
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
File: Z1qGdu030Wq7yi_vjqofI_JXsp8.mft (raw, json)
Hash identifier: dN5UQ6ZUIZXVpeEcLjQSvHtocIAhB0TOGcZzBIRCCKM=
Subject key identifier: AB:F2:17:A1:82:E8:11:AB:16:8A:FB:C1:79:0C:D5:F8:CF:A7:8B:CA
Authority key identifier: 67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F
Certificate issuer: /CN=A91D56CA/serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F
Certificate serial: 18F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
Manifest number: 18DB
Signing time: Sat 10 Oct 2026 16:28:33 +0000
Manifest this update: Sat 10 Oct 2026 16:28:32 +0000
Manifest next update: Sat 17 Oct 2026 16:28:32 +0000
Files and hashes: 1: Z1qGdu030Wq7yi_vjqofI_JXsp8.crl (hash: xRiaFwmqUgCDmrYkd2OCEitxw6CyCuB6r4hNHwcFFYA=)
2: A6DF4CF8C34B11ECAFB25A68C4F9AE02.roa (hash: rdOZCJ3dicwt2ZQgE2QnLuQhDeAJoxWmp9bzW22pmwI=)
3: 0EE83FA4C34611EC9290F072C4F9AE02.roa (hash: ZFGFBfx4/7JIn5J81VyjxgzCJGuEFQLjcxwfK1UOBRQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl
rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 16:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6388 (0x18f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D56CA, serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F
Validity
Not Before: Oct 10 16:28:32 2026 GMT
Not After : Oct 17 16:28:32 2026 GMT
Subject: CN=6aca67b1-0451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f6:6e:96:25:34:6b:34:3a:97:bd:37:16:2c:
dd:9c:14:d1:f9:93:e9:7d:18:62:29:56:76:f0:fb:
d1:5e:b5:1e:6b:3e:95:92:8e:80:75:08:d7:c6:1e:
44:34:07:5a:85:ff:12:6f:23:76:13:81:19:1d:88:
d6:f1:5e:13:8e:32:ca:33:1b:35:6e:41:05:8d:67:
3c:e6:f6:61:3b:90:95:c3:8e:41:c0:d3:d3:4c:1c:
82:ce:9c:0e:4c:a6:07:c9:fb:52:b2:89:26:43:07:
0e:3b:ed:1b:8f:25:6a:02:2b:3b:d1:1f:67:35:a0:
02:04:22:5e:3c:98:79:93:30:ce:af:03:7c:41:70:
a0:2c:c1:f0:94:e0:84:20:32:c6:90:87:82:cd:f3:
4a:19:2b:36:b7:5b:85:11:0b:11:a2:f0:50:e5:5d:
98:9a:f3:dc:d3:06:70:c3:9e:3c:1d:17:98:12:83:
96:65:0c:b4:0a:6c:1a:10:a7:cb:d7:17:aa:6e:4e:
b6:93:1d:3e:1d:19:e1:05:53:9c:da:ae:d2:97:05:
c2:af:e5:fe:2d:6b:45:1e:11:9e:14:2c:f1:7a:50:
6d:af:22:5c:55:39:c5:9d:3b:41:82:a6:2c:35:27:
e5:da:5d:6f:06:6a:13:9f:2c:b2:d2:b6:dd:0e:03:
55:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F2:17:A1:82:E8:11:AB:16:8A:FB:C1:79:0C:D5:F8:CF:A7:8B:CA
X509v3 Authority Key Identifier:
keyid:67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:be:43:77:ea:63:15:83:91:26:2f:a8:72:1c:1e:be:71:e9:
42:cd:d5:1e:93:c0:c9:b6:74:d8:87:72:1e:f6:da:08:af:8d:
ab:3a:50:33:e5:1b:3e:2d:1e:46:8d:6b:2e:f2:10:9f:23:84:
25:17:ad:b2:85:2d:d6:34:de:f7:7d:7a:13:72:1e:74:89:ec:
f4:02:a1:6e:b2:63:01:b8:fe:63:96:7f:a9:c6:12:97:10:1a:
b7:a9:ef:2d:5c:6b:a4:6c:8c:02:6f:10:22:35:4a:85:9e:95:
da:11:a8:a9:8b:f3:86:73:a0:9b:7f:ce:4b:06:43:7c:39:ea:
f9:50:07:0e:64:94:fa:14:73:4a:b2:82:ef:20:db:ec:37:31:
a3:db:e0:c3:f8:96:a1:1c:a4:53:c4:ce:fb:c9:19:12:0a:35:
1e:0d:2f:64:a6:0d:46:c4:33:53:8d:24:6a:c7:34:b2:dc:b7:
65:32:52:77:bb:91:67:15:68:20:f2:15:e0:a6:0e:f6:e3:8d:
0c:c7:d2:d7:57:bd:8f:c5:7d:2d:53:94:f5:c1:82:68:f7:cc:
e2:dc:00:53:8c:67:55:d2:63:81:18:1e:df:44:be:82:ad:54:
dc:db:57:80:96:e0:01:21:8f:93:34:e3:49:f9:55:d2:10:14:
25:7b:fc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:34:52 2026 by rpki-client