
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
File: ZVsEJuo0sZdG7B073LGzdnTfoew.mft (raw, json)
Hash identifier: oGYap880viU58FKiSa9llpl5P9wJSIr6DxyZNuauiK0=
Subject key identifier: A3:34:A4:0C:27:A4:13:FB:CC:A0:D3:94:05:05:A2:92:1B:3B:80:B2
Authority key identifier: 65:5B:04:26:EA:34:B1:97:46:EC:1D:3B:DC:B1:B3:76:74:DF:A1:EC
Certificate issuer: /CN=A916ED7C/serialNumber=655B0426EA34B19746EC1D3BDCB1B37674DFA1EC
Certificate serial: 049F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
Manifest number: 0491
Signing time: Sun 20 Sep 2026 23:48:57 +0000
Manifest this update: Sun 20 Sep 2026 23:48:57 +0000
Manifest next update: Sun 27 Sep 2026 23:48:57 +0000
Files and hashes: 1: ZVsEJuo0sZdG7B073LGzdnTfoew.crl (hash: mSiwUgagol6JCMqcQmQiTXS0gSTNkJaJiP5sEMUxW14=)
2: 2986182E32F811F1836DC44EA9833773.roa (hash: LkAqBvJKZE3ibM9cU9n84aMldsrAuTSQuzb/c6yXmNs=)
3: 81CCB3C013BE11F185785DBB093D8C67.roa (hash: SRqpRVFQxk1egIO1CX1pfRroOwEuassvaoxgv/LlWT0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.crl
rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1183 (0x49f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ED7C, serialNumber=655B0426EA34B19746EC1D3BDCB1B37674DFA1EC
Validity
Not Before: Sep 20 23:48:57 2026 GMT
Not After : Sep 27 23:48:57 2026 GMT
Subject: CN=6ab070e9-032b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:51:1a:ab:30:e5:e8:45:20:81:38:44:ad:19:
81:bd:84:df:a0:ca:8d:35:42:39:27:1e:b7:2f:21:
74:7b:6e:7d:d0:09:95:6d:d3:e7:97:5f:31:e2:1e:
23:77:05:74:52:56:c4:84:9e:df:43:44:c9:dd:5e:
4d:87:a3:cf:51:79:f2:ee:c3:d9:8b:2e:59:dc:39:
b2:10:9a:dd:44:71:59:61:3a:01:67:b7:aa:e3:9b:
d7:70:a2:cd:11:de:30:af:f5:77:2b:95:60:65:ad:
1e:99:dd:3f:93:ff:06:47:75:86:4f:50:b8:93:f6:
bc:74:b6:eb:35:d6:0d:df:1a:86:67:68:1a:1d:6c:
bc:d7:0e:6e:63:c5:d7:71:14:7f:db:d5:32:66:d4:
29:f2:41:5f:3c:81:ee:09:fd:9a:66:7c:0b:4d:a0:
99:41:24:98:65:e7:3e:44:25:cd:44:fb:08:37:98:
ff:dd:00:32:ea:33:c0:c5:52:cc:a1:30:8d:40:7e:
09:26:33:a7:ec:94:f5:80:95:61:db:42:cf:cd:17:
37:72:fd:4c:3d:2a:0d:e3:c6:0a:64:8b:fa:f8:b3:
e2:2a:ed:57:04:76:e1:9b:e6:dc:bf:16:c2:32:a8:
56:f1:48:ee:4d:6a:fa:0c:3d:78:56:7e:81:83:21:
95:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:34:A4:0C:27:A4:13:FB:CC:A0:D3:94:05:05:A2:92:1B:3B:80:B2
X509v3 Authority Key Identifier:
keyid:65:5B:04:26:EA:34:B1:97:46:EC:1D:3B:DC:B1:B3:76:74:DF:A1:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:4d:c2:aa:9b:19:0b:b0:40:fe:ac:4a:44:dd:d2:d1:db:92:
4a:fc:95:c6:7c:bf:d7:43:c0:73:1a:f9:e4:3e:64:03:8f:d3:
27:f4:98:43:5c:74:04:92:aa:a9:4e:85:a2:2c:5a:31:ff:11:
8f:7c:d7:8f:eb:3e:fc:0e:32:de:18:41:73:01:82:33:80:86:
12:99:2a:21:87:ad:01:1a:c6:d0:ae:a6:c7:53:e3:62:3a:fd:
00:52:c3:de:28:fb:14:e8:b7:f6:54:99:f9:1c:2f:99:68:24:
bf:75:4f:b2:46:9b:e2:eb:a9:17:3a:24:05:10:94:3d:33:be:
40:1a:4c:52:f8:68:87:3e:24:11:99:1c:b4:28:29:dc:d4:98:
00:07:b6:71:12:61:b8:cd:d0:25:42:71:99:a9:8d:3b:2f:f3:
d8:75:79:23:77:7a:ba:24:58:66:d6:8b:d3:62:22:ed:51:23:
10:41:af:5d:ef:c2:55:9b:5b:09:ba:3b:cf:5b:d4:41:08:d7:
d1:e7:b8:50:87:06:87:11:11:9e:9f:16:4b:25:7c:84:f7:83:
bf:34:a8:c1:59:b0:0c:9e:32:d0:d6:8e:d8:85:ad:3d:8d:b1:
bc:dc:42:de:20:93:83:82:d1:e5:54:8a:fe:dd:d5:a5:df:9e:
aa:23:37:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:56:42 2026 by rpki-client