
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
File: ZpvKCpDeWAORqO5km-TvvjbOhBg.mft (raw, json)
Hash identifier: CIGtBMVUJgbcWfv6PzzVpRLOT0HUy6Awkjp7I9ZPbMA=
Subject key identifier: CC:5D:31:B2:F4:40:ED:5C:08:19:CE:F2:93:70:46:B0:EB:AD:05:2A
Authority key identifier: 66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18
Certificate issuer: /CN=A918031D/serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418
Certificate serial: 019E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
Manifest number: 0195
Signing time: Fri 25 Sep 2026 04:24:47 +0000
Manifest this update: Fri 25 Sep 2026 04:24:46 +0000
Manifest next update: Fri 02 Oct 2026 04:24:46 +0000
Files and hashes: 1: ZpvKCpDeWAORqO5km-TvvjbOhBg.crl (hash: oHp2me8HO7d3nvuZnfdtkxziLZeW3uVQE7F5050N3k0=)
2: 314597D64EEF11EF8BACFA30C4F9AE02.roa (hash: 9qSoXVlEycNCIEdeN++oa2o1NIklOSP03YZ6af8JV3c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl
rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:24:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918031D, serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418
Validity
Not Before: Sep 25 04:24:46 2026 GMT
Not After : Oct 2 04:24:46 2026 GMT
Subject: CN=6ab5f78e-ef6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:90:2d:64:9f:4d:8a:c6:4c:2a:fa:d7:49:
e2:d0:c8:b9:77:f8:36:e0:48:2b:31:8e:ee:ff:39:
d2:74:b9:91:de:f3:ad:b0:b5:63:6c:b0:4e:00:a3:
9b:8a:8d:0e:1e:fc:9c:70:5c:36:c0:5e:8a:55:15:
20:58:57:77:52:8f:e9:bf:b9:43:33:c5:6f:46:eb:
00:45:ed:df:d6:9c:70:10:a5:d0:08:0c:d6:ca:32:
75:50:d8:9f:2b:f1:89:db:54:d2:16:46:bc:28:eb:
7f:fe:dd:5e:ae:bf:ff:57:ad:31:f6:46:6f:fe:68:
06:8a:14:bb:8c:13:9f:fe:2b:85:0b:3e:01:05:f7:
59:3b:23:1a:fc:31:e5:be:eb:cd:61:f3:04:10:62:
3e:f9:8b:2a:df:aa:ba:39:17:82:b5:73:a4:22:1e:
ab:1b:29:80:4a:7e:fe:6c:b3:7b:c4:14:9b:db:4f:
8b:11:fc:4c:53:1d:cf:f5:3c:8a:95:77:18:1b:51:
bc:e9:67:c4:8a:6b:2f:da:10:a5:09:f7:60:e4:f8:
a0:8f:15:cc:17:28:95:a5:73:2e:8e:67:71:38:b9:
d1:b6:47:98:cf:bd:f3:4d:a3:f2:63:5f:21:4d:8a:
07:b4:eb:2a:44:a1:0a:8e:b4:a8:22:7e:0e:6a:49:
d8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5D:31:B2:F4:40:ED:5C:08:19:CE:F2:93:70:46:B0:EB:AD:05:2A
X509v3 Authority Key Identifier:
keyid:66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:10:23:01:9e:f8:39:09:e6:ad:8a:9d:c1:8e:f8:73:4c:c9:
62:5b:25:c0:a8:39:2c:fb:25:fc:fb:25:80:39:ef:cc:a2:ab:
0a:aa:1c:a8:87:0c:50:88:9f:96:bd:30:f6:50:eb:df:7a:4c:
11:a5:99:9d:37:cf:9c:9c:c3:0e:bb:02:9f:60:43:79:c7:80:
18:cc:df:eb:10:b2:81:dd:92:39:c3:45:df:f4:6c:0d:e0:e3:
a2:37:f0:41:f4:42:28:4d:96:89:cd:9c:52:ea:a6:50:04:07:
ae:ad:80:70:5a:28:0d:11:4a:90:2a:60:e7:34:87:56:27:a6:
55:9f:90:4f:b7:99:49:0a:25:3b:80:b1:8e:4a:71:77:a3:1e:
2f:c2:31:1b:a3:cc:f3:5b:b6:cd:3c:4a:ba:e7:7a:e6:20:b6:
d4:a0:a4:19:13:67:74:7b:2e:63:99:16:af:23:96:a0:31:0c:
33:66:80:fe:4f:42:05:4f:ba:36:9d:f9:95:32:96:24:8d:e9:
66:0c:b4:74:43:bb:3c:91:e2:da:c0:d0:23:6c:97:cd:e8:5c:
62:05:7b:b5:73:e5:1f:64:8b:b7:92:9e:7f:0a:b6:f8:bc:ac:
52:02:bf:5c:c9:02:59:b9:72:55:77:e9:2a:06:48:d8:1d:1f:
6d:f6:64:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:53:30 2026 by rpki-client