
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft
File: z3nGX0tVAQ-yXObEW4yRnbCToy0.mft (raw, json)
Hash identifier: 0BsKvnaCQZQzVxG84J73f4ncCbITwYZYx4FAKxQzP08=
Subject key identifier: EB:72:98:58:45:50:1A:06:22:02:88:4F:8B:44:26:58:6A:20:C8:7C
Authority key identifier: CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D
Certificate issuer: /CN=A912E87E/serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D
Certificate serial: 0181
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft
Manifest number: 0173
Signing time: Sat 17 Oct 2026 05:34:21 +0000
Manifest this update: Sat 17 Oct 2026 05:34:21 +0000
Manifest next update: Sat 24 Oct 2026 05:34:21 +0000
Files and hashes: 1: z3nGX0tVAQ-yXObEW4yRnbCToy0.crl (hash: K2e2WPSwUXFZfNKTHQS1zTv5K5wRL+4nVlS5a5DUqAw=)
2: 9FC2AD1A7B0811F1BE7AA8BE81A30FBC.roa (hash: dvCtuuZOukYSqlh4ugbWrxgCAoJu1f7EJvhUOlYHnJ0=)
3: A48892E4DE4A11EFACE66748C4F9AE02.roa (hash: 6I64utdnK0TaFg9y+W+RqybL90K1jeQS5liIOPne5so=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl
rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 05:34:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E87E, serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D
Validity
Not Before: Oct 17 05:34:21 2026 GMT
Not After : Oct 24 05:34:21 2026 GMT
Subject: CN=6ad308dd-ba6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5a:f5:b7:90:ac:bc:12:67:31:7a:a4:3f:68:
2c:35:3c:71:8a:35:6a:45:8c:a6:46:6e:3a:a7:86:
bb:a4:8b:89:32:82:d3:4e:e9:38:18:cd:32:61:7f:
99:c0:68:8b:a9:32:e5:e1:93:2f:20:3b:5b:14:68:
20:24:51:10:8b:bc:29:0b:90:e0:36:0d:cd:27:8a:
91:2b:75:86:73:44:d3:24:1e:78:ca:20:6e:85:a2:
43:e3:ea:16:61:5d:b7:c3:d6:c7:ff:11:47:d0:28:
49:5e:73:21:8d:8e:ea:cf:75:59:75:30:68:aa:f6:
34:0f:55:31:b5:a4:5b:99:3e:0b:a6:b7:1e:24:94:
b6:08:e7:9a:00:f6:db:2e:a5:c8:a4:33:3b:52:51:
eb:d2:31:3b:8c:e4:eb:53:a8:c6:ca:a7:7c:91:ef:
9d:60:4a:23:57:a1:44:bd:a2:64:da:26:59:23:5e:
aa:ad:9b:bd:01:1a:f0:71:d1:3e:dc:a9:dd:8b:b3:
df:85:d6:64:00:48:81:33:bb:b2:5d:57:b9:83:f1:
4a:15:c3:42:0c:6b:cd:2e:c1:ed:9a:ab:d9:bb:72:
e9:20:15:b6:d7:15:70:f8:03:15:19:5d:c4:d5:9b:
26:4b:cb:18:ab:33:1d:93:91:3a:7f:3e:1c:9e:60:
7d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:72:98:58:45:50:1A:06:22:02:88:4F:8B:44:26:58:6A:20:C8:7C
X509v3 Authority Key Identifier:
keyid:CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:92:f4:44:68:2b:84:97:d2:ef:86:a6:ba:2d:fd:64:af:c8:
21:5a:13:e9:55:9a:36:06:cf:3d:4d:05:94:56:f5:39:4e:41:
fe:2d:6b:4c:ce:22:f0:2d:a7:54:a2:57:e4:19:98:5d:61:56:
92:6a:58:aa:64:eb:95:43:55:15:fe:45:bf:2b:41:77:23:26:
f0:2a:6b:05:08:52:94:5f:dc:64:3c:8f:d9:0c:f7:f8:b4:89:
60:c7:4f:19:b8:16:0c:a4:ea:f6:02:5f:8a:50:5d:5d:8c:ce:
be:83:c1:4d:b3:04:44:26:66:01:37:3b:4a:5b:7e:15:dd:ab:
61:7e:3a:c0:1a:5a:07:0a:bb:77:de:bd:49:22:ae:20:e7:e3:
09:d0:a8:d3:f1:ac:a7:45:cf:5c:2b:d9:a4:cc:05:c3:45:bf:
c6:fc:d9:e5:f5:b7:6f:d1:39:ff:8d:b1:e9:cb:be:5d:26:cf:
c3:48:ad:93:a3:20:cb:f6:f9:2a:ff:f8:9b:cb:05:fb:dd:52:
56:5a:38:13:a2:8d:e2:fb:fd:05:0a:50:06:da:e9:a1:db:78:
00:1c:f8:15:ec:9d:a9:60:c2:9f:ac:98:f1:16:74:66:09:12:
6f:dc:c3:0c:7a:fb:b1:4a:28:7d:e2:b7:02:c6:76:5d:c0:20:
cc:75:ba:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 08:56:01 2026 by rpki-client