
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
File: -ZNXCqDVSW713ufpBjcOaPvcy4Q.mft (raw, json)
Hash identifier: xzDX4kStp035SK6Dp2h9JoP8NDDNb9u5LchqxapYoWI=
Subject key identifier: 46:DE:48:B4:BC:1B:FD:8F:5C:48:D7:79:B4:9A:7B:17:DF:DC:BD:28
Authority key identifier: F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84
Certificate issuer: /CN=A912359E/serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84
Certificate serial: 254D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
Manifest number: 253A
Signing time: Wed 14 Oct 2026 15:46:30 +0000
Manifest this update: Wed 14 Oct 2026 15:46:29 +0000
Manifest next update: Wed 21 Oct 2026 15:46:29 +0000
Files and hashes: 1: -ZNXCqDVSW713ufpBjcOaPvcy4Q.crl (hash: lEBa3d+yIR7Q9ED0F3BjpeaQz5M12l4a65r3/7ZVERc=)
2: B6A9D8EEB0F411E5BE86D757C4F9AE02.roa (hash: p8PtYpgOItBVMhVqBrQ+db64yM9ZewS6DCTfoLsZaro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl
rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 15:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9549 (0x254d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912359E, serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84
Validity
Not Before: Oct 14 15:46:29 2026 GMT
Not After : Oct 21 15:46:29 2026 GMT
Subject: CN=6acfa3d6-3760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d7:8f:53:5f:82:f7:a6:d6:51:02:88:28:13:
bd:27:5d:7d:37:82:1b:92:02:dc:22:3b:eb:bc:ed:
38:2f:33:d1:c7:03:23:e6:24:49:0b:a8:b9:92:58:
8b:41:ee:bc:d0:9f:e5:8e:c4:e6:bd:4d:fd:4e:ba:
5b:41:7d:98:44:dd:5c:43:37:8d:f1:d9:2b:65:bd:
b6:63:29:8b:35:57:bd:87:83:3c:f2:c3:0e:e0:a8:
bd:67:2c:eb:d9:8a:f1:a4:bd:dc:8d:e5:68:26:54:
cb:7d:42:38:de:4f:b3:6c:b2:9d:a2:eb:c9:df:77:
15:84:f4:ae:e2:0e:bd:84:2f:e0:5b:74:20:05:c7:
82:51:b2:53:98:d1:4e:96:c4:f2:77:87:2c:02:71:
16:71:83:5f:2f:a6:d8:55:a7:b7:f3:e3:8f:65:0a:
74:b8:00:7c:0f:62:f2:3a:c8:08:00:d2:5b:34:71:
54:42:a1:dd:4c:b1:4e:c4:ff:9c:d0:19:ca:61:88:
84:7c:be:73:74:93:1c:04:f3:c9:e9:82:ee:84:f6:
09:ea:33:73:24:f1:9f:61:1e:7c:86:59:30:bf:cb:
68:a9:79:fd:cb:d7:09:f1:ba:5b:70:22:45:4c:47:
31:49:b2:e7:4d:d2:c0:0b:60:04:09:64:73:dd:4d:
36:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DE:48:B4:BC:1B:FD:8F:5C:48:D7:79:B4:9A:7B:17:DF:DC:BD:28
X509v3 Authority Key Identifier:
keyid:F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:c3:7e:8e:cd:29:54:78:3e:94:1f:e6:83:7c:38:36:2e:8d:
6c:6b:c6:a9:40:d8:e1:5a:de:32:2d:28:62:a6:e2:d6:14:39:
40:88:3b:57:52:3f:da:62:d4:2d:a8:59:f5:08:fd:b2:ce:53:
36:52:c7:30:76:ed:b4:48:87:b6:2c:3c:e8:97:24:96:cb:a8:
ee:22:f4:ad:ad:a3:ae:34:98:80:fe:d4:91:ef:81:76:33:1e:
76:3b:e0:80:ed:3d:e0:3e:1e:08:dc:a9:95:6a:e2:26:e8:2b:
ba:a9:7a:03:ab:17:ea:a2:0a:54:68:65:a3:65:14:83:3b:99:
31:9b:56:dd:6e:38:6e:4d:b7:4c:5e:67:02:83:8e:2f:28:05:
1b:64:cd:0e:1e:fd:6a:a8:88:3b:be:74:20:8b:8d:7a:88:91:
c5:11:b3:b1:d9:0f:8a:cf:22:b6:ad:ff:7f:21:1e:35:e9:81:
ec:7e:a9:c7:59:fd:23:97:92:7a:6b:dc:54:29:5c:9d:f5:f7:
0d:74:8b:e5:25:89:a3:59:28:94:76:3c:b6:6e:eb:b2:f1:6f:
2c:dc:05:72:81:df:a1:d9:bd:c2:24:a8:7a:6c:7d:4f:aa:ad:
1c:4d:4f:ba:ca:ca:d4:b2:7d:9a:5a:48:aa:47:bd:8d:ad:0e:
fe:0b:4c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:28:34 2026 by rpki-client