
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft
File: Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft (raw, json)
Hash identifier: cUNd9DLAIfY83FsToFzDyJ33KWWz0uzm7ykeUGibX7E=
Subject key identifier: EF:72:79:AE:92:C6:48:14:0B:A8:F6:4C:49:1F:E7:CE:12:69:62:30
Authority key identifier: 67:CB:11:45:A8:9C:D8:B6:7A:ED:9E:4E:52:87:03:F5:5C:15:21:B3
Certificate issuer: /CN=A9169E72/serialNumber=67CB1145A89CD8B67AED9E4E528703F55C1521B3
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8sRRaic2LZ67Z5OUocD9VwVIbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft
Manifest number: 4D
Signing time: Mon 21 Sep 2026 08:17:44 +0000
Manifest this update: Mon 21 Sep 2026 08:17:44 +0000
Manifest next update: Mon 28 Sep 2026 08:17:44 +0000
Files and hashes: 1: Z8sRRaic2LZ67Z5OUocD9VwVIbM.crl (hash: CtgNsGgMl70XvpxhE2SUMoANt1TMZ/pBS2NYXe0kl5M=)
2: 2EC97C2C3EC911F18D9C5FE1AC833773.roa (hash: EvUSWLNIQOqqmidD5PHrkwd8fAUpWrCITwdT6HKeSIE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.crl
rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8sRRaic2LZ67Z5OUocD9VwVIbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:17:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169E72, serialNumber=67CB1145A89CD8B67AED9E4E528703F55C1521B3
Validity
Not Before: Sep 21 08:17:44 2026 GMT
Not After : Sep 28 08:17:44 2026 GMT
Subject: CN=6ab0e828-f596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e1:db:ca:d8:2c:77:34:00:63:65:04:0f:25:
a8:30:f5:13:c2:21:e5:f2:10:77:3e:51:56:d7:ba:
0b:22:30:9a:3f:1f:98:74:0c:fb:21:d9:cd:a1:d1:
f0:59:f9:98:74:60:fc:5f:b3:c9:8f:87:6c:31:b0:
76:36:5d:f1:54:42:10:7f:11:50:8c:25:f7:18:ee:
b8:b4:56:8a:82:30:0b:b3:ae:9e:bd:b5:59:d2:6f:
ea:fb:c2:fe:6f:2b:d9:ed:fd:40:c2:f1:bb:19:1e:
7d:a9:4c:b7:b9:9d:20:29:a9:aa:04:6b:d4:c3:52:
ab:57:3e:67:7e:95:87:c6:4d:5b:83:f1:0b:98:1e:
cc:97:78:7f:40:cb:b5:14:d9:74:b2:f1:9b:03:23:
db:5d:18:e6:8b:d4:58:92:00:12:c6:fe:fc:ec:53:
11:01:88:32:c2:52:aa:b4:a7:41:38:2e:c4:15:e1:
c5:d5:c6:03:d6:07:00:78:6b:ff:6d:09:8f:c1:43:
14:0e:3d:a5:07:b2:d8:16:02:2f:04:b6:83:30:77:
c0:1f:2b:91:14:fe:43:42:44:ee:c5:6a:fc:0d:2e:
65:ad:9d:5a:55:38:4f:7d:d4:3e:32:14:f3:2f:26:
ce:5b:94:11:8c:f9:bb:32:cf:cd:ed:d6:83:41:77:
65:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:72:79:AE:92:C6:48:14:0B:A8:F6:4C:49:1F:E7:CE:12:69:62:30
X509v3 Authority Key Identifier:
keyid:67:CB:11:45:A8:9C:D8:B6:7A:ED:9E:4E:52:87:03:F5:5C:15:21:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8sRRaic2LZ67Z5OUocD9VwVIbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:15:92:66:a8:b6:84:0c:40:1e:35:22:ef:d0:71:be:ab:32:
ea:04:0c:c1:ce:4d:d7:45:d3:a7:b7:19:ec:51:9a:68:39:1d:
84:1e:6f:af:fb:03:db:73:bc:6a:3f:5a:df:e4:2b:50:92:1a:
05:9a:7f:23:9f:a6:5b:91:ed:fb:b1:2d:ca:ad:18:63:34:72:
02:e7:f6:9c:22:15:a7:8b:ac:c7:8b:09:97:f4:bd:55:5b:62:
d4:21:1a:7c:21:12:7d:9c:4c:b7:eb:22:fb:c2:f1:d1:a7:11:
c7:b5:ab:83:25:a2:0a:c8:d5:96:73:e5:58:9a:68:b9:d2:62:
8e:26:38:6c:e9:fd:84:33:8a:f1:7d:28:be:54:6d:db:47:9a:
73:8e:3b:50:a6:cb:fb:6f:d9:b6:3a:36:35:95:14:62:05:a8:
28:50:cc:92:51:f8:1d:70:52:9a:15:83:a4:58:c5:42:ec:68:
02:b9:a7:59:4e:16:16:a8:f6:c6:10:15:44:4f:84:9c:aa:c5:
b0:f3:a7:e9:72:23:eb:f3:3e:13:4a:5c:4f:fb:b0:e5:5b:05:
e4:ca:1e:ad:0a:bd:a2:0e:16:ae:ac:0b:a7:30:53:8b:78:8d:
4e:bd:d9:9a:26:e9:a3:ae:75:eb:06:e8:e3:c6:ea:ab:a8:36:
90:74:d6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:56:55 2026 by rpki-client