
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
File: Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft (raw, json)
Hash identifier: YWL6oamH8FGv6MOW5MyanpI160iejNz5n/B+db1cbmQ=
Subject key identifier: 8B:BE:4E:51:2C:7F:52:B4:36:6A:A9:43:C2:BB:F6:2E:A7:40:BA:BF
Authority key identifier: 66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74
Certificate issuer: /CN=A911C812/serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574
Certificate serial: 0455
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
Manifest number: 0455
Signing time: Sun 20 Sep 2026 20:18:38 +0000
Manifest this update: Sun 20 Sep 2026 20:18:37 +0000
Manifest next update: Sun 27 Sep 2026 20:18:37 +0000
Files and hashes: 1: Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl (hash: xvTE7m2iQdfJBmH0ltpgLxG9sPxkpk0Lw75A9N2MzrA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl
rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:18:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1109 (0x455)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C812, serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574
Validity
Not Before: Sep 20 20:18:37 2026 GMT
Not After : Sep 27 20:18:37 2026 GMT
Subject: CN=6ab03f9d-3301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:68:26:0e:ed:e0:a0:b3:37:87:49:67:a5:9a:
88:cd:1c:54:24:4d:45:a3:92:de:97:8f:ed:81:bf:
19:c7:a4:3d:63:c6:47:8d:8c:16:03:9f:9f:8a:f7:
57:9e:70:ff:8a:73:4c:7f:75:7e:0f:2a:f1:71:71:
36:04:47:3a:ab:10:d9:1f:b1:62:ef:44:bc:74:71:
9a:4b:27:52:00:25:87:55:c3:c7:50:03:38:b4:4f:
3e:a3:df:ea:fb:98:ea:71:5b:f6:63:50:f4:76:56:
0e:99:ec:61:08:25:13:da:bf:0b:74:18:80:59:62:
15:32:71:18:5c:ce:40:15:47:44:13:40:d4:34:43:
5c:ae:d3:78:05:fa:22:b7:ea:d7:63:82:aa:20:9a:
07:01:6b:d1:8f:03:42:67:d7:fc:cb:81:12:1c:43:
d9:36:74:05:01:f3:c5:e8:e6:b8:b3:a5:1b:d1:25:
bd:10:c7:a4:06:55:5d:ae:ef:9f:f2:e7:78:98:b8:
f4:b1:93:35:fe:78:88:16:91:ca:14:e3:e4:67:f7:
9c:36:2e:31:23:da:94:e1:b7:1f:bb:f3:06:77:49:
cc:69:ed:76:2e:0a:0f:17:5d:37:dd:03:85:8b:0e:
87:e2:27:6c:3d:13:5d:d4:19:55:98:ae:0a:d8:17:
4f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BE:4E:51:2C:7F:52:B4:36:6A:A9:43:C2:BB:F6:2E:A7:40:BA:BF
X509v3 Authority Key Identifier:
keyid:66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:73:1a:35:a7:a5:c0:df:6f:29:b7:b3:24:59:ff:6e:d2:c2:
0b:4a:5d:f8:76:99:2b:82:21:af:11:c7:7a:db:46:01:fa:5c:
b2:83:9b:4f:97:33:31:f0:14:79:3b:ae:7b:fa:58:48:09:ab:
00:1d:6f:b9:a1:72:1e:af:eb:f9:51:89:66:b5:ae:29:ba:04:
50:eb:85:79:43:88:49:ad:6d:0b:2a:0d:1a:da:a4:74:86:c0:
f1:51:05:37:82:3b:5c:1d:ad:c6:31:7f:0e:a5:9d:c3:fc:1c:
e9:64:f4:50:d4:84:dd:0b:48:43:b9:91:85:ca:e4:18:87:6d:
f1:f1:3f:29:0b:58:a2:7a:68:f4:57:31:35:0b:a8:0b:4a:38:
76:2f:36:93:20:28:80:3a:bd:47:f6:80:c8:ff:36:d9:fb:a3:
bf:5c:ee:b2:5d:9b:8b:f8:de:ef:98:b4:72:0c:db:43:35:65:
a9:45:28:0a:68:b6:6a:86:7a:43:af:f8:0b:1e:bb:b9:38:3f:
f7:53:bc:3f:c9:44:16:77:95:6a:49:37:3b:ff:f4:01:3e:c3:
00:74:d8:8f:71:57:3d:63:2b:00:b8:b8:87:3f:96:f8:02:00:
d3:2d:bf:4d:64:72:85:96:d9:0a:5e:41:ab:72:71:00:2e:01:
06:9c:8a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:49:29 2026 by rpki-client