
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft
File: A0ZyQIbx848yyqFygmhZGcfIu28.mft (raw, json)
Hash identifier: 8MProHB5T2zOhDJgtvxlqUgU03dKVOGXjyYEcxp1qy4=
Subject key identifier: 13:53:E2:CC:84:43:0E:B4:09:4C:CE:1A:15:EE:9E:7E:AD:21:91:B0
Authority key identifier: 03:46:72:40:86:F1:F3:8F:32:CA:A1:72:82:68:59:19:C7:C8:BB:6F
Certificate issuer: /CN=A9173591/serialNumber=0346724086F1F38F32CAA17282685919C7C8BB6F
Certificate serial: 0CBE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0ZyQIbx848yyqFygmhZGcfIu28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft
Manifest number: 0CBC
Signing time: Mon 28 Sep 2026 18:38:14 +0000
Manifest this update: Mon 28 Sep 2026 18:38:14 +0000
Manifest next update: Mon 05 Oct 2026 18:38:14 +0000
Files and hashes: 1: A0ZyQIbx848yyqFygmhZGcfIu28.crl (hash: lWjs1FXoNE7t0wAYxQoVIpoecoLwbBFysYB6Awku5mc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.crl
rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0ZyQIbx848yyqFygmhZGcfIu28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 18:38:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3262 (0xcbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173591, serialNumber=0346724086F1F38F32CAA17282685919C7C8BB6F
Validity
Not Before: Sep 28 18:38:14 2026 GMT
Not After : Oct 5 18:38:14 2026 GMT
Subject: CN=6abab416-a9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:34:22:0a:d7:16:20:d5:b2:c0:d0:8b:84:00:
5f:9f:c2:31:66:8d:55:9d:3f:23:35:e5:e9:6c:1d:
a4:04:2f:e7:35:82:03:3f:54:d3:da:d1:94:f1:59:
4b:24:5d:15:2c:75:02:78:2c:9c:1a:4c:42:ea:62:
46:c9:c2:01:ef:20:6e:15:4e:3d:fa:95:a7:03:82:
43:5f:86:96:85:4f:35:31:a6:b1:95:01:cd:6c:75:
03:a8:4a:c3:22:db:08:90:0c:51:cd:39:af:25:5b:
1b:ff:24:3b:79:9d:e4:53:e2:82:30:5b:9a:7c:cd:
16:95:d2:bc:9a:e9:b8:b3:ea:be:86:3d:f8:e7:66:
a6:24:02:ec:b5:58:01:1a:e4:d2:a6:0a:ef:d1:b9:
31:49:58:b1:b9:fa:c6:47:a4:c6:92:ab:5e:37:d6:
f4:28:29:53:28:16:78:1a:c0:18:5f:c3:2e:a8:d3:
39:a5:b6:e4:87:ae:45:f3:58:d3:2a:d4:91:63:a1:
9c:89:0c:a8:aa:52:d7:89:b9:eb:38:cb:cf:06:7b:
c1:c4:e6:be:cd:22:20:d2:81:30:0f:b0:f2:6c:35:
c8:9b:73:e3:c3:ec:bd:95:73:0f:eb:56:ac:11:f3:
c0:c4:92:28:aa:09:79:f3:90:e2:19:62:97:24:80:
0c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:53:E2:CC:84:43:0E:B4:09:4C:CE:1A:15:EE:9E:7E:AD:21:91:B0
X509v3 Authority Key Identifier:
keyid:03:46:72:40:86:F1:F3:8F:32:CA:A1:72:82:68:59:19:C7:C8:BB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0ZyQIbx848yyqFygmhZGcfIu28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:fc:0b:1d:24:13:80:2c:75:67:ed:9d:f8:60:09:00:57:51:
8c:14:cd:fd:31:b7:20:60:be:83:16:89:8a:fb:8c:b5:1c:0b:
2e:df:a1:f7:24:77:51:2c:e0:ad:48:91:04:44:ba:05:76:57:
20:34:dd:ac:d7:12:43:25:e3:a6:96:84:66:d0:81:7f:c0:0c:
37:3f:02:8b:5b:71:b4:ea:01:08:32:50:66:eb:09:01:10:53:
77:51:e9:d3:ed:f7:4b:fe:6c:58:93:1d:50:21:60:06:3a:0a:
9f:cf:07:a9:38:85:78:66:f9:14:e6:e9:ec:20:3b:ee:65:70:
39:9e:93:2c:6a:56:c8:c7:c4:e0:e3:3d:d5:74:44:e4:11:13:
9f:54:ec:69:59:b8:47:fa:b9:ac:7a:11:e8:a8:ed:94:78:9c:
e5:69:9b:ee:c1:07:94:69:c1:16:0a:79:ea:ff:b7:03:5a:29:
e8:9c:5c:21:83:19:b9:89:72:ad:30:cd:51:46:23:f2:dc:08:
b0:eb:f1:58:1c:d3:f2:a9:da:aa:f9:40:15:d4:4a:8d:66:58:
28:1e:45:de:44:19:9c:4e:cc:b7:a8:48:14:19:f9:cd:a2:cf:
4c:fa:88:cb:c4:37:4b:d5:ec:95:ae:bb:b2:b9:7f:39:81:ee:
ed:82:a0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:57:58 2026 by rpki-client