
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
File: cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft (raw, json)
Hash identifier: 0o0jQC6A3Ho12TUQ8G3Jk4ITpRw+wpIdDKkkdnDXGnk=
Subject key identifier: EB:9B:03:E6:A9:18:8A:28:33:C6:4E:87:99:EA:69:69:56:96:7F:5C
Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Certificate serial: 064F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
Manifest number: 060E
Signing time: Mon 21 Sep 2026 05:26:32 +0000
Manifest this update: Mon 21 Sep 2026 05:26:32 +0000
Manifest next update: Mon 28 Sep 2026 05:26:32 +0000
Files and hashes: 1: cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl (hash: U+ubVlXRswrkYWQVqfnefs45yeEHkR3Jj8PqkSCVVrc=)
2: 45A587CE540911F181B8BB5591833773.roa (hash: tHX02Ge/HSWD6wrR/8JkpM5CyXcYX10IE87OI0QCTUo=)
3: B3110B8E5D6F11F181938A5ABF833773.roa (hash: 88VWidR+c8KxMwBLDiaixZqZwAYAjFYw2RjtohjUp1A=)
4: 345F56F87FE311EF80C0F71FC4F9AE02.roa (hash: qDBbxutM6whAYRqUGL23M9IPWqduEyKAvV9efNJXIMw=)
5: FE0D3F76B57C11F19ADFCA4A6711F970.roa (hash: bwdMaBLK0kDQ5a9IZEE6mEH7C45WPKGfvB87UZVm0h0=)
6: C2D59C44559811F196E9B1D195833773.roa (hash: rPQ29Js0otbpC2kfjei1QmK5a7iDC6noRtlg8ljKwUg=)
7: 5778FB08922911F1B1965EDD6A11F970.roa (hash: vkT0Co848XgmWcMvxPBj3JvFfA8woQU/yLqI+8Rvtxs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:26:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1615 (0x64f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Validity
Not Before: Sep 21 05:26:32 2026 GMT
Not After : Sep 28 05:26:32 2026 GMT
Subject: CN=6ab0c008-22d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:35:b8:f7:27:63:80:d8:50:32:bd:e9:6f:3d:
0d:d8:da:aa:a8:7b:af:76:33:ba:99:b5:e1:c1:6b:
1d:53:d9:ea:75:c1:de:74:b4:34:aa:4c:1d:8e:13:
6a:75:e4:89:f0:5f:40:89:82:3d:eb:f3:cd:dd:c2:
09:3e:23:fb:54:6f:df:5b:93:6c:7b:2c:35:34:a9:
3b:27:fe:ff:77:08:1d:cd:bb:35:e3:8d:42:74:2f:
ee:94:4f:0b:18:2e:35:97:08:b4:02:58:66:e3:5e:
3f:4b:3a:67:93:1c:cb:e8:4d:7b:da:ee:49:0e:f2:
a1:cd:e7:9f:73:bb:b0:10:d8:55:75:24:61:21:e8:
71:e6:d0:ae:b3:3c:74:52:7c:77:28:6c:41:71:59:
91:72:62:71:ca:71:92:74:8a:f9:65:dd:05:be:1b:
f6:fa:0f:ce:c9:af:30:b6:3d:30:2e:77:7b:ca:aa:
9c:20:bc:94:45:93:ec:80:a0:12:26:09:0a:91:4d:
eb:c6:e1:4f:b2:37:cf:37:58:db:d6:05:24:cc:77:
d3:22:bf:62:62:3f:a5:8c:14:32:80:22:b3:11:8a:
6b:27:98:b4:78:1e:e5:10:c3:f2:a6:04:41:94:23:
b0:78:7d:e0:1d:fa:c1:67:04:9b:4f:6c:ec:c6:8d:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9B:03:E6:A9:18:8A:28:33:C6:4E:87:99:EA:69:69:56:96:7F:5C
X509v3 Authority Key Identifier:
keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:30:6f:71:c0:2a:63:7a:62:58:3d:af:dd:c4:64:1e:e5:54:
b5:fc:0d:ed:da:88:dd:8a:f5:94:57:df:d2:0d:27:08:9b:53:
68:aa:fe:3c:56:e3:18:3e:6a:f6:da:8c:10:01:b1:49:55:61:
64:4f:1b:1e:ec:21:6e:84:ce:f8:58:b7:b8:dd:79:1d:a0:c7:
6e:e7:bb:4e:8b:15:a5:b6:2d:7c:83:2f:d3:c6:b9:a1:d7:d5:
08:04:8b:53:75:5a:54:9a:5c:6f:f1:bb:fe:57:bf:bf:59:6e:
6c:c5:15:b8:28:a8:06:1a:e0:cb:f4:84:01:8e:f4:83:71:cf:
6a:56:29:8a:87:b3:30:0c:1c:70:c8:0b:41:8f:9b:3a:5d:dc:
c6:6d:81:c3:c8:cd:d7:5a:05:22:86:c3:6c:a8:c3:ce:5a:3e:
15:8b:f6:93:de:01:38:ba:36:c4:0f:42:54:3a:f8:33:95:a6:
aa:11:19:16:da:74:c8:6a:9f:9d:9f:ca:a8:78:83:6d:f6:96:
e7:27:48:cb:26:b0:0a:b7:2b:78:d9:db:60:97:0b:f7:52:a2:
53:f2:c9:90:a2:07:c1:7a:33:d6:27:f9:8f:3a:30:52:99:08:
04:fa:5b:79:98:e5:34:f2:27:3b:54:17:44:3d:5e:60:8d:4e:
cb:19:59:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:28:03 2026 by rpki-client