
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft
File: ZgXWapgEftsGpJSzdC9eyCuB3LA.mft (raw, json)
Hash identifier: sZy/Ay3eJ4Ug1VtYZEHeWjKgZ6vfOXHpxefCeG7pzgE=
Subject key identifier: F7:D9:3A:B3:F1:76:49:E9:E3:C8:7A:CA:F4:AA:D8:A3:3E:71:A7:05
Authority key identifier: 66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0
Certificate issuer: /CN=A91E22E3/serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0
Certificate serial: 01B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft
Manifest number: 01B6
Signing time: Mon 21 Sep 2026 03:56:20 +0000
Manifest this update: Mon 21 Sep 2026 03:56:20 +0000
Manifest next update: Mon 28 Sep 2026 03:56:20 +0000
Files and hashes: 1: ZgXWapgEftsGpJSzdC9eyCuB3LA.crl (hash: w8VnSbii5UYfa14+ER4RjAgZgnqMJUs3kP2BY0ayro8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl
rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:56:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438 (0x1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E22E3, serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0
Validity
Not Before: Sep 21 03:56:20 2026 GMT
Not After : Sep 28 03:56:20 2026 GMT
Subject: CN=6ab0aae4-b17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:01:96:54:0c:71:3b:82:cc:c4:c2:04:5f:ba:
db:53:df:ce:9d:38:05:21:62:cd:40:af:85:58:4c:
60:a0:c5:da:20:98:7e:46:7c:98:62:56:c2:2d:20:
17:72:60:d2:64:48:5b:ee:a0:aa:20:f5:ec:e0:b8:
dd:14:45:7a:97:1a:c1:d3:dd:74:78:12:ec:b7:7d:
2a:37:c8:ab:8e:af:da:08:8a:01:0f:6e:7a:04:1c:
c6:e3:19:24:a5:2e:cc:f0:b4:99:e9:e5:e7:3b:27:
fa:42:27:d6:dd:e7:b4:ae:c9:b5:4c:f7:1c:39:db:
4d:db:0e:4a:43:ce:18:96:28:6c:f8:53:18:a2:57:
ec:f1:b0:e6:d8:13:06:c3:e6:dd:18:8e:e2:be:65:
fb:c6:44:99:d4:e6:91:ba:71:25:e7:42:4e:91:1b:
3e:c0:0c:75:99:3c:7c:7a:91:00:d2:6a:94:e3:6b:
5d:ee:ae:3f:9b:26:fb:d7:cc:f2:07:03:d0:4f:9c:
96:75:c5:8a:27:40:df:f5:b0:50:0e:20:4e:77:b6:
72:a7:62:be:53:e2:f9:64:8d:8b:47:f4:39:65:ed:
e1:87:ea:a6:84:cd:da:0e:49:77:62:44:a3:c2:6e:
32:45:4e:d8:4f:f7:2a:fe:cf:de:09:c6:69:9f:86:
38:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D9:3A:B3:F1:76:49:E9:E3:C8:7A:CA:F4:AA:D8:A3:3E:71:A7:05
X509v3 Authority Key Identifier:
keyid:66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:07:06:0c:d4:b2:94:cd:98:6d:71:74:39:82:69:5f:cc:55:
4c:1b:eb:9a:23:08:94:14:8a:91:37:e9:b4:00:b4:9d:96:d6:
50:49:41:3c:e1:51:81:26:5e:ea:b1:3a:55:91:fc:75:8e:f0:
08:22:9e:7f:1d:6b:90:89:e0:b1:3a:a4:d2:61:59:ad:c1:f2:
13:79:ac:59:40:9d:00:45:c0:73:0f:47:f0:d9:a5:d8:63:41:
5a:e7:d8:60:11:39:97:86:e7:78:c6:b2:ab:8f:e9:34:0f:9d:
31:af:39:13:6c:2b:0f:3d:62:9f:ec:5d:7f:86:b8:7f:d2:bc:
da:dc:6e:68:b6:5c:62:ca:c2:8c:d0:81:04:be:e4:9b:99:06:
ea:12:71:7b:c4:b7:2d:ee:27:ff:85:2c:be:05:b3:c2:3e:79:
2f:68:59:16:c6:5c:3b:c0:b2:62:a6:c0:cf:18:62:02:ce:db:
1e:e4:94:bd:c9:21:3f:14:31:04:6c:8b:de:eb:8f:92:79:0b:
31:4b:8f:a5:84:5e:7f:29:0b:79:4b:71:73:b6:1b:8d:f6:b3:
fa:5d:88:a9:06:36:20:c9:b7:c7:97:56:ac:fd:43:cd:a0:fb:
7e:a4:3d:3c:28:4c:ea:e7:ee:4c:fd:38:1b:f6:b1:1d:c5:3e:
27:74:36:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:58:48 2026 by rpki-client