
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
File: zEJAcHQQNjc16_bvsZT7Zw80X0I.mft (raw, json)
Hash identifier: YWrdr2Nr5KQ0P4BLO0ipBx9z2yyX19/noKJGAfEMTaA=
Subject key identifier: E6:23:A4:14:C1:A7:97:2B:B5:49:1B:CF:FB:79:FA:D7:63:F8:9D:5A
Authority key identifier: CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42
Certificate issuer: /CN=A9160AEE/serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
Certificate serial: DC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
Manifest number: CC
Signing time: Fri 25 Sep 2026 07:04:04 +0000
Manifest this update: Fri 25 Sep 2026 07:04:03 +0000
Manifest next update: Fri 02 Oct 2026 07:04:03 +0000
Files and hashes: 1: zEJAcHQQNjc16_bvsZT7Zw80X0I.crl (hash: grzND3zml4sJ9aO980N+sFsjLk9QuuM8I4seh+IIUHs=)
2: 6FBBA45AFD2711F0B1802E18426F56BC.roa (hash: InU5YhYgQdECTfOQlDj5F02bMyaCjuUJFEGGYk6O1Jc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl
rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160AEE, serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
Validity
Not Before: Sep 25 07:04:03 2026 GMT
Not After : Oct 2 07:04:03 2026 GMT
Subject: CN=6ab61ce3-5b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fa:d7:6d:e2:81:24:9d:aa:cc:0f:8d:38:aa:
56:cb:2e:f6:08:6c:39:bd:8b:6d:a9:f6:7d:25:3a:
fb:b1:ce:2d:f8:ae:55:af:ac:c2:83:1b:f7:58:78:
44:03:cd:d5:a5:b0:c8:02:b4:a0:1d:86:7c:16:79:
29:8c:01:42:ed:e9:2f:d6:69:d1:6e:a1:c3:32:9d:
da:6a:df:a1:e9:24:64:8e:e9:46:52:36:ad:26:e9:
7c:9e:77:4b:94:43:5c:44:1e:66:75:93:be:0f:b1:
81:f1:b3:97:9b:e9:fa:45:89:19:e5:c0:fc:8a:6e:
0a:67:2b:ff:2f:df:9b:72:1c:3a:32:b2:9e:1c:24:
df:41:8e:34:d6:f5:1b:e8:79:68:ad:b2:b6:dc:5b:
20:07:72:9c:39:e0:6d:1c:9e:66:83:de:42:0b:2b:
27:93:bf:3e:14:11:de:e0:63:ad:c3:54:08:17:b0:
b1:0c:7c:e3:e5:75:11:96:ef:bc:72:06:0c:30:1e:
8d:94:e6:e8:7f:73:c8:c0:68:93:ee:c0:f8:47:8f:
43:1c:37:ee:64:6f:a6:ac:06:65:3c:a1:2b:36:a6:
c7:3b:56:c6:a1:df:06:cc:ae:04:51:b0:ba:8e:3c:
1e:c2:0a:43:ad:67:64:a1:66:13:68:88:68:4f:45:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:23:A4:14:C1:A7:97:2B:B5:49:1B:CF:FB:79:FA:D7:63:F8:9D:5A
X509v3 Authority Key Identifier:
keyid:CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:9b:75:6b:1e:fd:4c:cc:1f:61:7c:f4:9c:74:13:85:49:7b:
0e:12:15:2e:6d:52:55:5e:cb:e7:c0:0a:94:0b:2e:d1:91:2b:
dc:fe:34:04:98:05:fa:b3:7e:c6:20:de:4a:58:54:9c:48:43:
bf:2c:fc:c1:57:d1:e3:3b:42:6e:c0:ff:39:39:97:6a:d8:f6:
ec:ae:75:ca:92:03:11:ea:f4:93:57:59:b8:f0:49:2d:03:b1:
f6:9d:ef:5a:2e:70:4c:26:7a:c3:1e:03:63:3a:49:b0:78:49:
17:56:a7:d3:9c:0f:1e:82:ee:5a:4e:a9:86:fe:27:90:7b:ab:
be:bb:8e:1d:4d:1d:28:a6:8c:3c:cf:e7:46:8e:d3:38:48:58:
8a:6d:7d:25:c5:a0:3c:8e:04:a1:e0:ce:bb:2c:06:e8:c7:b7:
9a:33:0d:a5:b7:17:dc:93:ea:4a:b0:89:8d:b0:2f:a4:a6:d5:
33:69:d2:0e:57:1c:66:7b:cd:fa:d4:08:b7:ab:44:78:40:76:
48:e6:1d:16:ca:7a:7d:73:78:b4:e5:b0:f7:5a:b6:48:69:81:
68:5e:21:33:0f:c7:64:a4:4d:20:8e:17:d8:22:32:57:df:e5:
66:5f:8a:ce:c2:9c:95:46:3e:2b:0b:2e:9a:70:f3:97:6d:ae:
26:7a:b1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:18:48 2026 by rpki-client