
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
File: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json)
Hash identifier: x8zgnqPPqUFkHZP9kYd5wIgYvciQc07kwO69WohpxB0=
Subject key identifier: BC:86:DD:F2:85:3D:D3:C2:C2:E0:B2:36:9B:43:33:5D:29:A2:BE:8A
Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29
Certificate issuer: /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529
Certificate serial: 017F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
Manifest number: 016F
Signing time: Wed 23 Sep 2026 04:41:03 +0000
Manifest this update: Wed 23 Sep 2026 04:41:02 +0000
Manifest next update: Wed 30 Sep 2026 04:41:02 +0000
Files and hashes: 1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: hO/F4dLH+FFPCFA6PoCxbJZDeo1yRXABzKxK6yfK6iE=)
2: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: A7rSSZVeM5zH7Lu6nq0wtI2MJAwPFWQR7zTSTecfo9k=)
3: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: XAAQs6VvWW3MlpS05j2NWzqBVUmAKDnHpobUBOoE4/o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl
rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383 (0x17f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529
Validity
Not Before: Sep 23 04:41:02 2026 GMT
Not After : Sep 30 04:41:02 2026 GMT
Subject: CN=6ab3585f-849d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ae:33:80:ef:06:d5:47:29:2c:5f:88:fb:d3:
a4:3d:d3:36:b0:ad:7f:05:23:9d:1f:50:f8:82:2b:
b7:95:9e:86:89:0a:77:6c:83:fc:70:8e:63:a3:91:
4a:51:0c:76:24:63:a9:ab:24:03:9d:0c:e8:06:7a:
c3:61:75:c3:e5:41:af:98:18:4f:2c:3c:87:1b:18:
e0:49:b6:81:1f:4f:0a:f3:a4:d9:45:a4:22:3d:a4:
6d:1f:51:a3:ca:72:eb:68:c3:d9:51:b2:13:b8:a5:
0b:f9:6c:9b:17:19:46:b0:59:08:d7:42:3e:3a:45:
d6:ca:c4:69:d7:c1:81:fa:2c:cc:93:ed:f3:7f:2b:
8e:2d:bf:fd:50:c5:cb:6c:81:32:f1:b3:0a:be:d0:
3c:cd:4c:7a:05:64:16:dd:ae:7b:f2:80:3c:a6:52:
46:f5:50:d9:28:43:c2:8f:54:4b:b6:10:84:b6:03:
55:3c:f2:68:45:c4:54:7d:8d:37:d8:29:03:f0:9d:
14:a4:77:9d:2f:0f:01:56:8d:b1:4f:a8:79:6f:19:
b9:66:2c:a9:b7:2f:ca:45:cf:41:ab:81:f3:24:47:
9d:53:e0:8e:87:3a:bd:94:16:97:d9:24:af:cf:92:
8c:bc:4e:10:ee:d3:54:5a:15:11:38:17:93:c8:51:
4f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:86:DD:F2:85:3D:D3:C2:C2:E0:B2:36:9B:43:33:5D:29:A2:BE:8A
X509v3 Authority Key Identifier:
keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:cc:23:03:ca:87:c3:a0:8f:d2:a8:24:62:db:28:19:1c:13:
97:2f:b5:ab:82:fa:37:a1:d5:cc:86:92:39:22:37:3c:c1:fc:
1f:99:08:f4:f1:0e:ba:29:cc:00:01:e1:fe:5b:b5:71:b6:32:
06:ac:df:19:ea:a9:a3:5e:7c:7b:8d:4a:db:8e:c9:b4:c8:4b:
15:ad:6e:b7:d0:1e:4c:07:78:ca:c7:cd:b4:45:7f:63:7e:98:
08:f3:b6:c5:40:57:38:c2:ea:67:ab:0a:0d:36:0b:bf:6b:da:
d3:f7:fe:a3:ed:d1:d6:b8:95:8c:f4:14:97:f7:49:99:77:10:
25:e8:e1:75:bd:06:c7:23:71:56:de:c0:85:a2:b9:ac:14:07:
26:c8:25:36:0c:bc:ad:a2:f0:86:8e:19:74:c5:d2:74:63:55:
ce:ee:b0:13:90:ff:a6:4f:6e:06:3b:60:31:c5:03:a1:0d:db:
a4:6b:73:64:f2:40:31:eb:a7:b6:22:b8:ba:2d:cf:e0:1b:fb:
d3:55:3e:1d:32:d4:47:2f:9b:c4:a3:b3:e6:38:ac:94:c8:2f:
84:31:dd:7b:ff:28:f9:7a:ae:b3:52:ec:ef:2e:73:ba:22:4e:
70:02:8f:1b:5a:16:f0:0b:3b:58:87:7f:99:ce:17:a7:85:0c:
93:d2:f9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:56:26 2026 by rpki-client