
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft
File: 8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft (raw, json)
Hash identifier: PO6KDa9uSS0EI+qCFdYpFJS6T+C/LG2v/2G4Ybrc0FU=
Subject key identifier: 4E:60:42:C0:B5:EB:D6:DF:B5:55:3B:E5:A2:D9:2F:53:93:43:B0:09
Authority key identifier: F3:36:7D:74:44:83:99:C1:8E:F6:7C:7C:98:61:07:B8:14:B1:2D:64
Certificate issuer: /CN=A911F536/serialNumber=F3367D74448399C18EF67C7C986107B814B12D64
Certificate serial: 0142
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft
Manifest number: 0142
Signing time: Mon 21 Sep 2026 05:23:31 +0000
Manifest this update: Mon 21 Sep 2026 05:23:30 +0000
Manifest next update: Mon 28 Sep 2026 05:23:30 +0000
Files and hashes: 1: 8zZ9dESDmcGO9nx8mGEHuBSxLWQ.crl (hash: LmP5Eqd8203k01nkLAok4J4eCR9EGqpLds5+xZGtpcE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.crl
rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:23:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322 (0x142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F536, serialNumber=F3367D74448399C18EF67C7C986107B814B12D64
Validity
Not Before: Sep 21 05:23:30 2026 GMT
Not After : Sep 28 05:23:30 2026 GMT
Subject: CN=6ab0bf53-bb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0f:db:2a:d6:85:41:d2:de:c1:87:81:0a:03:
e2:55:cf:96:1b:0d:f2:63:e6:38:b8:f2:16:c0:0e:
28:4d:f0:00:27:78:ff:12:11:03:39:c5:3c:24:02:
fc:c7:0c:29:53:00:51:3d:18:27:cc:03:87:ef:22:
96:1e:f8:df:80:0b:54:20:03:e2:ce:d4:c7:f5:19:
e3:05:75:6f:33:72:6b:e7:c6:e9:16:66:9d:e3:6d:
63:4c:6f:10:4d:19:3b:ed:8e:26:6b:ea:c0:4e:a1:
36:81:73:9e:bf:1c:2b:43:dd:b7:61:74:50:67:aa:
0b:22:54:77:cc:90:a0:f3:99:cb:df:b7:ed:da:18:
a2:59:f7:db:b7:44:32:d1:86:56:e7:f2:78:d5:fa:
4e:40:9d:f2:c2:14:81:1f:c8:b8:94:4b:c8:ed:6a:
c5:a8:94:ac:2d:e2:87:1b:a3:be:8c:b9:da:1a:fd:
e8:7b:14:09:31:4f:c3:c9:66:1d:f5:bf:bb:8b:d2:
25:ee:cf:3f:0b:b8:8c:68:11:73:e1:ab:3e:5d:08:
0f:11:d6:3b:8c:a2:28:e9:14:dc:b1:79:d4:d6:5f:
1f:8a:d4:4e:1b:72:d9:0c:e2:f9:b5:4d:c1:f3:c6:
b5:b4:cb:c4:b3:ff:fc:a8:ed:1b:77:61:02:db:e9:
a4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:60:42:C0:B5:EB:D6:DF:B5:55:3B:E5:A2:D9:2F:53:93:43:B0:09
X509v3 Authority Key Identifier:
keyid:F3:36:7D:74:44:83:99:C1:8E:F6:7C:7C:98:61:07:B8:14:B1:2D:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:2c:db:0f:08:bb:b5:d1:df:29:89:c6:f6:3b:e4:dd:81:23:
