
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
File: mZsvZTnCPq60aeZ1OfstyTPZgEA.mft (raw, json)
Hash identifier: zmfSN3IL7198td195P/fDvuwUbjNBJyVcc6MDogD+4I=
Subject key identifier: B4:14:5B:74:E9:A0:0F:8E:66:C7:F6:86:BB:6D:F5:E8:F7:24:77:EA
Authority key identifier: 99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40
Certificate issuer: /CN=A91AB055/serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040
Certificate serial: 01D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
Manifest number: 01CB
Signing time: Mon 21 Sep 2026 03:43:53 +0000
Manifest this update: Mon 21 Sep 2026 03:43:52 +0000
Manifest next update: Mon 28 Sep 2026 03:43:52 +0000
Files and hashes: 1: mZsvZTnCPq60aeZ1OfstyTPZgEA.crl (hash: 7VUuNa6P/khYqdgLRJfOwvDsDorJV1Xwqt5sNBNVu30=)
2: 83CA613CF55611EE8CE6274DC4F9AE02.roa (hash: AJJ92VGVLucsvsIdaZU0nKfuQXZ8cJi9IfizP5I2ais=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl
rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:43:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB055, serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040
Validity
Not Before: Sep 21 03:43:52 2026 GMT
Not After : Sep 28 03:43:52 2026 GMT
Subject: CN=6ab0a7f8-5d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ec:e4:a2:ee:25:86:5c:e4:87:47:7f:34:b2:
05:14:62:a4:c5:92:b6:c0:e0:a4:36:9d:be:b0:62:
06:5e:a4:80:34:2a:e0:ef:e3:ae:a3:ab:3f:20:b5:
a5:7f:e4:1e:84:8b:ae:45:9a:41:00:0a:26:f6:1d:
91:1c:da:63:dd:91:d0:b4:ed:af:fb:47:3d:86:2a:
de:44:13:6d:07:ae:c6:f0:9b:d5:65:5d:47:3a:42:
78:0a:1b:8a:95:cf:fc:ee:6c:56:39:c0:4f:fa:56:
3e:c7:85:f1:51:06:49:e8:56:98:b4:59:d9:3a:bd:
b3:7f:00:5d:a7:fe:0b:b7:c9:c3:ee:f2:47:5e:b5:
c7:fa:1e:78:ed:1d:7c:b5:b1:31:c9:c6:b3:f4:4a:
df:87:e1:fe:4c:89:a5:09:59:df:34:f9:17:90:a5:
98:37:d2:d6:6b:78:08:b7:da:d7:c6:c6:3c:78:ba:
ab:ba:dc:20:20:5a:12:65:1a:bc:32:a6:4a:82:e4:
a2:1c:1e:6c:40:15:27:9f:6d:31:6b:61:2f:cb:bd:
87:bc:54:a6:a6:61:d0:36:f6:65:a5:54:c7:9c:2c:
f7:91:c0:20:62:5e:3e:e6:6a:4a:e4:91:b7:c5:8c:
46:88:30:4d:dd:d9:4d:0a:e3:da:b9:0c:25:aa:23:
e9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:14:5B:74:E9:A0:0F:8E:66:C7:F6:86:BB:6D:F5:E8:F7:24:77:EA
X509v3 Authority Key Identifier:
keyid:99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:73:aa:1f:4b:9c:85:b0:72:eb:d7:5c:a4:3f:9f:99:1a:5a:
15:81:f2:07:6f:12:41:55:af:cf:f4:0e:be:f9:c0:4c:4c:7c:
3a:35:79:1c:84:87:1f:6e:79:04:34:41:af:86:3e:72:e7:4a:
bc:59:2d:54:79:2e:bd:e6:3c:c1:3d:d7:03:cf:7c:bb:e1:53:
28:8e:40:e0:2c:3c:a8:f0:d8:51:84:bc:7c:5e:a7:5c:9a:b3:
57:87:0e:16:2a:e9:85:6c:eb:ce:52:47:4e:ab:f1:e4:d5:ab:
39:d5:95:ee:e6:e7:b0:69:8b:37:e6:f5:be:a9:26:3a:28:82:
83:c7:a6:b1:37:d7:13:0a:65:9d:e2:39:23:fe:c8:7e:c4:d5:
75:2e:e1:52:77:ff:83:22:8f:ca:f5:67:6c:f6:4f:92:86:c4:
03:30:19:07:6f:a8:0e:9b:16:17:82:a5:83:e3:b7:41:b1:3b:
b4:8e:37:ee:55:8c:12:70:bf:95:df:90:08:95:3e:4b:ca:fa:
d2:3f:58:a3:db:5b:3e:69:35:e6:16:16:32:e8:2b:fc:42:05:
9d:67:b0:a7:8d:9c:9f:80:e9:33:a1:3b:38:1a:dc:78:db:0a:
85:f0:a5:a6:54:c8:62:9e:aa:38:f9:e5:1f:2f:51:ab:22:e3:
32:a8:64:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:47:54 2026 by rpki-client