
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
File: RzKsKGdyTfzuirIikX9q8r0Ojz8.mft (raw, json)
Hash identifier: OFc1HgZvekWJRdLeMQmoQ8zyCewvzUQHNaj7vWlGzQw=
Subject key identifier: A8:B1:4B:F4:5F:F0:91:A0:B5:A0:27:C5:F1:AB:70:78:03:53:C6:49
Authority key identifier: 47:32:AC:28:67:72:4D:FC:EE:8A:B2:22:91:7F:6A:F2:BD:0E:8F:3F
Certificate issuer: /CN=A9130915/serialNumber=4732AC2867724DFCEE8AB222917F6AF2BD0E8F3F
Certificate serial: C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
Manifest number: C4
Signing time: Fri 09 Oct 2026 07:29:27 +0000
Manifest this update: Fri 09 Oct 2026 07:29:26 +0000
Manifest next update: Fri 16 Oct 2026 07:29:26 +0000
Files and hashes: 1: RzKsKGdyTfzuirIikX9q8r0Ojz8.crl (hash: DCW11ndTW3DHCBf8wHZcg9YIYHYof8TG6lXgcDuRrzo=)
2: QKlY2qk3wyq97mdii7HAvqN6ae4.asa (hash: wPAhVkEsZHfP0Gam9zd2C5xJRpIz9eYqo9PqvM2pW2o=)
3: 80981C2A985211F0B8F76E80C4F9AE02.roa (hash: KZeGyK+XEJU2VjuaLIn3E2fbp7OCAvLZENE4Plyufvk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.crl
rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 07:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130915, serialNumber=4732AC2867724DFCEE8AB222917F6AF2BD0E8F3F
Validity
Not Before: Oct 9 07:29:26 2026 GMT
Not After : Oct 16 07:29:26 2026 GMT
Subject: CN=6ac897d7-3474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7d:ec:5c:09:38:55:47:df:1b:07:12:f9:6b:
3a:f3:b7:2d:79:e0:f4:c8:da:04:c7:a0:9c:e9:fb:
51:1b:24:c3:3d:04:f8:46:ed:71:2d:a9:3d:57:76:
82:ce:7f:dc:1a:45:d6:0d:03:8e:65:74:25:5c:73:
f7:75:98:3d:48:07:5e:2e:09:89:fe:f6:c2:00:a5:
8a:f2:1e:ff:4a:20:95:17:fa:8f:a3:fa:a6:fd:25:
ed:e1:b9:84:70:d4:8f:6e:29:69:dc:60:54:21:73:
00:ec:09:45:6d:12:32:65:ef:0e:5f:42:3d:2e:2f:
88:b0:be:2e:69:73:cb:03:d0:02:a7:ef:71:56:33:
1d:aa:9c:b5:c3:1c:95:d9:bd:fb:ee:45:c0:75:4e:
16:e8:c8:b2:9d:8d:03:ba:df:2c:e2:cf:fd:ba:63:
e2:c1:60:97:0e:11:5b:3e:f5:72:42:1b:8f:ad:85:
54:a4:c1:71:51:e0:27:95:b4:57:ed:c8:cb:94:e4:
ff:e3:d4:05:03:54:af:73:a4:fc:5d:da:3c:38:1e:
d4:16:4a:ed:b4:cf:dc:af:66:19:4c:de:d7:c7:c0:
ee:25:4f:f7:12:a3:c4:e5:24:8d:ae:82:09:20:7b:
72:4f:14:7e:1d:ca:73:40:64:79:65:fe:d4:34:01:
23:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B1:4B:F4:5F:F0:91:A0:B5:A0:27:C5:F1:AB:70:78:03:53:C6:49
X509v3 Authority Key Identifier:
keyid:47:32:AC:28:67:72:4D:FC:EE:8A:B2:22:91:7F:6A:F2:BD:0E:8F:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:20:55:0f:a1:f3:8a:50:7e:a0:ce:f8:aa:39:47:ec:12:30:
7e:74:e6:14:22:ee:20:ae:4a:3d:2b:aa:b3:e9:fb:85:c8:b3:
23:19:a8:67:82:e3:4d:b8:a3:d5:2b:09:13:fa:46:2e:0b:7f:
c9:08:d7:0d:66:63:7d:7b:56:7e:11:48:87:5d:49:95:c3:ae:
91:4f:dd:b9:db:d0:cc:89:0b:30:de:73:fa:ae:25:d5:bd:30:
10:6e:93:5e:d1:d2:c7:f8:74:df:50:1a:3c:27:bf:04:a2:5a:
40:4d:41:26:25:29:50:ab:86:bd:6c:97:72:36:43:2d:e9:dd:
1c:49:e7:97:fe:a8:4f:97:09:75:07:fe:79:eb:2c:93:61:cc:
5f:49:11:24:7e:05:e3:f4:12:1e:d4:a0:3c:8d:c0:0e:95:ba:
e3:18:4e:f7:ac:da:1a:b6:82:85:46:7d:89:8a:ff:95:ad:3d:
bb:49:29:4f:98:35:54:00:87:cf:b8:19:36:dc:fb:8f:7c:ad:
82:e5:fa:4f:06:76:33:a3:03:61:ad:67:56:45:d8:48:61:5e:
63:b5:dc:b2:6f:e9:f5:2b:98:8c:4b:a3:45:79:52:4b:81:ef:
43:4f:48:1f:14:73:80:d7:06:33:ef:8e:48:7b:9a:8b:f2:d8:
fe:49:1f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:17:35 2026 by rpki-client