
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/390BD8F4A16311F1B4FF675E95EE528E/zocIfXqupqBsZhkKz9EzuiNRJnc.mft
File: zocIfXqupqBsZhkKz9EzuiNRJnc.mft (raw, json)
Hash identifier: 7RN6ROjKxlx5SV5MG/Dl/w67Oic36fSqsjpDxVGPy/c=
Subject key identifier: 1B:01:F5:22:B2:35:72:C2:0D:53:99:17:D5:C5:56:E0:B3:0C:D5:9A
Authority key identifier: CE:87:08:7D:7A:AE:A6:A0:6C:66:19:0A:CF:D1:33:BA:23:51:26:77
Certificate issuer: /CN=A9186214/serialNumber=CE87087D7AAEA6A06C66190ACFD133BA23512677
Certificate serial: 22
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/zocIfXqupqBsZhkKz9EzuiNRJnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/390BD8F4A16311F1B4FF675E95EE528E/zocIfXqupqBsZhkKz9EzuiNRJnc.mft
Manifest number: 22
Signing time: Sun 18 Oct 2026 15:34:13 +0000
Manifest this update: Sun 18 Oct 2026 15:34:12 +0000
Manifest next update: Sun 25 Oct 2026 15:34:12 +0000
Files and hashes: 1: zocIfXqupqBsZhkKz9EzuiNRJnc.crl (hash: DOPrsBAcw62cI0khF0KjL0ch/qpDQP/NZT1JkNzcoCU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/390BD8F4A16311F1B4FF675E95EE528E/zocIfXqupqBsZhkKz9EzuiNRJnc.crl
rsync://rpki.apnic.net/member_repository/A9186214/390BD8F4A16311F1B4FF675E95EE528E/zocIfXqupqBsZhkKz9EzuiNRJnc.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/zocIfXqupqBsZhkKz9EzuiNRJnc.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 15:34:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=CE87087D7AAEA6A06C66190ACFD133BA23512677
Validity
Not Before: Oct 18 15:34:12 2026 GMT
Not After : Oct 25 15:34:12 2026 GMT
Subject: CN=6ad4e6f5-f0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:89:76:46:eb:0a:fc:74:0d:9e:98:42:3c:f1:
0e:a9:1f:8b:53:70:bf:8d:8d:13:54:d4:34:d4:a5:
14:cd:ec:21:47:22:5f:95:f5:7a:da:8f:4d:2d:df:
62:7d:57:0b:65:40:73:95:fe:4b:fb:ee:f2:5e:86:
46:f2:71:a1:3a:b3:47:5e:52:b4:58:53:59:bd:9c:
df:e2:b6:af:23:e1:eb:4f:b3:a6:db:c8:21:a3:6c:
8c:5f:91:f4:9f:b4:1a:86:12:70:0c:68:86:f0:4a:
8b:e7:2f:09:4a:ad:89:21:40:03:be:54:df:4a:aa:
e7:ab:ea:86:dd:b7:f0:8d:ba:c7:55:f1:67:f6:2d:
28:8d:33:ee:4f:99:40:dc:f6:e8:67:f1:c5:ee:39:
67:de:16:9b:4c:3d:b1:b9:af:3d:0d:03:83:61:69:
44:01:ee:30:85:ee:94:48:fd:fe:58:e3:cc:08:41:
36:c7:b1:28:fe:62:64:76:7d:48:13:24:14:e6:ec:
b8:f8:08:6b:80:37:7b:2a:c0:3c:14:5b:14:b9:be:
7a:c6:6f:48:59:26:fb:4a:0d:2d:54:13:7f:20:70:
14:ac:39:21:0b:9b:30:65:af:02:b0:95:7b:6b:3b:
54:2d:d6:d8:f6:cc:49:73:0e:5b:12:b0:8d:d0:7b:
66:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:01:F5:22:B2:35:72:C2:0D:53:99:17:D5:C5:56:E0:B3:0C:D5:9A
X509v3 Authority Key Identifier:
keyid:CE:87:08:7D:7A:AE:A6:A0:6C:66:19:0A:CF:D1:33:BA:23:51:26:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/390BD8F4A16311F1B4FF675E95EE528E/zocIfXqupqBsZhkKz9EzuiNRJnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/zocIfXqupqBsZhkKz9EzuiNRJnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/390BD8F4A16311F1B4FF675E95EE528E/zocIfXqupqBsZhkKz9EzuiNRJnc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:cf:cb:91:30:85:fb:48:4d:ea:82:61:d0:63:6e:df:6c:6a:
01:5d:ed:24:83:72:46:3e:16:c8:3a:0e:f8:86:10:3a:d3:48:
82:d5:fd:0b:a9:04:75:59:d4:56:43:61:47:26:57:a1:ec:47:
d3:5a:bd:71:df:7c:34:88:02:4a:06:fe:c2:fe:2c:5e:bc:ba:
dc:25:98:6a:43:2f:0f:78:ff:69:6d:10:6e:ec:67:8b:b7:78:
9b:32:66:d7:aa:f9:ba:57:3a:b7:f2:eb:76:1f:9d:d6:8b:91:
9b:03:00:84:42:63:68:1f:8a:b0:f6:87:fb:aa:c9:7b:60:26:
94:ee:64:11:54:27:c8:af:43:c8:76:bd:fa:bb:6a:69:8d:a1:
15:e2:29:46:80:c3:09:44:70:09:e9:af:9d:0d:d5:69:02:2c:
98:9b:ad:87:ac:de:35:2c:a9:d2:df:1c:1d:11:a8:cd:14:05:
30:89:d7:b3:23:0c:01:d4:56:4b:ad:20:4a:64:eb:33:03:8e:
da:96:bc:20:b7:39:84:35:b3:13:67:44:26:bd:30:64:c3:83:
83:23:3b:3c:1c:7a:01:6f:cf:ab:f2:49:91:ff:39:23:ad:8a:
63:77:f5:55:71:e0:dc:ed:18:12:ee:78:a2:8b:36:4a:bb:38:
9e:64:9a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:39:10 2026 by rpki-client