
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
File: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft (raw, json)
Hash identifier: Ni9V35KluVNZNrRK62OmF4PfjuBJMcQDIjyJG5D90l8=
Subject key identifier: D4:49:BB:16:FC:6E:CE:78:3F:A2:94:A7:D2:38:6A:57:CF:B5:C2:03
Authority key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86
Certificate issuer: /CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986
Certificate serial: 02B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
Manifest number: 0289
Signing time: Sun 27 Sep 2026 02:18:17 +0000
Manifest this update: Sun 27 Sep 2026 02:18:17 +0000
Manifest next update: Sun 04 Oct 2026 02:18:17 +0000
Files and hashes: 1: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl (hash: pQ7zD2ABxdqjGzTiueuf3uahfeA9MNz+CoC/Eqbeyt8=)
2: 6CE6E15ECEF311EEBCE7894DC4F9AE02.roa (hash: UaAm3ns+UzSlENWFg3alL8LgQQM37DkVyV1vadmtNwg=)
3: 63DC5AA6C67611EEB1126C70C4F9AE02.roa (hash: tzLUCAxcW3rpxPK1kY7IUqcMJWiwQOOzumNiMYyBy+Y=)
4: 6ABFFBC6F53811EDBAE7E351C4F9AE02.roa (hash: f58bvx3dukaGpN5ndoezdAfl/VXBXL0ui+Vo9iVwwM8=)
5: 118AB342249511EFBF275B73C4F9AE02.roa (hash: NqwTwG+Agr5XJi4bwI9im7xWQxdq8IuBPwpMhYcCze0=)
6: 02D36C86F50211ED8A235C4EC4F9AE02.roa (hash: B+OeWoqQTwfm38iUF7sb5sL9h1ZJ6wXXxhu4Wl/m0EM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl
rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 02:18:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 688 (0x2b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121836, serialNumber=66B214D11C7F961A95C4256703428E93CBA72986
Validity
Not Before: Sep 27 02:18:17 2026 GMT
Not After : Oct 4 02:18:17 2026 GMT
Subject: CN=6ab87ce9-0586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e8:54:ff:61:b0:f8:75:c2:c3:46:b8:52:29:
70:92:d1:bf:b9:bb:c7:ef:dc:3d:30:23:89:ba:31:
34:64:38:f1:32:3b:76:45:ac:2a:e2:aa:f4:e6:f0:
cf:fa:ee:b4:ad:9c:7e:b0:19:f1:cf:46:1e:10:c9:
0d:ec:2d:70:5f:ad:7f:f8:cd:a7:53:fa:9c:f6:a3:
a0:24:11:f4:2f:27:11:68:24:06:fe:4a:18:60:45:
28:4a:3c:d6:d3:90:ac:33:d8:83:c0:37:4e:33:a5:
0c:26:ad:3f:3b:d0:72:9a:0c:c4:eb:64:48:9c:c1:
0e:54:2b:e8:3d:c9:43:a7:aa:33:26:fc:2f:10:7b:
5e:c4:47:da:d1:93:14:a8:0e:7e:24:be:b1:00:f1:
a6:cd:f6:11:2e:61:41:07:dd:1c:e0:a9:93:08:d3:
19:82:4a:77:6f:19:e9:1f:27:3f:54:ad:83:40:bd:
5c:2c:71:22:3f:d0:b0:95:ba:ab:a2:56:16:42:0d:
2e:96:e2:eb:ef:bb:9b:6f:66:17:89:7c:ca:ae:9c:
17:7a:a9:ce:47:af:62:1c:2a:67:39:cb:f3:84:67:
aa:2b:c4:be:4c:f5:5c:6a:93:6a:dd:e8:2e:a3:b9:
0b:7b:cb:86:93:61:f2:9f:dd:70:80:34:f3:bf:1b:
d3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:49:BB:16:FC:6E:CE:78:3F:A2:94:A7:D2:38:6A:57:CF:B5:C2:03
X509v3 Authority Key Identifier:
keyid:66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:6a:21:ea:4c:d7:2e:c0:18:c0:4d:63:e1:6d:df:7b:7d:74:
0b:c9:1d:10:73:2b:41:47:8f:16:b8:29:1a:dd:42:d5:cc:b3:
5e:b1:c1:46:6c:20:c9:89:05:42:8f:2d:82:bc:ad:1e:bb:34:
16:02:10:40:5e:a9:0a:53:15:79:2a:9b:07:c1:8a:d5:5a:ec:
1e:5c:4e:9e:17:e2:a3:80:b3:46:ae:61:45:9c:18:d7:fa:ff:
29:b3:80:3e:37:e8:86:82:48:19:07:6e:a2:a6:4e:8b:ac:73:
d6:8f:d7:c5:3e:f9:3e:2e:b9:69:c1:dc:6f:6c:5c:eb:34:3e:
1c:1d:39:d1:40:8b:7d:07:28:11:c3:4b:09:03:53:2f:aa:3b:
ea:79:81:a8:5e:6c:18:fe:74:5c:1f:44:65:fd:1e:d0:17:63:
bd:70:2b:15:a9:a2:07:45:b4:c6:97:69:2c:44:17:71:51:98:
8b:c8:39:3c:d6:59:61:81:d8:2b:3d:7a:bf:b6:98:36:4d:1e:
fa:0a:a1:2c:d3:85:9b:bd:5b:5a:40:a5:51:d2:88:09:8d:3d:
51:7f:35:9d:d3:33:41:0a:68:c1:9c:16:cc:9a:6b:02:ac:0a:
af:7f:03:92:de:39:45:64:bc:e7:52:2f:d8:7c:46:71:ec:bc:
7b:99:45:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:51:34 2026 by rpki-client