
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft
File: z0HNr0HFcAEpBkzvKEADvvC5v8I.mft (raw, json)
Hash identifier: M04l4Y3qIlzFNSxPBCq7qmoqeeCcfiulKAIv5W2Rc2g=
Subject key identifier: FF:AF:84:2A:69:4F:79:81:0C:28:3B:44:C1:48:4F:E7:3C:32:B6:38
Authority key identifier: CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2
Certificate issuer: /CN=A91C0D37/serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2
Certificate serial: 0268
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft
Manifest number: 0245
Signing time: Sun 11 Oct 2026 02:58:35 +0000
Manifest this update: Sun 11 Oct 2026 02:58:35 +0000
Manifest next update: Sun 18 Oct 2026 02:58:35 +0000
Files and hashes: 1: z0HNr0HFcAEpBkzvKEADvvC5v8I.crl (hash: BYbjB/LjktJzMBR7LHAtwV8LbpUbqyE/dLsknDD7t3g=)
2: C85D80CE43F611EF84151D6FC4F9AE02.roa (hash: DT8F2vSiTnDZ92tEugXg46ga5AYrQXf1PZTpjRK3m7c=)
3: 00FEEFF0536911EE8594503BC4F9AE02.roa (hash: YiI4BDI+YEuyMJJzNPPm+NOvEBL4ZLRtDOzUj0P1mAQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl
rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 02:58:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 616 (0x268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0D37, serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2
Validity
Not Before: Oct 11 02:58:35 2026 GMT
Not After : Oct 18 02:58:35 2026 GMT
Subject: CN=6acafb5b-8ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f4:ce:ca:1e:62:7c:20:20:a8:31:9f:33:30:
08:dd:a5:d1:6b:2a:e1:7e:14:45:1b:2a:08:71:45:
62:62:66:96:9b:af:3a:ae:52:55:4a:70:42:03:c6:
28:e0:f2:5b:10:f4:93:f1:6b:75:db:6c:62:d7:6c:
e0:69:d5:6d:8a:a6:be:4e:e3:b0:1b:28:ac:7d:8c:
56:ef:ed:59:cf:cf:fb:f1:b0:a1:14:91:a1:87:16:
05:e0:c5:6a:3f:b1:f5:70:2a:07:66:2b:87:a1:90:
df:6e:83:e4:f3:fa:df:7c:3f:7f:4f:37:3c:1b:57:
8c:de:3d:28:9d:65:2e:3c:07:c5:e2:f5:c7:7c:17:
cd:04:f3:7b:55:f6:58:1a:64:ba:5e:dd:01:b8:c8:
3f:3c:89:85:e5:6c:52:a3:59:91:d9:75:7f:f2:7f:
86:4d:bd:d0:fd:08:75:5b:bb:08:ad:d7:3f:21:6c:
4e:a8:97:82:0c:3b:c0:62:d5:c1:a6:b5:e5:1f:34:
22:13:01:ea:7b:08:24:d3:0a:23:bd:11:eb:50:04:
b0:02:0b:37:35:75:a7:1c:0e:d4:a8:0c:63:1f:51:
e5:d9:44:2e:7e:b5:5d:28:4d:72:f0:b0:70:ca:01:
f3:b9:bf:e1:a3:e7:c5:3f:65:5d:52:8b:4a:ec:e9:
aa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AF:84:2A:69:4F:79:81:0C:28:3B:44:C1:48:4F:E7:3C:32:B6:38
X509v3 Authority Key Identifier:
keyid:CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:48:7f:46:b9:3f:87:02:b2:e9:5a:fc:3c:24:6d:8a:b6:d3:
33:d0:c9:59:ec:2b:04:2c:b0:f3:6c:ed:73:5b:41:da:7a:0c:
49:41:9c:68:2c:40:44:7f:9a:b3:ed:95:bf:22:6b:96:de:51:
57:b3:6f:60:f0:48:8d:04:1f:f0:00:5d:73:dc:46:d0:f2:73:
25:06:04:25:2f:c1:af:a4:97:9d:ac:61:f4:48:6a:a2:2d:93:
58:f2:27:d1:55:fb:97:e6:f6:0c:41:ec:34:54:56:e4:66:1b:
62:f5:77:a1:e9:3e:eb:a5:21:3e:72:ca:17:fd:1c:df:b6:a0:
9b:e2:c2:4e:f6:30:97:fb:91:65:51:46:27:ea:d6:97:d3:31:
5b:8b:25:ee:41:13:9e:1e:99:2e:6f:8d:39:b1:6a:d4:be:d1:
83:10:18:d3:31:34:99:3f:b6:92:37:08:e2:45:1c:c6:1c:2c:
56:be:d5:03:2f:64:93:22:a3:3c:1e:93:ab:8c:d5:f7:d9:b4:
ee:bd:58:e7:42:42:2d:98:a6:86:6b:b6:88:e3:32:7e:77:10:
13:ba:3e:5f:61:93:87:81:78:84:ca:40:55:73:07:55:86:b0:
58:68:69:ad:5c:e2:0f:c5:6b:15:59:49:b0:36:9d:43:92:14:
22:df:06:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:52:18 2026 by rpki-client