
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
File: ZnYczRtMiDhOakBAKM2an4Cd4nY.mft (raw, json)
Hash identifier: ORx/2pMJqjmQpkVNKTwujY2prokWQzI7y5PaXlsGGPE=
Subject key identifier: 88:5C:4B:37:EC:50:9B:48:97:47:00:46:DA:84:AD:4E:C9:70:D7:49
Authority key identifier: 66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76
Certificate issuer: /CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276
Certificate serial: 0255
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
Manifest number: 0235
Signing time: Wed 07 Oct 2026 03:27:03 +0000
Manifest this update: Wed 07 Oct 2026 03:27:02 +0000
Manifest next update: Wed 14 Oct 2026 03:27:02 +0000
Files and hashes: 1: ZnYczRtMiDhOakBAKM2an4Cd4nY.crl (hash: +nJJYXfSGhXxEgxRga9oON1a2XrgfGd0oxjXNz09K+U=)
2: DA005346B44811F1BDFAF9214B11F970.roa (hash: Lut7JweVcMwFQnTAU9m2ttsawFzJYVRxrtD577Tvi5Q=)
3: 6AB0A70CB44811F1930E78154B11F970.roa (hash: iFUbSnCyWN7gfGMLlr0ahi3c3dkVQXvYVAnYds30OlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl
rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 03:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597 (0x255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C09C5, serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276
Validity
Not Before: Oct 7 03:27:02 2026 GMT
Not After : Oct 14 03:27:02 2026 GMT
Subject: CN=6ac5bc07-7134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:bb:f1:e8:ee:c0:21:fd:59:f6:f4:e7:4c:
6f:ce:b3:88:1c:58:fe:f4:cc:d4:e4:1b:8f:e4:e9:
82:45:50:ca:5f:63:16:cd:cb:cf:b6:16:6e:85:79:
fa:82:c5:cc:13:37:cb:f3:f5:4c:a7:09:de:29:76:
48:8b:7f:9a:1f:5c:cc:2e:c9:6f:f4:91:77:ee:4b:
82:17:4d:d3:27:e0:3d:6d:52:74:89:9e:1b:cc:b8:
c6:32:89:a0:63:2e:6e:03:b0:0f:e0:3d:0a:38:13:
e1:c8:b0:01:06:e9:62:06:90:7b:5f:20:c3:3d:6f:
37:80:19:f1:d4:37:ca:a5:b5:ce:b3:47:ec:5b:d2:
63:90:09:39:fc:06:3a:63:7b:35:a0:e8:42:d3:64:
ce:67:65:6a:fe:92:95:b7:70:43:10:48:85:51:17:
79:e1:41:f3:66:5e:db:0e:81:7a:e9:8a:04:79:2a:
f8:1d:bd:06:d9:38:b7:30:56:0d:af:99:32:2b:6a:
12:b2:3c:af:56:db:8b:16:21:d5:11:d6:ff:5e:e9:
05:ca:55:63:87:06:a1:9b:18:71:0e:d7:ff:d9:d3:
23:8a:6e:85:35:65:00:4e:04:4d:82:5b:22:68:2c:
11:ec:fe:0d:7b:64:2c:61:3d:3f:01:b1:5a:12:df:
12:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5C:4B:37:EC:50:9B:48:97:47:00:46:DA:84:AD:4E:C9:70:D7:49
X509v3 Authority Key Identifier:
keyid:66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:1c:c5:c2:13:7e:02:86:34:e6:80:eb:4a:58:28:0d:d6:36:
f3:75:f6:47:9a:24:96:2d:96:65:a7:4f:8c:fc:86:62:d6:ff:
94:31:c9:be:bc:73:d9:4e:8a:56:25:ba:d7:fb:c7:62:06:b7:
78:73:23:47:8e:c0:e7:e2:12:4d:f3:04:57:53:4c:99:10:12:
64:72:5e:50:28:b7:3c:ad:f1:89:cb:d8:a9:0e:7d:8e:e7:1a:
ea:fe:9d:f2:a0:d8:18:cf:e1:35:2b:cd:f5:0a:e9:57:c9:78:
bd:34:f0:26:15:be:98:99:d2:90:f3:d1:cf:fc:73:de:b9:10:
0e:38:c8:55:82:41:14:be:d1:b2:85:4e:22:ac:d7:dd:ff:b1:
c2:94:eb:fb:6e:2d:ca:57:d5:bc:67:4b:58:1f:52:2c:5f:c5:
0d:3f:03:3c:2f:55:96:00:36:2e:1e:a6:90:a2:84:0e:ed:ce:
26:fb:f7:a2:63:80:bc:ce:ae:11:f1:7e:3a:c0:8a:b6:e2:1f:
c8:3b:c5:10:37:a5:3b:f0:a6:46:23:1c:f3:90:81:9d:44:b4:
c6:b3:89:c4:ad:c0:e3:a3:7a:e7:52:8f:76:5d:e3:a2:ab:e1:
54:62:7b:ec:c2:1b:12:63:be:6c:ed:33:70:18:6a:37:bd:c3:
dd:a7:3a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:45:24 2026 by rpki-client