
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
File: ZJQ7HSvi-T3WQOAk65TY043OaoM.mft (raw, json)
Hash identifier: lXOnz917nyyrjm5AUYJ7F7qR/qW+2Y+bmDRt37unlEA=
Subject key identifier: 81:07:01:81:3C:67:63:68:7A:85:E4:44:8E:21:9D:DA:E9:D6:A6:7F
Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83
Certificate issuer: /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
Certificate serial: 021D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
Manifest number: 0204
Signing time: Mon 21 Sep 2026 03:16:51 +0000
Manifest this update: Mon 21 Sep 2026 03:16:50 +0000
Manifest next update: Mon 28 Sep 2026 03:16:50 +0000
Files and hashes: 1: ZJQ7HSvi-T3WQOAk65TY043OaoM.crl (hash: fdSyuBOtDS9kEOi6wI0rc2rlBVDZ4hYiRTdHQNYBPHg=)
2: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (hash: vS3X0b44bYIp6/Y6sLtHQmuycQrRy1x+aaB6Q+t5xg4=)
3: 0D5F2416B5B811EEA8ACF557C4F9AE02.roa (hash: qfFd1OkdxxfsdrGhnn3dqFBraYFvXPIV0iQiCI0Bu+U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl
rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:16:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8F34, serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
Validity
Not Before: Sep 21 03:16:50 2026 GMT
Not After : Sep 28 03:16:50 2026 GMT
Subject: CN=6ab0a1a3-e434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:d1:f5:15:bc:c4:ab:98:7e:7f:e2:be:f9:
59:8c:15:8c:15:f9:a1:90:a9:e3:2a:d7:d6:49:85:
e8:a4:3d:c1:08:50:db:2c:76:52:ff:b3:e4:5e:60:
83:cb:ad:00:98:ce:a7:1d:c7:84:1e:97:c7:d0:b8:
8a:3b:fd:3b:4c:bb:3b:96:59:f1:98:00:7c:df:95:
b9:ad:fe:1f:a4:a3:03:71:ab:34:b7:fe:af:36:47:
8b:cc:4f:ad:6c:ef:f3:81:15:3f:11:2b:85:50:ca:
9e:ad:e5:0f:70:33:f0:a9:9f:cc:21:59:16:33:ae:
a7:de:d7:ed:6c:f4:24:cc:94:0f:29:9a:0b:39:62:
1c:0b:35:e3:64:48:9e:cf:0e:2d:a3:28:46:b4:a2:
e4:9e:38:3e:0c:19:f3:69:ec:ae:f9:cc:02:c9:45:
90:24:b6:d9:c1:94:8c:df:71:7d:aa:c1:9b:19:77:
5d:21:09:4c:b2:79:a4:05:72:98:c6:b9:20:e4:a5:
91:d0:2d:a4:25:e8:3d:73:78:6b:cc:d6:d2:0b:b1:
09:83:b3:5a:e0:c5:56:6c:b0:93:3e:f3:98:e9:a7:
a7:99:f4:3c:d9:e5:5d:be:2b:dc:2e:b0:53:51:c8:
62:96:92:9d:66:af:52:b9:ae:87:bf:f5:e9:b4:c7:
6e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:07:01:81:3C:67:63:68:7A:85:E4:44:8E:21:9D:DA:E9:D6:A6:7F
X509v3 Authority Key Identifier:
keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:c7:2b:2e:b8:8b:b7:71:be:a6:94:7f:ed:e1:ef:03:fd:99:
59:dd:9e:ac:6a:3d:5f:bf:87:38:dc:50:f9:95:f5:fc:6a:0d:
97:a3:01:17:ac:26:81:22:45:61:f4:c5:fd:d4:da:c4:f6:32:
94:dd:0b:0c:07:02:51:fa:2c:a2:38:b4:99:e1:35:8a:36:e3:
4b:24:df:47:69:fb:b6:87:6d:fb:f0:6e:73:5b:a7:c6:3a:35:
27:b1:20:0d:d5:be:d2:bd:4d:78:e6:95:b6:2d:a5:1c:20:32:
ce:68:50:df:df:eb:e9:d1:0c:e9:82:c0:f3:de:1a:79:b7:15:
97:6a:74:22:d0:d4:e8:f7:34:da:c3:31:42:c2:f9:94:03:33:
4e:7a:06:99:21:1a:5f:9b:bc:84:c5:5a:10:7c:d6:6f:6f:de:
d0:0a:f6:fc:b1:21:9f:4e:cd:a3:aa:4b:53:05:10:6d:3d:e2:
14:90:67:71:a4:15:66:cf:b0:8b:09:76:1c:24:ed:7d:f9:45:
dc:c7:88:ca:37:93:66:70:f3:f7:02:52:6d:1c:d1:29:06:fc:
7d:65:4f:0d:82:c0:36:0b:27:ca:e7:81:08:ab:ce:8f:e3:42:
4d:93:4e:57:b7:4c:b2:e2:65:da:5c:ce:26:64:7f:4f:6d:9a:
bb:dd:a8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:02:35 2026 by rpki-client