
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
File: znNgvRqU6JF702ckM_gh7HgKjSg.mft (raw, json)
Hash identifier: Og5lkLdPAKVHVLmmC2/Lm7KUHJ379iAkx4PGSglE49c=
Subject key identifier: EE:47:79:ED:31:4A:46:74:E7:B2:FC:02:4D:6A:F2:03:0C:81:13:88
Authority key identifier: CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28
Certificate issuer: /CN=A915E1F9/serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28
Certificate serial: CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
Manifest number: CB
Signing time: Wed 07 Oct 2026 07:15:45 +0000
Manifest this update: Wed 07 Oct 2026 07:15:45 +0000
Manifest next update: Wed 14 Oct 2026 07:15:45 +0000
Files and hashes: 1: znNgvRqU6JF702ckM_gh7HgKjSg.crl (hash: Sqd5VRj9/rYiMb2/qB8AFqJyzMGYDEcNbhxsFD8tV50=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl
rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 07:15:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E1F9, serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28
Validity
Not Before: Oct 7 07:15:45 2026 GMT
Not After : Oct 14 07:15:45 2026 GMT
Subject: CN=6ac5f1a1-19c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:99:c4:cd:90:b4:2f:3c:51:de:c0:e5:4d:76:
ff:51:30:af:2e:63:ea:f4:61:df:80:0a:b8:b2:97:
70:83:bc:3b:21:37:fa:4d:60:2e:a4:6b:95:1a:a9:
4a:01:52:84:46:fe:f7:27:76:1b:63:a6:e2:98:22:
12:1d:2f:a2:95:12:4e:db:d6:9f:f6:bf:a5:27:b4:
db:51:85:c1:13:e8:db:72:ee:13:e2:c9:0e:cc:15:
cb:e4:86:24:b2:29:39:c0:dc:f3:f5:04:47:93:5b:
b2:46:0c:a2:ea:c6:32:c1:5a:d6:0e:5c:59:a3:6a:
c2:a8:ba:41:c7:f5:b4:b4:53:e9:26:76:62:79:16:
54:2b:a5:1a:8f:f0:84:12:f6:50:79:f8:32:a2:8f:
b0:4f:b8:98:81:26:46:a5:b5:b3:05:49:d8:90:1f:
e7:58:6c:25:72:59:a5:00:94:e4:cc:54:a2:e9:1a:
74:f1:d9:46:d9:49:fc:42:39:0e:44:01:00:48:1f:
25:39:01:e4:09:47:ee:9a:4d:66:61:18:0d:a6:3d:
56:20:6f:48:2b:f0:3c:53:6c:45:c5:3b:72:b6:52:
d4:d6:14:60:5a:ec:e0:47:c9:81:fc:42:7d:45:48:
83:d5:e4:b4:e0:d9:1a:b2:b3:cd:d9:16:1b:49:ae:
8b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:47:79:ED:31:4A:46:74:E7:B2:FC:02:4D:6A:F2:03:0C:81:13:88
X509v3 Authority Key Identifier:
keyid:CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:7b:2f:dd:02:3b:b6:a3:82:92:f0:ff:79:3f:02:39:38:3c:
67:ba:83:41:71:c8:9a:bd:4b:b7:94:a7:4f:97:c6:c9:c7:6d:
54:94:55:6f:a6:3c:f1:d9:c3:30:cf:3f:45:bd:38:64:bd:d2:
84:17:d6:ee:a7:ce:e3:e9:c6:4b:50:82:26:58:02:00:10:81:
3e:0b:58:4e:45:37:79:fd:cb:e5:1a:e5:f9:89:6a:39:f8:04:
fd:15:2f:36:e4:55:ca:b3:17:e7:cd:55:bb:eb:b8:5b:37:05:
c3:84:c2:bd:d5:f4:b8:9d:63:b8:b1:95:e9:43:7a:bf:36:eb:
49:18:6b:6b:70:0a:bb:6c:ac:86:6f:64:82:18:af:52:44:79:
4c:c9:e2:fc:a9:e5:87:14:03:df:9f:80:31:1a:75:fa:76:88:
ea:31:9c:75:87:a9:c4:59:6b:f3:12:4c:8f:2f:1f:f1:3b:62:
aa:7c:f5:2c:98:ed:f9:03:4f:a6:be:64:5e:82:ad:f0:c1:fe:
f7:56:d9:97:8f:98:89:42:5a:e2:c5:f0:60:e8:47:6b:1f:b9:
04:f5:39:dd:34:61:28:71:1a:e3:be:cb:f3:af:85:f8:48:31:
e4:a4:c4:36:a7:fa:0f:73:e2:c7:88:a8:71:b0:93:83:47:71:
e2:4f:1c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:56:28 2026 by rpki-client