
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft
File: ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft (raw, json)
Hash identifier: /OnPa2gSsJlYVwK/oIk7OjCMTejorENoB9tn4Pq3HmY=
Subject key identifier: 6E:54:82:BD:E8:D6:08:9D:47:56:DB:F3:8B:84:BC:13:CC:45:AE:5E
Authority key identifier: 65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0
Certificate issuer: /CN=A91C3869/serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0
Certificate serial: 0CD4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft
Manifest number: 0CC5
Signing time: Thu 24 Sep 2026 18:30:39 +0000
Manifest this update: Thu 24 Sep 2026 18:30:39 +0000
Manifest next update: Thu 01 Oct 2026 18:30:39 +0000
Files and hashes: 1: ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl (hash: fNPuO1usK48XliPQHx9FJMPxMpFEjgByzh5Oij9zHGo=)
2: 9D8E0AF4E18C11ECB1697F55C4F9AE02.roa (hash: k/Dtkdo/ASwNUW0b7Vf+PXcxj0dpm2I2YrIKuMX9lpU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl
rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3284 (0xcd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3869, serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0
Validity
Not Before: Sep 24 18:30:39 2026 GMT
Not After : Oct 1 18:30:39 2026 GMT
Subject: CN=6ab56c4f-5ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e3:9e:c2:78:bd:25:0f:30:c3:9e:7b:47:24:
ef:7f:5f:e1:4b:f9:63:d6:7f:76:5c:b8:d5:15:be:
59:ac:6b:c3:1e:5e:82:88:99:e5:73:73:86:ae:44:
98:f5:7f:da:7d:fb:fc:3e:1c:0a:38:c9:bd:6c:ae:
de:b4:e4:af:ee:4d:f8:fc:a4:b1:93:2a:a3:de:1f:
8b:56:94:6d:bf:6a:27:b8:dc:9a:05:d6:36:aa:5f:
dd:4e:b5:b7:e1:40:7e:af:3c:d3:0c:5a:44:15:10:
d5:41:df:27:ff:c6:03:3f:0f:9a:85:81:f4:f7:fe:
2d:e4:25:62:13:4b:88:f5:d2:d5:eb:30:1d:d9:b6:
9a:76:e8:ae:b8:89:82:d8:41:a6:1d:bd:18:de:3a:
20:cd:7d:b7:3c:60:f5:ec:71:7b:b3:64:bc:a9:c6:
f3:d0:5c:b9:89:77:b0:41:98:f0:9d:15:ad:e8:38:
7c:39:cb:19:c2:a0:3c:5d:d8:b9:aa:84:60:61:04:
23:39:82:33:bf:de:41:51:01:96:31:53:b5:03:20:
ce:4c:e7:32:66:a6:97:db:57:d8:97:55:ed:51:e0:
5f:df:5d:27:27:72:09:4b:a8:ac:51:ff:7c:88:fd:
a3:fa:6b:f3:8a:02:b1:56:c7:88:9e:47:6e:4f:1f:
47:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:54:82:BD:E8:D6:08:9D:47:56:DB:F3:8B:84:BC:13:CC:45:AE:5E
X509v3 Authority Key Identifier:
keyid:65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:20:8a:af:73:c2:80:80:90:14:b5:2d:06:e4:0d:d3:2b:99:
96:6d:ab:3b:46:5e:ab:a7:79:67:eb:86:af:13:de:4e:ea:62:
44:da:de:af:97:c6:bf:98:83:f7:1d:e6:de:b3:66:ed:38:06:
10:6f:13:b9:06:24:f4:77:3c:ff:cd:26:eb:ef:3c:b4:c0:f8:
96:81:6c:06:3b:70:3c:95:fa:ac:48:b7:65:5b:9d:da:17:95:
94:ce:ad:15:a5:ca:21:6c:07:3d:b6:87:7a:b1:6a:4b:25:4f:
01:38:68:38:0f:ac:b9:3b:db:e5:81:5d:10:aa:6c:73:a3:15:
ef:0b:e3:50:8c:8e:c8:10:ac:37:46:18:03:8e:75:75:2d:96:
d6:23:61:c2:68:6c:7a:29:23:44:16:ee:52:f1:53:b7:23:08:
ad:e2:32:d5:5f:d3:bc:0f:ae:6c:5a:77:b0:cc:09:34:3c:54:
c2:ae:9f:09:90:0e:f9:68:a7:fa:71:3d:a1:bf:08:dc:29:fb:
cf:2c:a0:44:03:52:e2:f0:a7:a1:b8:c0:46:b7:f4:4f:cf:3e:
e0:15:89:8e:d6:82:a6:f1:67:58:6a:57:f6:cf:4c:ba:d1:02:
c9:3b:11:3a:4d:0f:78:a3:8f:0d:5e:73:d2:17:95:90:7e:89:
ba:be:9d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:33:49 2026 by rpki-client