
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
File: zLjgj5mQp1Ux6TatsG26yqcxtVI.mft (raw, json)
Hash identifier: dsUcgeh9hm+IPhs9UKRhvU2kF0HNX43C+g9948fTP5c=
Subject key identifier: 25:42:B5:DD:2D:DF:F1:83:01:E7:7A:F6:8A:24:8B:38:A2:3A:E0:A5
Authority key identifier: CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52
Certificate issuer: /CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
Certificate serial: 01F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
Manifest number: 01EE
Signing time: Sun 27 Sep 2026 03:54:30 +0000
Manifest this update: Sun 27 Sep 2026 03:54:29 +0000
Manifest next update: Sun 04 Oct 2026 03:54:29 +0000
Files and hashes: 1: zLjgj5mQp1Ux6TatsG26yqcxtVI.crl (hash: iRAzhcPwBSX3XmQTsCVe1XAEM4pzb7XbNjRnBhmcV2E=)
2: 654E27420CA311F0A866C650C4F9AE02.roa (hash: eRA3ggdDb9SZ/usM83jI/rG8aFaHS14k+X9wZnX4XR0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl
rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 03:54:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503 (0x1f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91364F5, serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
Validity
Not Before: Sep 27 03:54:29 2026 GMT
Not After : Oct 4 03:54:29 2026 GMT
Subject: CN=6ab89375-70a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:61:c8:63:66:ef:e9:8a:ab:7c:a8:9d:2b:71:
97:ac:fe:a3:22:2f:6f:b7:ab:76:79:58:cd:b0:eb:
00:8d:a1:14:21:bb:bb:94:52:82:a3:17:39:1b:1a:
81:d8:73:42:31:2b:47:a0:79:06:8a:36:6a:68:d3:
d0:cf:23:db:31:e0:20:f3:12:e9:f4:9e:36:b6:97:
14:e0:73:96:53:d3:05:24:70:bf:fa:73:41:fd:c8:
50:a1:e4:24:8b:42:39:6e:ca:15:01:b3:37:89:79:
34:53:df:2d:e9:24:e6:53:fa:f4:51:22:b0:dc:5f:
8d:10:8f:de:23:98:85:06:6e:e0:bf:08:01:18:0c:
a3:2e:c0:85:c3:3e:d5:ab:de:42:92:4b:dc:e8:12:
6c:60:05:1b:2a:3a:90:9b:23:5d:38:4d:85:20:d4:
1a:0a:e7:9f:14:7e:1d:4a:81:aa:39:8d:fa:e9:8b:
0a:51:36:c2:e2:41:75:6a:fc:ab:5d:b2:db:e5:22:
6b:54:d3:41:f4:21:5b:1c:33:41:78:a1:09:b4:6b:
a6:e9:be:88:e7:ca:97:d8:de:10:98:e9:6a:06:14:
db:82:23:2d:86:5d:9a:d6:d8:e9:61:72:0c:82:22:
eb:3d:95:47:76:ed:bc:bf:b6:4b:f4:29:30:ec:b6:
7f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:42:B5:DD:2D:DF:F1:83:01:E7:7A:F6:8A:24:8B:38:A2:3A:E0:A5
X509v3 Authority Key Identifier:
keyid:CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:67:c0:bc:8f:53:b0:41:bb:af:37:31:22:bc:42:5d:87:25:
5d:f5:47:37:33:b5:a8:23:7a:a4:1d:34:8c:3d:19:48:10:0f:
89:e9:31:10:ce:ec:52:13:b1:17:a3:57:f4:58:5a:9a:a7:a8:
7f:89:b8:ac:8a:7c:29:b9:6c:db:82:a5:58:21:96:83:af:27:
14:d3:f9:dc:d7:58:22:6f:7e:6a:da:77:fe:57:0c:06:25:bf:
b3:b1:f0:48:65:f5:92:f4:77:7a:12:de:78:1a:3b:2c:03:73:
c8:f3:33:12:79:6e:70:e5:38:a3:a0:5d:ce:af:0a:68:aa:8f:
af:d8:88:14:f8:4c:91:46:61:fa:f4:ab:fc:5c:6e:b9:2c:b4:
4a:73:2e:56:b5:a5:ac:c7:99:a5:a6:03:bf:9a:31:36:7d:37:
3e:ce:b7:b9:36:b8:67:be:92:b3:9b:e0:61:02:ce:02:f7:ed:
85:7a:17:9d:3a:46:b4:88:77:45:7d:23:f9:2b:c5:36:ee:a7:
3d:b0:09:85:f3:eb:01:45:2e:3a:f4:f6:79:7c:28:33:40:5d:
7d:b9:69:d7:f0:15:19:73:77:45:21:5b:42:4d:35:f2:8f:5d:
e2:52:15:29:71:f2:8f:35:06:fb:91:0c:a9:a8:f3:5e:38:ec:
dc:c5:f6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 22:13:28 2026 by rpki-client