
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
File: ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft (raw, json)
Hash identifier: xushf4Sx3F1USJveibX3dq+rK8/KXJJRZA2GwpX/9VU=
Subject key identifier: F7:D8:A4:62:E0:BF:F5:AE:45:6C:63:B5:7B:88:A4:A3:D9:1E:C7:BB
Authority key identifier: 65:E0:AF:A4:D1:01:BA:A0:5D:42:5D:EB:7C:25:28:96:CB:8D:5A:86
Certificate issuer: /CN=A91E13CF/serialNumber=65E0AFA4D101BAA05D425DEB7C252896CB8D5A86
Certificate serial: CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
Manifest number: C3
Signing time: Mon 21 Sep 2026 06:49:18 +0000
Manifest this update: Mon 21 Sep 2026 06:49:18 +0000
Manifest next update: Mon 28 Sep 2026 06:49:18 +0000
Files and hashes: 1: ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl (hash: y/SW8K4rajdb5Pm3F/rUgcPTBUJb07jPSlyLu4eSwCg=)
2: D88B7AD48E3511F0A7463923C4F9AE02.roa (hash: uODZblgFbKItTmQLR70yrBmfsX9HkwmHlSn392rNiq0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl
rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E13CF, serialNumber=65E0AFA4D101BAA05D425DEB7C252896CB8D5A86
Validity
Not Before: Sep 21 06:49:18 2026 GMT
Not After : Sep 28 06:49:18 2026 GMT
Subject: CN=6ab0d36e-23e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0b:28:eb:85:9f:9b:69:0d:ed:04:8a:11:2b:
6f:e0:f8:4d:7f:cf:60:c6:7a:95:3d:e5:ce:83:c5:
03:dd:0c:d2:b8:c4:76:35:4e:8d:2b:ca:94:78:aa:
9d:71:af:03:0a:62:07:05:a3:7e:05:83:cd:73:38:
76:11:88:b2:c1:c3:b8:0c:2b:2e:09:ba:52:b8:46:
90:95:03:74:d0:fb:50:87:68:b9:17:2d:92:18:fe:
e3:99:22:f8:da:80:92:bb:8e:4d:4e:83:2b:1c:54:
1b:98:21:be:0a:35:63:fd:63:5e:38:ef:13:e9:3a:
3e:df:e4:7f:f1:9a:26:f4:4e:e7:e8:55:c9:e0:55:
ec:07:c8:85:63:ab:10:d9:54:06:22:9a:d7:fc:89:
72:db:29:35:89:a7:88:c3:4b:38:d2:cc:33:dc:93:
01:27:b5:82:6b:da:f1:57:4f:51:20:da:4a:0b:3e:
02:a9:2b:15:d0:9c:07:e6:b0:93:7d:aa:2c:67:bd:
d7:c3:c2:08:fc:95:b1:3c:bd:d6:5e:4d:49:f3:1c:
44:38:ab:f4:03:33:0e:f0:4f:61:81:6c:be:87:d7:
d0:db:95:79:60:46:de:fd:0b:a3:62:97:c5:1a:63:
c1:98:11:99:32:cb:41:8f:d8:20:2e:7f:86:a0:e3:
1d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D8:A4:62:E0:BF:F5:AE:45:6C:63:B5:7B:88:A4:A3:D9:1E:C7:BB
X509v3 Authority Key Identifier:
keyid:65:E0:AF:A4:D1:01:BA:A0:5D:42:5D:EB:7C:25:28:96:CB:8D:5A:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fa:aa:a8:fd:a0:b3:87:71:78:2c:bb:62:33:bc:03:f0:c4:
3c:57:fb:de:46:75:ae:b4:dc:bc:c4:19:4c:8f:96:5a:54:d1:
93:20:07:40:fa:1a:07:82:ff:38:36:86:7e:b9:08:28:6b:62:
50:f8:1d:e4:67:70:34:ab:af:07:62:21:30:a0:32:b2:67:f1:
3b:5d:15:9d:9e:0a:98:de:dd:15:e6:ea:07:4a:24:3a:8d:38:
cf:66:6f:89:e6:47:23:14:7c:4e:f4:df:50:48:c4:7c:78:21:
6c:8b:1b:07:bb:51:cc:b4:6d:b7:bc:1c:f7:3a:f4:49:81:62:
0f:32:b4:f9:44:15:16:3b:35:ab:da:10:91:5c:c2:ba:a0:18:
89:61:50:dd:e4:a8:2f:ee:ac:90:75:41:ef:b0:e4:cb:08:98:
c4:3b:50:5b:96:d2:92:88:c9:cd:c2:6f:5c:ea:cf:06:53:c3:
9c:e2:1b:14:05:df:54:8a:17:66:cb:8c:3e:b0:bd:a0:2c:8a:
a5:af:a9:cd:22:2e:b5:08:8e:60:a0:5b:ee:13:14:19:b7:dc:
d6:13:ad:a5:b0:b0:95:fe:91:51:80:36:3b:d2:d1:e5:bb:27:
7c:29:cf:e4:1c:d9:5c:5b:f6:5c:36:e9:e6:9c:b0:02:73:ee:
93:ac:49:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:49:53 2026 by rpki-client