
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft
File: ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft (raw, json)
Hash identifier: Ka/bR7mlDiBbeR0+ldqXdLEhK9ip00VoTitlruwFmp0=
Subject key identifier: 21:09:66:6D:D2:51:DF:25:6A:EC:38:17:2A:7A:63:3F:59:A1:09:0C
Authority key identifier: 64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F
Certificate issuer: /CN=A91D8A94/serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F
Certificate serial: EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft
Manifest number: E1
Signing time: Sun 15 Nov 2026 06:49:04 +0000
Manifest this update: Sun 15 Nov 2026 06:49:04 +0000
Manifest next update: Sun 22 Nov 2026 06:49:04 +0000
Files and hashes: 1: ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl (hash: v2YKOCsR3fmgZekBDob1+ha2MOgQ5AH90m4jog2/FYg=)
2: B57E9D8C98D511F0912EFD62C4F9AE02.roa (hash: 4nKg+X7JGFIuP3mpoxMRrEp0mp4b6ki1NFU060UN+wQ=)
3: W6NdVPjvVbHf_uh7B-JzCFXRMKI.asa (hash: F8+S6NNolT5zv1AuCWs0wXYBh/1JLmdoGgHQKX9Q89U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl
rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 06:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8A94, serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F
Validity
Not Before: Nov 15 06:49:04 2026 GMT
Not After : Nov 22 06:49:04 2026 GMT
Subject: CN=6af955e0-584f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:5f:ee:52:6c:aa:ed:a6:ed:00:50:d3:63:
8f:2b:c8:41:cc:ca:db:c4:b0:ab:24:05:eb:64:d3:
07:0a:62:67:20:84:c1:2a:a4:61:01:ac:7c:47:6a:
85:b5:a5:68:ae:9b:3d:99:b1:bf:83:29:e1:e3:2e:
4d:32:16:dd:33:fe:da:75:52:4d:76:68:3d:79:a5:
19:2f:7d:46:fe:e5:a3:2c:aa:bb:9d:3c:03:16:47:
e0:60:86:54:44:a9:3a:dc:af:19:a1:63:c1:9a:7d:
7e:67:c8:38:0c:02:68:fe:d4:3a:ca:a1:00:95:38:
04:4b:e3:20:1b:41:cb:b6:8f:10:c4:fc:15:2d:93:
c1:63:03:88:fa:84:93:78:7a:05:11:22:91:58:87:
d7:15:6f:8d:35:d7:58:a4:78:86:c5:b0:de:4a:26:
82:c6:bd:dc:fa:2a:8e:6a:2d:4e:0e:6f:05:26:df:
ad:a1:2d:b0:9f:a3:eb:07:27:4b:e2:3b:8d:cd:a3:
e1:47:66:5f:fd:de:47:45:04:4f:ba:d5:48:2a:79:
87:b3:2f:3b:c2:82:ba:a6:80:c5:ce:db:1f:fe:df:
f2:84:88:64:63:d9:03:1f:d3:24:b9:74:2f:38:61:
dc:48:3b:a4:29:d8:c7:37:9b:b2:aa:d0:05:c0:38:
2f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:09:66:6D:D2:51:DF:25:6A:EC:38:17:2A:7A:63:3F:59:A1:09:0C
X509v3 Authority Key Identifier:
keyid:64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:04:af:38:80:e4:dc:ad:7f:44:35:e5:73:08:31:66:64:a4:
01:74:bd:76:ae:4b:7c:4b:3d:98:e9:89:81:20:68:cc:4c:7a:
5a:35:d5:53:63:8f:a5:e9:fc:2d:0d:a9:3d:c6:f8:20:ae:49:
5f:7b:68:7b:03:77:e0:a5:07:3e:35:6d:eb:1e:1f:ad:5e:4f:
9c:e4:eb:7c:50:3d:7b:79:6f:31:20:15:6d:54:11:61:2b:85:
02:00:1c:19:cf:37:93:c2:a8:d0:24:ae:c0:7b:83:26:8d:32:
05:1d:49:8f:9f:24:c8:89:61:c7:63:f7:42:6c:79:b0:4b:e7:
6b:f7:ad:d3:14:9f:be:af:d8:7e:33:83:b4:72:23:71:6e:b2:
38:f3:b7:df:72:cf:6f:8d:61:fd:f7:98:d2:59:c8:dd:14:42:
20:6e:af:7a:37:86:ed:ba:f2:07:b7:d4:8a:32:04:a8:96:3a:
69:01:d8:c5:2d:94:71:03:8f:c6:5f:0a:56:64:b5:b6:52:a8:
44:98:a8:41:ab:da:17:a0:47:77:32:3f:4c:8a:aa:22:b0:74:
ac:75:19:23:d9:8c:c2:c9:fd:a8:c2:1c:ca:a9:6f:e5:7d:af:
5a:b6:72:4a:fa:ed:8b:0c:7e:cd:20:22:f0:5c:f4:84:2b:69:
e3:92:ba:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:31:39 2026 by rpki-client