsNR1KsY=)
2: 18F61C18939B11F0820C0E13C4F9AE02.roa (hash: ywYpRYCAQwXCZMjr3c7Rlx0ujNmnV92c95uYASJL2t0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl
rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF14D, serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD
Validity
Not Before: Apr 17 07:33:47 2026 GMT
Not After : Apr 24 07:33:47 2026 GMT
Subject: CN=69e1e25c-7afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a5:98:59:0f:60:8a:59:68:5a:53:c4:80:61:
4a:ee:cf:59:de:c8:1e:c3:92:b4:6a:ec:a4:b1:3f:
cd:51:20:87:56:45:b1:9f:81:97:db:46:11:a4:05:
c4:c5:f7:41:ae:12:b5:6b:21:98:96:74:0f:62:a2:
76:60:a4:25:d9:b5:65:2c:9c:8f:ad:f1:ab:47:ab:
cc:13:0b:92:28:69:e3:10:f8:77:40:30:08:2d:f0:
70:0e:d3:c6:87:1d:fe:6f:83:97:32:39:fc:d6:2b:
e8:7a:d1:f5:8b:55:53:b3:5f:8a:4d:5a:21:18:65:
f5:fd:7b:da:c1:7a:b3:bb:c7:91:6f:bc:75:0c:4d:
08:ea:0b:f8:8e:60:16:7c:82:21:51:62:29:20:2f:
1b:ad:7b:a9:f9:3e:12:e4:b7:56:a6:8a:3b:a5:a9:
6f:00:68:57:51:65:d7:0b:6b:b5:92:45:00:79:a6:
64:8d:c7:a9:51:3c:54:da:d2:a6:79:d5:be:04:ca:
6d:b0:b7:be:6b:df:f6:ec:1a:a5:d9:55:c3:a7:aa:
70:33:30:c3:c0:11:02:95:78:ba:74:81:fe:81:82:
33:75:3e:81:28:c4:18:ba:9b:fd:d1:b7:1f:b1:97:
11:4e:fd:2e:9d:54:48:40:29:fe:35:5b:05:8d:32:
8d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EA:1B:2E:7A:39:07:30:29:A9:FD:5F:52:2A:9E:25:1B:82:70:FF
X509v3 Authority Key Identifier:
keyid:64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:3d:e5:2a:0b:6a:79:d4:98:46:08:7f:3f:49:ed:12:f3:50:
28:7b:54:91:8d:2a:b2:e5:05:0c:42:ad:81:44:81:88:91:8e:
10:59:52:e6:d3:2a:f5:65:b8:6a:14:69:ff:cd:ec:da:17:1a:
0e:f5:b5:6d:29:18:d5:7a:2a:98:5d:21:98:e2:5a:67:f0:40:
56:02:52:e2:96:9d:50:0b:fd:ae:82:b9:9c:aa:0d:a2:f5:78:
f3:5c:6c:2f:db:8e:b2:a4:43:2c:49:0e:a7:74:d9:de:d4:0c:
0a:da:a9:c9:bf:6b:4d:49:db:80:6f:0e:01:57:f7:a1:b5:15:
cb:c4:d2:b3:3f:f2:cd:fb:9c:32:72:40:6f:55:24:1f:74:af:
a9:17:33:5b:fd:e9:e8:36:0d:b2:23:be:46:ec:f6:5b:e7:f9:
ce:5a:90:1d:17:cd:59:6d:b8:30:d8:b3:de:b6:0e:79:58:6a:
30:14:8f:21:19:3f:db:c2:ec:e4:b9:08:71:b0:c0:9f:0d:97:
9f:7b:8d:6b:de:ae:c1:c4:6b:76:89:84:b9:17:2f:31:fa:b7:
d2:06:55:bf:d8:e7:51:f0:39:2e:3f:f5:a9:c1:ce:b0:61:de:
e7:fd:4b:20:04:b6:7a:8d:dd:3a:58:3c:53:b0:b2:ac:e2:ae:
7f:8a:15:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:36 2026 by rpki-client