
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
File: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft (raw, json)
Hash identifier: t6r9Z9S2tkMM40t0niDtND+IeraAW4Pn4C8aFy6zwik=
Subject key identifier: E1:11:F1:0C:F9:34:D5:FB:88:48:F0:28:B9:5F:BD:18:16:6D:27:A4
Authority key identifier: FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8
Certificate issuer: /CN=A914A8CB/serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8
Certificate serial: 1C22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
Manifest number: 1C07
Signing time: Sun 20 Sep 2026 16:11:30 +0000
Manifest this update: Sun 20 Sep 2026 16:11:29 +0000
Manifest next update: Sun 27 Sep 2026 16:11:29 +0000
Files and hashes: 1: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl (hash: rOb67iBxNiKfZgXzDonXAp6/4S7lKFw1trh50h7kvAw=)
2: F0B38A8A86EF11F19E006003A7EE528E.roa (hash: G3VxTx/jbbPR89QIwxZ1667QlQMt/4ZUfbWGMqQ8W9w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl
rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 16:11:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7202 (0x1c22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A8CB, serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8
Validity
Not Before: Sep 20 16:11:29 2026 GMT
Not After : Sep 27 16:11:29 2026 GMT
Subject: CN=6ab005b2-e0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:aa:76:ca:05:1b:2e:1a:15:ea:89:b3:81:
84:8b:25:51:42:64:a2:d7:ea:ad:63:05:1a:c7:af:
ea:ce:47:a5:38:99:30:5b:70:a9:63:96:06:36:b0:
99:cb:a8:38:1d:5a:dd:1f:d1:88:f2:35:7a:2c:7b:
59:15:42:47:b5:e3:f8:84:a4:9c:a9:be:3a:27:f5:
04:0a:3e:5e:6e:bd:70:f9:6b:9d:80:dc:f7:2f:65:
eb:cc:88:af:6f:55:c7:94:11:46:18:23:33:09:72:
08:a2:2f:ef:81:38:74:86:a8:d1:db:76:ae:41:e1:
b9:b9:ce:2f:95:0f:6d:a5:15:38:59:be:55:be:fb:
76:70:ed:ce:a1:ca:25:b7:88:c7:fa:19:19:32:74:
73:b6:23:a1:df:32:85:42:be:c7:20:c8:07:b1:11:
dd:03:8d:c6:d0:98:f4:8a:de:85:c9:f0:98:3e:e2:
6c:cd:ae:2e:a9:38:3d:b8:10:6d:ee:0f:c8:a2:56:
29:ef:bb:52:6a:1c:ce:92:b1:fd:b3:f4:c9:2d:ed:
7e:f4:e2:c9:fb:6b:85:f9:13:a1:0a:2e:45:23:8c:
b5:63:76:67:fb:86:a5:50:48:d5:fb:f7:5d:e7:28:
37:73:4b:01:94:44:6a:17:c6:d6:30:1f:b3:8c:9c:
8d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:11:F1:0C:F9:34:D5:FB:88:48:F0:28:B9:5F:BD:18:16:6D:27:A4
X509v3 Authority Key Identifier:
keyid:FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3f:d6:0d:a5:b3:fb:b4:e1:3f:67:3b:9f:0a:5f:07:78:d0:
01:c9:ef:9b:e5:3b:5a:f5:0c:63:9b:b0:44:5f:10:7e:d6:c0:
e0:aa:a8:9f:92:44:5f:34:32:55:72:9f:d4:a9:43:20:ab:db:
18:b4:14:17:0b:c4:b5:6d:72:56:1f:65:1f:7e:d4:5e:90:43:
51:60:86:60:8b:b0:67:c2:22:90:c3:28:d7:96:63:b0:a6:b1:
71:6c:67:c6:3b:f0:8f:9f:c2:f9:be:d3:76:68:5a:40:a8:fb:
75:67:d8:b1:ee:ab:2c:94:c4:c1:e9:15:f8:da:8b:7b:8e:06:
0a:b8:40:f2:a1:c3:7d:c6:70:45:a5:9b:18:ab:dd:c3:54:dd:
f8:18:f0:e3:80:7f:39:4b:4b:03:8c:7d:66:87:9a:46:70:ac:
5b:ba:4a:0d:73:c9:d9:f4:11:cd:30:95:3b:6a:b8:7f:ff:dc:
8d:87:e4:63:0b:b0:d1:05:e2:a3:2a:09:53:27:e0:bc:50:b8:
c2:84:4c:e5:56:4c:2a:2e:eb:6d:18:1a:19:df:e4:9c:bb:2e:
21:21:fa:70:27:6a:9a:ff:47:bb:1b:8b:be:ec:35:d5:0c:c5:
40:b2:f5:ec:e2:8b:54:38:3d:b3:c8:6d:d4:cf:9f:97:0e:fe:
2a:12:81:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:05:23 2026 by rpki-client