
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118278/7C7D07D2B25411F1B2211E0E6911F970/zN5Fgw42Z1mJ9l0NlOxL2kECNYU.mft
File: zN5Fgw42Z1mJ9l0NlOxL2kECNYU.mft (raw, json)
Hash identifier: 4pjO5HTxg/1gE8IZ/4zs5f2HEls7GsLaVSMYJV+5e7o=
Subject key identifier: 5C:0A:AE:7E:BB:33:35:3F:C7:F7:EF:56:F5:21:E2:61:4A:9A:E5:84
Authority key identifier: CC:DE:45:83:0E:36:67:59:89:F6:5D:0D:94:EC:4B:DA:41:02:35:85
Certificate issuer: /CN=A9118278/serialNumber=CCDE45830E36675989F65D0D94EC4BDA41023585
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zN5Fgw42Z1mJ9l0NlOxL2kECNYU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118278/7C7D07D2B25411F1B2211E0E6911F970/zN5Fgw42Z1mJ9l0NlOxL2kECNYU.mft
Manifest number: 0D
Signing time: Fri 09 Oct 2026 09:58:46 +0000
Manifest this update: Fri 09 Oct 2026 09:58:45 +0000
Manifest next update: Fri 16 Oct 2026 09:58:45 +0000
Files and hashes: 1: zN5Fgw42Z1mJ9l0NlOxL2kECNYU.crl (hash: N9N1BHQwxBNsd6QgAPrQcmrDuh/FJ6wDRra6z9x1oCw=)
2: 9609A394B25511F18445BAB96911F970.roa (hash: wqDY38WHMN2QXwss5YXm/GfOutIw/sNe6npaYh21mxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118278/7C7D07D2B25411F1B2211E0E6911F970/zN5Fgw42Z1mJ9l0NlOxL2kECNYU.crl
rsync://rpki.apnic.net/member_repository/A9118278/7C7D07D2B25411F1B2211E0E6911F970/zN5Fgw42Z1mJ9l0NlOxL2kECNYU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zN5Fgw42Z1mJ9l0NlOxL2kECNYU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 09:58:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118278, serialNumber=CCDE45830E36675989F65D0D94EC4BDA41023585
Validity
Not Before: Oct 9 09:58:45 2026 GMT
Not After : Oct 16 09:58:45 2026 GMT
Subject: CN=6ac8bad5-8e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:66:7f:f8:50:48:fd:93:0b:57:3d:0a:d7:e6:
ec:d9:ae:0e:06:3d:e1:71:c5:b3:87:95:d0:a5:2c:
39:30:14:01:df:9e:df:e2:a4:9a:71:64:3f:8b:15:
a0:68:8d:05:15:2a:7d:4f:d9:cb:3a:f6:57:0f:82:
c9:a7:c6:90:dc:f1:a8:b0:20:75:77:24:1e:96:f3:
5f:d0:c3:c4:81:18:c7:d8:07:e5:e1:d7:c6:d5:e6:
3d:cf:f3:f2:b2:3a:b2:83:59:7a:be:b8:ee:9a:91:
ce:ed:2a:25:24:29:1c:57:f9:07:bd:9f:b2:3a:2d:
ac:80:ff:a8:f8:b2:09:2e:8a:ca:da:26:24:05:8d:
62:9d:13:7a:39:f6:d3:48:64:ae:1d:01:ed:d3:3f:
51:dd:1a:3f:f9:a2:ad:5e:c7:68:57:14:f0:88:a2:
c0:c6:b0:c7:0a:7b:b7:3a:dd:18:e2:d7:7e:29:59:
a2:9a:8c:6a:89:47:7c:9d:2d:4d:8d:3c:24:9a:07:
95:86:52:8b:2b:1b:e1:79:2c:98:77:87:96:2d:a4:
f8:65:90:ce:7d:54:fd:62:ce:97:ad:c5:13:2d:9b:
aa:15:7a:e6:88:ee:b0:0c:e8:17:e1:94:b8:9c:d9:
0c:dd:80:35:77:cb:6e:ae:38:69:cc:23:72:97:1f:
0a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0A:AE:7E:BB:33:35:3F:C7:F7:EF:56:F5:21:E2:61:4A:9A:E5:84
X509v3 Authority Key Identifier:
keyid:CC:DE:45:83:0E:36:67:59:89:F6:5D:0D:94:EC:4B:DA:41:02:35:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118278/7C7D07D2B25411F1B2211E0E6911F970/zN5Fgw42Z1mJ9l0NlOxL2kECNYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zN5Fgw42Z1mJ9l0NlOxL2kECNYU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118278/7C7D07D2B25411F1B2211E0E6911F970/zN5Fgw42Z1mJ9l0NlOxL2kECNYU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:de:5b:b7:b3:60:30:ae:2a:18:26:4a:1f:33:02:69:c0:db:
ad:f1:7b:5a:66:cc:6f:37:05:83:c5:f5:18:5f:b6:06:43:ea:
f8:f4:7b:06:4a:1c:0e:0c:7c:63:95:b3:9b:3b:2d:65:e5:5e:
63:f4:b4:63:30:66:14:2a:b5:61:5d:56:3f:97:6f:46:53:cd:
d8:a4:e9:44:0c:f6:44:3b:cf:1e:8f:4d:8b:a3:64:1f:80:fa:
82:8a:a5:94:e5:74:a9:a2:25:0c:36:4a:05:b5:8a:28:f5:49:
0d:82:cd:65:52:2a:71:42:aa:ac:23:0a:0d:45:a9:4f:8a:ec:
ba:a7:02:c8:ff:e9:88:85:aa:42:b5:a5:58:11:8f:5d:86:64:
02:78:42:05:13:72:4d:1d:c1:0b:ec:d0:74:84:15:62:04:1a:
39:66:6d:53:67:86:07:02:03:98:33:b1:fd:f1:d7:e2:b0:9e:
9d:a1:c6:af:10:b0:62:1a:aa:0d:37:22:7b:17:39:97:00:ba:
87:ae:5b:bd:6f:9f:61:28:7c:8e:d4:c7:56:5b:e8:c1:cc:32:
0e:b9:fe:7f:33:88:61:23:d9:58:50:b8:1e:98:2f:e1:4d:52:
1b:8e:bc:c3:dc:b5:53:3e:b8:40:ed:f8:47:ad:43:d9:f9:6f:
27:4a:94:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:53:57 2026 by rpki-client