
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft
File: ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft (raw, json)
Hash identifier: uLyB3i0rDEbSMiXGHRJVCEHIoPlt/tCnRUjaB8ZfTHA=
Subject key identifier: E3:4F:DF:91:5B:62:F0:36:FB:FB:CA:18:9F:69:B2:9E:3E:1B:DB:4E
Authority key identifier: 64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13
Certificate issuer: /CN=A911B5AC/serialNumber=6451553E09DC24DDDBC54073E6625B1A16E75213
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft
Manifest number: AA
Signing time: Wed 23 Sep 2026 01:08:10 +0000
Manifest this update: Wed 23 Sep 2026 01:08:10 +0000
Manifest next update: Wed 30 Sep 2026 01:08:10 +0000
Files and hashes: 1: ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl (hash: YjZn4yyOKLYc3DD+7XSquCH2tF6+YLMaPV4MzHwd1mo=)
2: 94734132744F11F187348A036EA30FBC.roa (hash: j2i6IW/kxZ1OsDTycHA9hM2N9ZMvryaZuqMT34VfdNg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl
rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5AC, serialNumber=6451553E09DC24DDDBC54073E6625B1A16E75213
Validity
Not Before: Sep 23 01:08:10 2026 GMT
Not After : Sep 30 01:08:10 2026 GMT
Subject: CN=6ab3267a-7f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ea:c2:65:f5:24:0a:f1:a9:5d:af:70:a6:d7:
5f:f4:ab:c8:7a:5b:9d:8b:2e:60:38:b6:78:2c:aa:
cc:85:8a:1f:a6:7d:b9:ea:75:45:41:e2:03:16:7e:
db:81:aa:c4:49:a2:9f:9e:93:d1:7c:89:01:88:e7:
61:da:f7:29:92:da:79:e1:37:b2:45:b2:e5:58:ea:
20:6a:49:2e:3b:a6:4e:3a:b3:df:22:84:4f:3c:cc:
05:b6:d4:71:90:bb:88:3f:e5:80:a2:ee:7d:84:58:
2e:b2:88:53:e6:bb:4c:1f:e3:1c:74:db:a2:76:c9:
81:70:e0:c0:68:15:18:c2:fe:09:85:72:5e:80:94:
3f:6e:7a:31:d9:3a:ea:a8:a1:d4:7e:42:22:3f:20:
1d:b8:8f:fe:0c:7a:1c:d5:f5:de:16:f9:21:17:ac:
73:92:62:81:87:dd:5a:17:dc:b5:dc:76:7d:c4:51:
2a:18:a2:b9:e7:79:1b:8b:fe:a4:d5:73:c7:de:59:
bd:5f:d9:70:5e:af:50:e2:c4:18:6f:d6:05:bb:91:
fb:9d:69:2a:9f:12:0f:2c:31:30:b6:30:f4:11:aa:
ed:c4:65:2f:8d:1a:b1:e8:44:49:b0:f1:6e:bf:bc:
e4:68:b5:f4:cd:a7:34:7d:cd:ff:7e:52:07:4c:3b:
06:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4F:DF:91:5B:62:F0:36:FB:FB:CA:18:9F:69:B2:9E:3E:1B:DB:4E
X509v3 Authority Key Identifier:
keyid:64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:a8:72:74:67:c3:16:66:ae:21:d2:b8:99:bf:e8:4a:03:11:
2b:e8:e1:ea:e2:01:2e:fd:8e:6e:b1:b7:99:5c:c2:35:84:ac:
d7:8a:c1:b3:ce:aa:41:8a:86:fa:99:12:c3:25:07:77:e4:10:
4d:c7:e4:10:41:e3:8f:32:24:69:a1:fe:d4:e5:42:f1:c2:d6:
18:13:fb:14:e3:ae:ef:6d:a9:2a:33:13:5a:00:ce:bf:9f:50:
75:32:57:cb:ff:69:17:45:4b:52:e3:4f:b3:63:d3:56:11:22:
53:9f:c6:90:d5:f8:1d:f2:a1:69:f1:fe:bc:84:0c:8e:ae:6f:
23:5a:ba:6b:47:e2:e5:7c:96:d7:94:a3:68:08:d5:ad:35:8b:
65:1e:9e:93:b6:f0:01:50:4a:b0:e6:3d:7d:6e:51:1e:a1:7c:
1e:25:f5:73:d6:cb:7e:cb:8a:0f:6b:9b:5f:e4:4f:1e:21:d0:
3b:cb:65:be:2e:76:b6:59:92:98:f2:2a:cb:74:68:58:d2:d4:
d7:92:5a:cb:f5:de:80:2c:0d:8d:3a:50:69:82:52:df:96:e7:
f7:ee:8c:3a:80:36:e3:c0:94:d1:fe:d5:a4:c4:8a:98:cd:3a:
34:06:35:01:b6:9d:58:a0:00:41:9b:7c:8e:e3:c2:ce:a0:5e:
6b:08:36:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:58:23 2026 by rpki-client