
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
File: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft (raw, json)
Hash identifier: PY5IuKrh+DeHBY71+3lfEwgNSy5/jLbBXh16VF4Rjvw=
Subject key identifier: 16:70:23:4E:C7:9F:B9:62:C7:2E:7E:50:31:68:81:C3:34:C2:F5:C8
Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
Certificate issuer: /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Certificate serial: 029A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
Manifest number: 027C
Signing time: Mon 21 Sep 2026 02:05:30 +0000
Manifest this update: Mon 21 Sep 2026 02:05:30 +0000
Manifest next update: Mon 28 Sep 2026 02:05:30 +0000
Files and hashes: 1: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl (hash: 7HzN0dwsJADz7txV3Vf5B5xdBWKQZXDLYbMu0/tVmLc=)
2: C2C37E56153A11EF9E378A14C4F9AE02.roa (hash: dhXNyunI39nD/DT1e9lDchzlVmyAT8bbuHRUT42ciqQ=)
3: 9EF724BE2A4911EE81BCF50FC4F9AE02.roa (hash: 0pPo8g6m9fkgC10m1JkoC4zbRTfWIqGtQiM16LFE718=)
4: 282CA82C023F11EEB716134FC4F9AE02.roa (hash: au5ReoWDIsycs2B6WsFnd/TKCzlPPWNf7r6kfYZw9MY=)
5: 309A0AEC073D11EE94A9410CC4F9AE02.roa (hash: pFDSBEaXQzskq04841VPkdgOexvbY84+Oq7ogG0dvvc=)
6: A90DA1C0C71611EE9465BF5EC4F9AE02.roa (hash: SFEP7Eqv5F0cO8qs2JVVwhMOYY0EYGol0tddMhyiU5s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:05:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 666 (0x29a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911710E, serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Validity
Not Before: Sep 21 02:05:30 2026 GMT
Not After : Sep 28 02:05:30 2026 GMT
Subject: CN=6ab090ea-0e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c4:a0:36:ba:63:0f:01:6a:27:f9:8b:66:18:
b6:9b:c7:67:4d:b9:04:6c:26:e6:8b:a6:bb:d9:c8:
66:10:90:76:fa:40:a0:05:79:92:6b:20:59:e7:6c:
26:88:5b:4f:71:bb:5c:f1:ac:c6:78:ea:4d:77:aa:
66:db:66:18:ca:78:f5:55:e9:e3:4d:29:8b:27:f3:
76:3a:54:a5:86:b8:51:5d:73:5e:3c:cf:f5:84:0b:
92:84:67:47:a4:7d:0d:e5:bb:dd:46:0c:53:8a:a7:
da:09:3d:b0:41:33:c8:36:83:73:31:b5:e4:23:74:
b5:93:88:81:33:07:96:7d:f8:72:3c:15:27:03:55:
98:23:65:b8:41:76:55:59:96:14:ee:f9:ab:2c:b1:
5d:ba:ba:f6:6d:f2:d0:4b:dc:a9:99:f5:11:4e:88:
08:a1:63:5f:c4:f6:be:b3:5f:27:e7:70:ea:90:6f:
8c:4d:b3:26:4b:c4:69:ad:ef:3d:73:d5:33:9e:6b:
0f:01:52:82:6a:fe:a1:aa:d0:15:93:53:de:8a:bf:
5a:3d:33:03:8c:b8:4c:22:4d:34:c8:d0:ac:44:f4:
5b:4f:cf:00:44:94:8d:c4:5d:0e:ae:8d:3c:1c:d8:
2a:ad:5b:ca:60:c6:c6:26:1c:4e:fb:98:7e:ad:01:
71:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:70:23:4E:C7:9F:B9:62:C7:2E:7E:50:31:68:81:C3:34:C2:F5:C8
X509v3 Authority Key Identifier:
keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:19:c4:7c:05:89:68:63:c0:ad:79:37:0d:7a:cf:49:23:bb:
51:a3:35:5d:13:f4:07:d0:dc:ee:8a:07:cc:d2:50:06:b7:2e:
a9:24:7d:3a:4c:00:72:16:62:db:b6:4e:80:f9:9d:7b:66:6f:
96:f1:18:58:7e:d8:ff:b7:44:ca:d9:ff:da:82:8d:66:a4:87:
67:b0:16:2c:7e:91:b7:5a:03:e1:ac:ad:91:93:2e:66:0c:0d:
90:5c:eb:8e:e7:8f:82:50:13:4b:b3:b2:74:ef:7e:7a:98:1f:
a4:d0:a5:05:27:a4:e0:0d:08:5b:bf:74:2c:65:0a:63:58:d5:
e9:d2:69:1f:da:3b:59:d7:8b:0b:13:67:5d:91:4c:b4:68:eb:
d2:e2:48:8b:06:9b:00:49:6f:34:81:63:da:a1:72:07:82:26:
c1:f4:07:4a:0a:31:1e:a3:51:04:ae:28:fc:d6:c4:a3:3a:ef:
f7:92:20:53:52:9d:f3:43:1d:aa:d8:c3:2f:4f:55:c9:56:89:
7c:2f:01:14:66:3d:d3:4b:00:9a:70:18:68:ac:d0:63:6c:25:
a3:d1:a4:6c:2e:25:50:4b:21:58:37:c8:09:79:03:81:7e:2f:
1d:e5:c8:e9:cd:fb:51:0a:9f:23:0f:ec:b6:43:04:7a:da:1a:
b2:07:b3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:30:58 2026 by rpki-client