f1:68:25:da:a5:fd:ca:00:35:8e:64:03:12:b1:cf:a8:30:8f:
e6:f6:37:8b:a4:e5:09:1e:56:98:76:c6:73:c0:90:39:46:1a:
3b:f6:98:94:c5:0e:90:33:76:fb:8a:82:0c:fa:79:e7:7e:8c:
28:3e:ab:d0:af:14:c1:d7:3a:3d:59:08:a6:75:e4:83:9d:e7:
4f:d5:23:3a:ce:96:6f:13:ba:ae:2c:c1:9d:7d:82:0b:ab:f0:
b5:b0:fb:07:af:f9:22:bc:67:ad:5b:11:20:f5:14:88:ae:a4:
c1:7d:7b:61:a4:2f:6b:c3:9c:5b:44:a9:26:83:23:ab:66:e9:
d7:7c:9c:cd:7b:7d:ea:10:a5:a8:81:14:07:37:fa:d3:18:be:
ac:cf:c1:2f:55:cb:17:59:fd:3a:57:27:71:49:7d:21:2b:40:
50:33:c6:e9:cc:6e:45:51:82:60:9f:93:ba:ff:ca:7c:f5:dc:
bb:77:0e:63:fa:f8:a2:e3:cc:12:9d:df:58:73:3e:1e:f6:4a:
68:d1:2b:1e:3c:9f:ae:dd:d4:e9:87:9e:22:00:a5:c3:18:f9:
59:de:ac:7f:d2:11:72:71:e2:e5:18:d7:c7:71:61:9b:57:a1:
a9:a1:46:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUY1MzYxMTAvBgNVBAUTKEYzMzY3RDc0NDQ4Mzk5QzE4RUY2N0M3Qzk4NjEwN0I4
MTRCMTJENjQwHhcNMjYwOTIxMDUyMzMwWhcNMjYwOTI4MDUyMzMwWjAYMRYwFAYD
VQQDEw02YWIwYmY1My1iYjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyA/bKtaFQdLewYeBCgPiVc+WGw3yY+Y4uPIWwA4oTfAAJ3j/EhEDOcU8JAL8
xwwpUwBRPRgnzAOH7yKWHvjfgAtUIAPiztTH9RnjBXVvM3Jr58bpFmad421jTG8Q
TRk77Y4ma+rATqE2gXOevxwrQ923YXRQZ6oLIlR3zJCg85nL37ft2hiiWffbt0Qy
0YZW5/J41fpOQJ3ywhSBH8i4lEvI7WrFqJSsLeKHG6O+jLnaGv3oexQJMU/DyWYd
9b+7i9Il7s8/C7iMaBFz4as+XQgPEdY7jKIo6RTcsXnU1l8fitROG3LZDOL5tU3B
88a1tMvEs//8qO0bd2EC2+mk2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE5gQsC1
69bftVU75aLZL1OTQ7AJMB8GA1UdIwQYMBaAFPM2fXREg5nBjvZ8fJhhB7gUsS1k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjUzNi9BMzA1RjRFNEM5
OUExMUVGQjRDRUVGMUVDNEY5QUUwMi84elo5ZEVTRG1jR085bng4bUdFSHVCU3hM
V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzh6WjlkRVNEbWNHTzlueDhtR0VIdUJTeExXUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjUzNi9BMzA1RjRFNEM5OUExMUVGQjRDRUVGMUVDNEY5QUUwMi84elo5ZEVTRG1j
R085bng4bUdFSHVCU3hMV1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASCzbDwi7tdHfKYnG9jvk3YEj8Wgl2qX9ygA1jmQDErHPqDCP5vY3i6TlCR5W
mHbGc8CQOUYaO/aYlMUOkDN2+4qCDPp5536MKD6r0K8Uwdc6PVkIpnXkg53nT9Uj
Os6WbxO6rizBnX2CC6vwtbD7B6/5IrxnrVsRIPUUiK6kwX17YaQva8OcW0SpJoMj
q2bp13yczXt96hClqIEUBzf60xi+rM/BL1XLF1n9OlcncUl9IStAUDPG6cxuRVGC
YJ+Tuv/KfPXcu3cOY/r4ouPMEp3fWHM+HvZKaNErHjyfrt3U6YeeIgClwxj5Wd6s
f9IRcnHi5RjXx3Fhm1ehqaFGcA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:33:26 2026 by rpki-client