
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/zcNLlJKQexpZ7moAuHtPwhkmqy8.mft
File: zcNLlJKQexpZ7moAuHtPwhkmqy8.mft (raw, json)
Hash identifier: 1ld61iz9Ht0mTyhK4sB2yvr2AmDIPK2AK8iUEs9JueY=
Subject key identifier: 8C:66:89:0B:7C:66:6B:B4:B2:EB:1C:87:E5:5F:19:48:66:E4:E9:67
Authority key identifier: CD:C3:4B:94:92:90:7B:1A:59:EE:6A:00:B8:7B:4F:C2:19:26:AB:2F
Certificate issuer: /CN=A91C51D7/serialNumber=CDC34B9492907B1A59EE6A00B87B4FC21926AB2F
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcNLlJKQexpZ7moAuHtPwhkmqy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/zcNLlJKQexpZ7moAuHtPwhkmqy8.mft
Manifest number: 0A
Signing time: Sun 27 Sep 2026 09:49:07 +0000
Manifest this update: Sun 27 Sep 2026 09:49:06 +0000
Manifest next update: Sun 04 Oct 2026 09:49:06 +0000
Files and hashes: 1: zcNLlJKQexpZ7moAuHtPwhkmqy8.crl (hash: MUQcZi7sg5dKyfrLdo2NPgMjVGK4Z3jzJ0B/ZKwkVcU=)
2: 9D9BBE06B11711F1804AF5374511F970.roa (hash: /QR8B/WV3tnFJ5ZLzdG6QBvzbzr2LZpMKJKxqq3gaHs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/zcNLlJKQexpZ7moAuHtPwhkmqy8.crl
rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/zcNLlJKQexpZ7moAuHtPwhkmqy8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcNLlJKQexpZ7moAuHtPwhkmqy8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 09:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C51D7, serialNumber=CDC34B9492907B1A59EE6A00B87B4FC21926AB2F
Validity
Not Before: Sep 27 09:49:06 2026 GMT
Not After : Oct 4 09:49:06 2026 GMT
Subject: CN=6ab8e693-7efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ff:1b:9b:9a:5d:24:02:72:4a:0e:7c:00:18:
db:ce:b3:f0:8a:e7:c4:e3:5f:a7:de:07:52:27:f9:
44:92:42:9f:b9:57:e3:69:5a:1b:2b:5f:49:13:21:
c9:7c:43:d0:af:0f:01:f0:f8:b0:05:04:d6:f6:2c:
b3:15:59:92:6d:d3:a7:30:65:16:ed:c0:03:ad:af:
9c:ae:d7:9f:c6:0a:ea:a7:6c:2a:e5:bb:31:22:6d:
b0:e0:62:ea:ea:fd:f1:02:45:4a:92:21:1d:ee:8b:
01:99:93:f0:30:99:fe:65:c1:ee:59:3a:4b:55:e3:
17:5a:c2:08:e7:63:7e:63:02:84:a8:11:ec:c5:62:
c6:86:19:96:ef:ba:f2:6f:29:5a:c9:65:a7:1e:8f:
49:6a:a2:e0:4d:06:a0:cc:ff:72:57:31:e1:b2:44:
62:81:0b:cb:5c:d6:3b:d3:2f:64:9b:e6:0a:6b:ed:
b0:4c:13:6d:94:00:80:37:ed:56:01:50:9c:7f:3e:
60:b5:62:84:9a:f6:7c:61:94:da:49:eb:12:39:91:
00:38:70:dc:67:6d:3c:1d:fb:bd:c5:8f:64:b7:0f:
b2:b3:40:68:a0:4e:f4:d8:5d:48:98:d4:57:3a:a3:
e4:2f:ed:91:ac:7a:72:93:64:a1:24:19:28:ab:dd:
43:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:66:89:0B:7C:66:6B:B4:B2:EB:1C:87:E5:5F:19:48:66:E4:E9:67
X509v3 Authority Key Identifier:
keyid:CD:C3:4B:94:92:90:7B:1A:59:EE:6A:00:B8:7B:4F:C2:19:26:AB:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/zcNLlJKQexpZ7moAuHtPwhkmqy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcNLlJKQexpZ7moAuHtPwhkmqy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/zcNLlJKQexpZ7moAuHtPwhkmqy8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:49:cf:53:1c:2f:27:48:89:14:44:44:22:97:d7:da:63:e8:
35:64:b4:0d:95:2b:fb:fe:e6:05:17:0f:60:dc:5b:32:6b:f4:
97:fa:40:59:cd:79:6e:58:04:c3:5e:aa:03:86:66:84:4d:c8:
28:87:5c:e6:22:84:fd:69:77:e7:f2:df:21:ab:76:8c:38:50:
68:b6:9a:6a:07:59:ad:c7:2f:69:cd:20:ff:37:51:65:6a:fc:
1a:f1:34:65:b8:a9:8a:9e:11:54:ec:db:59:96:ba:db:69:cf:
ce:bc:f3:4f:af:09:75:77:02:97:1f:53:5f:18:cf:8f:e9:c1:
84:ff:8e:36:bf:ae:3f:39:f2:6b:25:8c:38:7a:22:09:63:23:
78:06:36:39:ad:92:0d:3d:da:73:eb:8a:68:4c:cd:6b:db:65:
9e:41:35:04:99:7d:ae:1b:5b:9f:f2:6f:13:90:76:3c:ac:aa:
30:f2:ab:e5:77:e1:fd:b1:4f:05:0f:7f:6a:43:d0:69:9f:1e:
cc:fc:7b:ae:29:4f:de:40:56:f0:24:c6:56:00:71:78:2f:29:
02:d8:b5:3f:b6:da:4b:2c:ea:64:1b:be:90:84:8a:f4:92:c0:
84:2a:ce:68:35:2e:48:00:bf:4f:e1:39:9b:6f:4c:26:d1:a2:
af:00:b7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:30:30 2026 by rpki-client