
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
File: Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft (raw, json)
Hash identifier: 6dVYODIK6z6kaq4TZkpwNQ4BTuE1hzMAhE7gQfQFvW8=
Subject key identifier: C7:21:AF:56:9E:86:D5:58:12:8D:1F:4F:D7:DE:0C:DF:26:E8:CA:E9
Authority key identifier: 67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4
Certificate issuer: /CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
Certificate serial: 05DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
Manifest number: 05B8
Signing time: Mon 28 Sep 2026 23:21:27 +0000
Manifest this update: Mon 28 Sep 2026 23:21:26 +0000
Manifest next update: Mon 05 Oct 2026 23:21:26 +0000
Files and hashes: 1: Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl (hash: ODHgySkYLAIEuzS662fEGDvt3MjsOnM7cb9MQeQ8fqE=)
2: 2C1F43848B5C11EFBFDAC30DC4F9AE02.roa (hash: QNIHjHWUNqsiL/hSt5OfIvTQlLC3HuVRGoPLRDJ/ZTc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl
rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 23:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1500 (0x5dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A7F, serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
Validity
Not Before: Sep 28 23:21:26 2026 GMT
Not After : Oct 5 23:21:26 2026 GMT
Subject: CN=6abaf676-f50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:58:ec:47:b3:58:0d:dc:50:5b:8b:7a:78:a4:
91:c1:54:c7:23:5e:be:55:bc:5a:6e:cd:b6:30:30:
9e:76:c1:f7:00:03:44:94:b5:44:53:e9:fb:55:01:
a3:fd:f9:0c:50:46:f7:e4:5a:c3:ec:8c:65:a8:b0:
63:f7:f7:0e:5d:1d:c3:43:39:18:9e:98:36:b3:bb:
f0:99:6c:3b:3d:3b:58:dc:1f:d8:e2:2b:1a:83:5a:
02:45:fc:ae:99:67:7b:fd:83:3d:fb:99:94:49:63:
28:12:cf:cb:f3:ae:62:84:d6:90:63:9f:3f:d4:3d:
62:49:51:9e:e2:0b:12:14:dd:34:07:ef:69:8c:24:
4b:82:d2:aa:3d:91:3b:36:e6:b2:31:84:75:ea:03:
a9:57:7c:4c:7b:11:a8:83:7b:43:c5:81:3d:09:34:
58:68:9e:f6:5a:af:56:b1:6e:f7:f3:90:ce:3d:52:
1a:88:7c:5c:4e:a8:cb:15:74:e1:9b:16:98:da:83:
6d:36:41:cb:80:76:27:4a:01:c4:27:f3:6c:72:f1:
66:b5:6f:b4:95:a5:98:90:59:20:ff:aa:7f:cb:77:
7c:33:90:15:94:7f:ba:5b:18:cb:d2:e0:a8:06:26:
66:66:99:6f:72:94:e2:c9:0c:b0:93:fa:9e:66:58:
b5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:21:AF:56:9E:86:D5:58:12:8D:1F:4F:D7:DE:0C:DF:26:E8:CA:E9
X509v3 Authority Key Identifier:
keyid:67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:ee:0f:e8:3a:ac:42:9c:09:ea:55:6e:34:e0:e9:e7:0c:7a:
0f:ea:95:59:59:6f:67:28:c9:a3:d7:8e:c3:7a:10:94:0c:60:
46:af:70:1f:7e:08:2f:7c:f1:b5:1b:33:8a:62:ec:19:c9:ea:
07:00:b1:57:37:1a:e5:e4:ef:6d:01:ea:64:ad:38:61:c2:18:
90:44:16:a2:20:df:72:56:5a:14:d0:b7:41:8d:ac:b6:7f:5a:
a5:24:e9:bf:4c:eb:d3:87:93:91:ac:6b:da:69:7f:2d:65:91:
59:2c:26:a2:18:07:29:e9:f1:6c:78:a1:02:14:01:71:5f:0a:
8e:7b:8c:eb:5d:06:7a:62:c4:c3:b0:50:ce:74:1b:f6:76:8b:
9c:c4:cd:02:e9:e4:ab:23:03:bd:64:df:48:e0:6a:4c:b5:cd:
46:ad:8c:bd:62:3a:24:03:5d:74:b0:ba:cc:3f:f0:22:9f:e5:
44:15:69:cf:98:e6:83:70:42:ae:9b:f3:37:51:88:e2:99:8e:
23:54:49:d4:7b:9e:58:1d:ae:4b:4b:92:74:7c:58:8c:79:ea:
09:3f:5d:6a:84:7e:6a:b6:c9:da:54:2a:8c:e2:3d:6f:b3:a7:
88:16:e6:70:d9:b6:5a:97:2e:1b:22:fd:b5:49:26:29:f8:2d:
e9:14:a2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:48:11 2026 by rpki-client