
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft
File: z7B65d0AqScU2zWnIQRdnS644xc.mft (raw, json)
Hash identifier: P3rZ4WlctVBmid4V/bNT+nUvyHsUFiGdA2K4H4zjy8E=
Subject key identifier: D9:B7:09:22:42:85:69:92:2C:BD:22:67:0A:11:4A:12:17:07:98:F6
Authority key identifier: CF:B0:7A:E5:DD:00:A9:27:14:DB:35:A7:21:04:5D:9D:2E:B8:E3:17
Certificate issuer: /CN=A9189A9F/serialNumber=CFB07AE5DD00A92714DB35A721045D9D2EB8E317
Certificate serial: 010B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7B65d0AqScU2zWnIQRdnS644xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft
Manifest number: 05CD
Signing time: Sun 04 Oct 2026 23:51:17 +0000
Manifest this update: Sun 04 Oct 2026 23:51:17 +0000
Manifest next update: Sun 11 Oct 2026 23:51:17 +0000
Files and hashes: 1: z7B65d0AqScU2zWnIQRdnS644xc.crl (hash: 3p7NNW6JK4IQ5OFM4S861T9pz66JOzhq8g1xbtRT+0I=)
2: 42A92B3C3BAC11F0882B5B62C4F9AE02.roa (hash: gqAeGfAkf2SGnQQT/ywRAWWQeut8pK7ZNuz86Otabts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.crl
rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7B65d0AqScU2zWnIQRdnS644xc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 23:51:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189A9F, serialNumber=CFB07AE5DD00A92714DB35A721045D9D2EB8E317
Validity
Not Before: Oct 4 23:51:17 2026 GMT
Not After : Oct 11 23:51:17 2026 GMT
Subject: CN=6ac2e675-c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:77:cf:02:02:69:6e:e8:ee:e5:8e:c0:21:
ef:2f:fb:79:4a:90:d1:ab:c8:29:ab:12:cf:10:b5:
b4:08:75:ac:5a:62:da:fe:46:b3:ac:e4:26:7f:8d:
64:86:ee:a4:e6:e2:41:7f:31:01:48:e0:65:00:21:
fc:4a:7d:16:88:cd:8b:d5:14:01:e3:24:ec:6a:f1:
7e:09:f7:88:de:b2:5b:91:fe:ba:32:0d:5b:a1:88:
f9:69:03:2f:8c:21:f1:eb:f6:21:5d:42:90:93:09:
03:7e:a4:1b:56:8a:b5:91:dd:8d:c9:8e:e6:44:e8:
48:23:38:bc:95:7e:a1:31:c4:ef:a6:2e:8f:98:3d:
82:25:d7:48:8d:0e:aa:a4:40:43:7e:6e:f4:5b:83:
38:91:37:56:36:46:2f:76:d2:74:b5:29:55:2f:b6:
98:aa:91:70:d0:c7:0b:9b:63:12:6c:ef:3c:6e:9c:
81:16:0a:3f:7e:30:cf:50:13:97:23:7d:21:53:71:
40:32:56:de:68:46:fa:19:d6:c7:3d:2c:f3:ea:9b:
78:d8:15:10:d4:ef:38:10:61:79:ed:93:5c:76:39:
e1:1a:9c:04:e1:02:b8:b8:50:77:ad:5e:d4:99:68:
e4:5d:5f:33:16:57:c7:e5:41:14:8d:f6:73:b8:6a:
42:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B7:09:22:42:85:69:92:2C:BD:22:67:0A:11:4A:12:17:07:98:F6
X509v3 Authority Key Identifier:
keyid:CF:B0:7A:E5:DD:00:A9:27:14:DB:35:A7:21:04:5D:9D:2E:B8:E3:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7B65d0AqScU2zWnIQRdnS644xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:44:e7:3a:23:2d:b8:f9:3f:ca:b2:0e:42:ba:02:68:3e:d9:
14:0f:e9:bb:d4:a3:6d:85:44:fc:7c:79:fa:1f:97:32:7b:e3:
cf:ef:4a:58:f7:55:10:9e:d8:52:1f:0c:d9:04:7c:60:52:51:
cc:2d:2b:b7:4e:6b:1a:89:27:7e:a4:c4:c9:8d:27:b8:4b:be:
03:47:77:f9:bb:d8:b2:16:01:11:70:c7:69:6e:b6:94:f4:5e:
25:b5:9a:69:45:6b:98:39:22:4f:23:fe:3a:67:dc:b0:03:ab:
5f:f5:65:56:6a:06:fc:49:40:9c:ad:56:78:0d:10:07:2a:7d:
8c:fb:0b:a6:1d:35:5b:58:60:7b:26:d4:e0:13:2f:de:9f:75:
bb:dc:9e:28:cf:e1:0e:70:0d:d0:68:18:6e:25:f4:40:b5:5e:
52:23:da:61:90:2e:2b:44:36:db:90:ca:74:30:e7:c3:e8:c6:
63:c3:59:50:ca:d2:0c:2a:b4:d9:30:a7:b6:06:a7:e8:81:d5:
ab:9d:f1:df:f9:53:5a:0c:b3:9b:a7:6e:47:54:89:91:2f:ba:
59:9f:4f:8b:f0:11:1b:dd:72:f9:50:8f:53:52:d5:0d:60:ef:
bb:a1:f1:64:65:fb:f6:fd:4f:b7:09:67:4f:6a:0d:9e:7b:e2:
52:6d:f7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 08:54:34 2026 by rpki-client