
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft
File: z9EY2pb_YF-93yeqSqAmO072edo.mft (raw, json)
Hash identifier: NNqnjUFSbLl+VU5T96cCJExODIGpx0sAccjYuyEuyYw=
Subject key identifier: CE:AE:19:B5:05:8D:EF:FB:76:E9:DA:A9:DE:9D:2D:7B:14:ED:B9:0C
Authority key identifier: CF:D1:18:DA:96:FF:60:5F:BD:DF:27:AA:4A:A0:26:3B:4E:F6:79:DA
Certificate issuer: /CN=A91C9E82/serialNumber=CFD118DA96FF605FBDDF27AA4AA0263B4EF679DA
Certificate serial: 0232
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft
Manifest number: 0232
Signing time: Sat 03 Oct 2026 03:17:01 +0000
Manifest this update: Sat 03 Oct 2026 03:17:00 +0000
Manifest next update: Sat 10 Oct 2026 03:17:00 +0000
Files and hashes: 1: z9EY2pb_YF-93yeqSqAmO072edo.crl (hash: iHec/XtiRvPyAi5sl70HdqyHzUWjvhLjXw27XVxhl60=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.crl
rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:17:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 562 (0x232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9E82, serialNumber=CFD118DA96FF605FBDDF27AA4AA0263B4EF679DA
Validity
Not Before: Oct 3 03:17:00 2026 GMT
Not After : Oct 10 03:17:00 2026 GMT
Subject: CN=6ac073ad-364b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9c:e1:7b:bf:ce:49:72:c1:db:12:10:af:54:
d6:75:bb:8a:da:2f:b3:8f:d3:29:22:12:0c:9e:31:
59:89:08:cb:61:a4:e4:3c:19:fd:d2:6c:ad:87:b4:
6d:01:87:ca:10:e8:3d:f5:15:44:a6:06:d4:a4:8f:
d8:30:94:c7:e9:d1:f8:20:93:ec:40:f5:ad:57:9c:
32:b7:bf:1a:05:fb:af:ed:1b:04:2a:6e:f2:5e:ce:
9c:3f:78:cf:56:e7:f9:bd:7a:95:01:16:f0:7a:66:
b0:62:89:d5:86:55:b1:9d:67:53:d4:0e:24:0a:80:
f9:71:2b:cc:8d:fb:3a:50:99:d6:13:97:e3:cd:44:
97:43:51:98:e3:7e:7e:d5:c6:7b:82:94:f3:a8:34:
7c:c9:7a:0f:8d:68:9b:ba:2f:31:02:09:9d:08:e3:
80:b1:72:21:c7:d3:ca:6b:1d:40:17:2e:9c:b1:8f:
69:21:3c:69:bc:2c:cc:cb:02:1e:f1:3f:7e:6a:99:
00:b7:34:aa:42:d6:5f:ea:65:b8:8d:d6:56:c2:0a:
02:e1:d4:c9:50:d9:6a:7b:0e:1d:b9:ba:41:ed:c6:
2b:84:a1:2e:ca:4e:09:58:61:aa:23:6d:2e:1d:70:
09:26:c8:58:f2:5a:94:3d:55:19:7e:fc:cd:8b:f1:
5a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AE:19:B5:05:8D:EF:FB:76:E9:DA:A9:DE:9D:2D:7B:14:ED:B9:0C
X509v3 Authority Key Identifier:
keyid:CF:D1:18:DA:96:FF:60:5F:BD:DF:27:AA:4A:A0:26:3B:4E:F6:79:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:73:07:93:74:e1:47:76:c2:56:dd:63:62:26:28:bc:74:50:
b3:ff:ca:3d:12:2b:62:85:bf:f0:b7:59:08:56:f8:1c:12:31:
95:3a:d9:3b:31:72:33:fd:bb:50:d8:a2:0d:05:fa:ac:16:d8:
a8:cd:80:e7:ec:5e:3b:07:cf:a0:38:0f:b2:2d:1f:e8:cf:04:
fa:f6:19:3c:e6:68:bc:41:00:fc:e1:e2:33:d7:6f:e0:6a:e5:
28:62:55:82:d5:d0:11:50:f3:8f:70:48:14:ef:f9:e1:b1:28:
ae:96:db:88:63:03:1c:53:58:b0:19:c0:04:4d:2a:d2:fd:90:
54:b0:09:ab:8c:57:97:e4:03:4e:1b:7f:23:9b:6a:62:08:df:
29:aa:ed:c1:bc:0d:94:36:e4:33:32:45:0f:58:1f:10:fb:07:
7d:44:9a:10:e9:ce:94:1a:2b:eb:f0:92:ad:a8:0e:b2:52:7f:
65:7b:36:01:80:59:f4:f1:84:61:70:84:88:cc:42:8d:2f:fd:
d7:b6:be:64:15:4b:22:0e:70:2d:22:b5:1d:08:76:31:d6:cc:
6d:cf:de:78:65:ab:11:1e:55:a3:ae:12:94:2f:d0:f1:eb:4d:
ff:d7:bd:38:a8:57:48:a9:ed:ca:d0:9c:29:da:de:bb:61:b2:
01:11:a6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 23:19:27 2026 by rpki-client