
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
File: zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft (raw, json)
Hash identifier: dW09O49f/7P/jv5lOK7NDVKeIxcHZdzWFQB38xOLXDc=
Subject key identifier: 3F:D8:E4:C7:3F:60:7C:E4:A8:E5:9F:13:26:CA:97:03:9B:6E:5F:F5
Authority key identifier: CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4
Certificate issuer: /CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
Certificate serial: 0CE9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
Manifest number: 0CDE
Signing time: Mon 12 Oct 2026 18:34:05 +0000
Manifest this update: Mon 12 Oct 2026 18:34:05 +0000
Manifest next update: Mon 19 Oct 2026 18:34:05 +0000
Files and hashes: 1: zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl (hash: 2oRxUPuBHoYivTSBlkgeiAWtBtCykOvnVibpacebCY8=)
2: 81C5BFF8192811EA9B88D87DC4F9AE02.roa (hash: MlGQE6i/naYke0ZwsPc47N+NQobrGaPsNs00jN9E6oo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl
rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 18:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3305 (0xce9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EBCB, serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
Validity
Not Before: Oct 12 18:34:05 2026 GMT
Not After : Oct 19 18:34:05 2026 GMT
Subject: CN=6acd281d-ca77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:41:5c:96:2a:f5:8c:ed:6d:25:1f:1b:01:76:
de:0b:e7:9d:d4:59:06:db:a4:07:96:fa:77:49:99:
44:11:06:bb:61:e0:3d:13:48:8a:e7:1d:e2:b2:e0:
16:06:18:13:a5:31:11:ac:6e:78:16:0d:b5:0d:a7:
d7:60:e9:dd:0a:c5:68:fa:1b:9e:37:90:08:92:6c:
1e:1c:c8:fa:79:f7:b4:b0:f6:d6:a6:38:24:92:ec:
b4:01:7d:76:3b:e3:a1:1d:d3:a1:e5:30:df:71:d2:
22:dd:6b:13:7b:71:d9:60:94:09:16:86:30:35:7b:
74:3c:8c:1c:81:5c:37:8f:cf:fe:08:94:e4:b8:bf:
70:79:46:b7:75:79:f2:c0:f9:14:08:8a:18:a2:d4:
e8:df:01:c2:90:cd:77:88:af:d6:0d:64:11:3e:ca:
6d:d3:4c:fb:6e:7c:e1:43:f5:05:cb:be:a3:2c:50:
a6:b5:1c:50:aa:05:0b:83:e8:a7:5c:e5:7a:88:8a:
0b:77:77:a3:f3:f7:0f:da:db:4d:b0:3d:e0:d8:7a:
67:11:ee:c1:16:d5:9d:7a:16:52:0b:2b:9b:a6:a5:
81:37:84:23:30:3f:d9:64:cd:81:a9:2f:96:af:e5:
7e:45:af:57:bc:2e:7d:37:8f:8b:18:e7:2b:e9:f8:
8c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D8:E4:C7:3F:60:7C:E4:A8:E5:9F:13:26:CA:97:03:9B:6E:5F:F5
X509v3 Authority Key Identifier:
keyid:CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:a5:be:4e:8b:01:73:5c:16:a1:c8:64:c1:b5:a3:7c:1a:49:
6e:97:ed:5f:e5:9b:a3:4f:83:04:c4:99:55:10:c4:ad:3f:31:
61:2b:23:b7:48:bd:a3:6f:34:71:54:41:d4:66:cf:1e:e5:27:
d1:0d:55:44:a6:60:d9:83:55:39:59:e6:22:6f:76:64:98:0a:
12:1c:22:e4:19:40:28:f6:38:63:a1:12:2d:c9:a7:25:62:54:
c8:fa:2e:29:8e:7c:53:fa:80:1b:ab:6b:5f:c4:55:b1:1f:79:
f8:e8:80:a1:96:e9:46:c9:88:81:83:2e:76:13:94:e2:f8:12:
7f:52:f0:ed:08:1e:64:0d:df:7b:a0:62:8a:34:6c:59:3d:b2:
b2:85:b9:f1:72:ef:b9:07:84:f5:c3:96:c0:cc:ca:32:a7:1e:
59:30:07:cd:7f:6f:9e:c7:32:df:7c:d3:18:22:f7:5e:c1:e4:
02:05:38:e1:81:58:20:d2:bd:1c:4a:e2:7c:fd:84:15:55:4a:
88:4e:ac:e5:48:52:43:39:3e:2b:98:9d:ac:f9:19:ba:e3:87:
ac:5a:2c:50:02:32:72:ac:08:71:9c:74:10:1b:36:3a:69:e0:
48:4e:d8:e0:f1:32:d1:8d:89:62:c4:2d:9c:da:09:a6:a2:10:
8c:98:13:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 19:04:48 2026 by rpki-client