
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
File: ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft (raw, json)
Hash identifier: 86bf8eKy/uIfyEqR3hUpIPuUzn72NvFkeHabU5euBCQ=
Subject key identifier: 4E:F3:16:07:4D:37:B6:E9:63:EA:3D:34:E0:B7:6D:40:06:F9:BF:7A
Authority key identifier: 66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9
Certificate issuer: /CN=A91A12C4/serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9
Certificate serial: 017F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
Manifest number: 017F
Signing time: Mon 21 Sep 2026 04:38:08 +0000
Manifest this update: Mon 21 Sep 2026 04:38:07 +0000
Manifest next update: Mon 28 Sep 2026 04:38:07 +0000
Files and hashes: 1: ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl (hash: 0zcL0qVkQhXA5+l86/0lqXCxM3yAqhaoEBT6pHLhdeI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl
rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:38:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383 (0x17f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A12C4, serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9
Validity
Not Before: Sep 21 04:38:07 2026 GMT
Not After : Sep 28 04:38:07 2026 GMT
Subject: CN=6ab0b4b0-9a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:53:9f:11:d2:31:2a:e3:f4:32:75:20:8b:dc:
31:b9:c9:83:ed:54:87:56:1a:ce:a7:6e:10:0b:c2:
99:27:05:24:2f:98:54:e0:1a:e3:1e:10:06:4a:2b:
ea:77:a5:69:9e:39:cc:86:c9:22:16:0a:fe:30:b4:
b5:29:6f:ee:97:a3:cb:f7:32:f8:cc:d9:5f:cb:e6:
3f:75:82:e3:d2:3c:0b:2c:31:d0:c1:63:90:d0:c8:
8a:08:1e:c5:20:17:56:07:53:2c:ae:78:bd:3d:15:
4a:4d:77:21:69:dc:47:b2:a4:59:73:68:88:dc:41:
0e:fa:99:d7:c9:de:fb:0e:b0:d2:2f:7e:0e:51:56:
7b:42:b6:c4:65:2f:93:92:95:e9:5b:7a:fe:b6:a9:
ae:f2:71:e5:56:39:ce:1c:3a:2a:c8:04:03:67:b6:
57:10:42:69:a6:6e:74:f8:a5:37:00:d3:66:0a:f3:
bb:4b:6c:d0:d0:be:db:4d:87:b1:b0:1a:b6:ef:cf:
95:01:47:00:9f:0f:0c:0f:b3:68:00:08:7d:43:d4:
91:79:45:a0:43:43:b1:59:ab:84:eb:9f:13:84:90:
18:98:c9:6e:ec:d4:95:18:84:67:d8:59:5f:15:ce:
46:2b:c8:d4:00:ed:b0:ee:34:ef:af:4b:bd:d5:ec:
5e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F3:16:07:4D:37:B6:E9:63:EA:3D:34:E0:B7:6D:40:06:F9:BF:7A
X509v3 Authority Key Identifier:
keyid:66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:04:d7:b7:26:e6:c8:87:25:e8:fc:93:6f:bc:08:35:35:a3:
50:ed:d4:02:3d:6b:fe:5f:25:f2:69:ac:ca:ac:28:db:2c:f6:
54:f6:fb:51:d9:2c:8e:ad:6a:b0:92:2b:d9:fc:e6:b1:b2:3e:
aa:f8:f1:a6:70:72:01:98:5c:a1:bb:8b:fe:1e:09:56:9b:95:
38:54:22:ca:75:5d:1a:9f:56:9f:69:79:46:c9:fd:f1:69:f1:
69:44:ab:73:5a:de:86:52:25:de:1f:c4:19:4d:c2:b1:00:86:
90:4c:ef:ce:89:8e:ca:24:a5:26:ac:5f:15:14:ad:75:f9:b9:
fa:ef:d3:27:11:10:99:20:0d:a2:7f:a0:a1:9d:50:60:40:7e:
a5:46:a8:63:2a:27:e9:6b:d4:0d:a3:66:bf:5e:d1:d6:1b:3f:
c3:64:90:92:03:40:85:c5:09:f0:db:07:13:61:83:77:f0:78:
52:94:c1:59:00:99:a9:03:6b:e0:2a:d7:00:e3:2f:2f:df:cf:
4c:d4:96:1b:01:6c:e2:5d:78:6b:11:b6:2a:41:85:12:ba:58:
69:8a:72:e7:ff:bd:1a:e3:86:8e:52:a1:ce:0b:29:18:fa:20:
90:bd:d1:77:ab:54:42:da:83:58:ae:7f:97:16:33:06:a9:38:
c6:04:77:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:14:02 2026 by rpki-client