
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft
File: Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft (raw, json)
Hash identifier: ZWWFfow+95HLMYoCu7VjTLry5mQ4C6Z6MFfqcAZoVrA=
Subject key identifier: B0:3F:D3:CB:B3:42:80:45:5A:78:FC:5A:07:8A:E0:D8:33:D8:04:99
Authority key identifier: 09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF
Certificate issuer: /CN=A91E9D0C/serialNumber=09DE1967E952EE8E1B2DD60F88F63BA2605753EF
Certificate serial: 05E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft
Manifest number: 05DD
Signing time: Sun 20 Sep 2026 22:51:24 +0000
Manifest this update: Sun 20 Sep 2026 22:51:24 +0000
Manifest next update: Sun 27 Sep 2026 22:51:24 +0000
Files and hashes: 1: Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl (hash: tFH+qUmU7kj/IM4nB2mVcLX9wqFWanHi4UdZ72UHvQg=)
2: 630BCB6E1A1D11EC99B84C20C4F9AE02.roa (hash: 7sdaRztYfffuMPbpIvWHbP2AaEjIDw99pX3bZR2f4wQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl
rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:51:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1510 (0x5e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9D0C, serialNumber=09DE1967E952EE8E1B2DD60F88F63BA2605753EF
Validity
Not Before: Sep 20 22:51:24 2026 GMT
Not After : Sep 27 22:51:24 2026 GMT
Subject: CN=6ab0636c-284f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6c:29:9c:e4:20:c9:08:74:00:b0:ad:9a:4e:
4e:a9:34:df:84:c7:d5:5d:b1:13:ef:bd:12:0d:59:
46:a1:42:69:c9:d6:3e:33:31:dd:9d:cf:4d:2b:3b:
d4:91:ef:c0:89:55:32:aa:a3:3a:34:6d:ad:20:c2:
7e:c0:52:f1:97:ca:ab:28:48:7f:89:63:43:f2:35:
c5:8a:dc:de:0b:a5:7b:7e:d8:3d:1c:62:9a:93:a1:
f1:91:5e:f9:f0:85:47:c1:e3:89:62:9f:49:f1:ee:
17:53:50:f2:f8:0d:f3:f1:7d:aa:fd:d0:6f:90:48:
08:76:f3:61:50:e6:73:dc:16:3e:bd:2f:d8:e4:f8:
a6:f3:35:b3:e3:b0:ff:c6:da:4e:cf:4a:ca:41:a3:
c6:82:fb:dc:ed:44:3a:51:d0:00:85:25:72:4a:05:
8a:b2:94:63:54:26:83:e1:7d:c8:a6:47:46:5a:ed:
20:cf:5c:e7:15:56:2d:98:dc:10:02:61:52:a6:eb:
b6:ef:97:ca:59:89:44:c3:e6:b7:fd:5e:62:88:d5:
8d:d8:9e:58:d7:77:55:4c:a1:b6:16:ef:e6:43:c7:
80:27:5e:d9:dd:fb:25:a2:15:94:d8:50:21:e6:13:
a5:10:6c:7d:6c:eb:9a:26:8a:ad:91:37:ae:77:cd:
94:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3F:D3:CB:B3:42:80:45:5A:78:FC:5A:07:8A:E0:D8:33:D8:04:99
X509v3 Authority Key Identifier:
keyid:09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:1b:fc:40:2d:ba:4f:58:9d:ef:36:e2:48:ba:a9:c8:78:80:
78:44:6a:fc:e9:3a:6f:19:61:de:44:2b:00:28:58:35:a6:2a:
91:f6:be:2b:31:24:df:e0:54:05:3a:15:56:ea:59:f0:98:3f:
28:fb:1b:33:36:57:50:74:66:69:59:5d:da:2a:07:ca:96:41:
c4:0a:4d:bd:da:8a:c3:5e:e3:b5:05:70:c0:e6:2a:f1:ad:a4:
56:8b:42:4f:8f:c7:67:09:9a:de:f2:99:ea:ea:ea:c1:a2:f5:
c7:7c:fc:21:68:5e:8e:97:b4:5a:3c:18:de:1a:bd:66:47:03:
50:97:5f:e0:0c:49:2e:9b:da:8c:4e:83:6c:19:93:f9:e3:f8:
e3:a0:31:86:58:1e:90:cb:63:f4:9d:90:2c:55:a3:d1:9b:af:
99:89:e0:be:8d:0e:20:49:d3:26:c9:a7:cf:77:6c:21:1f:64:
4c:23:ef:1e:c9:42:45:80:70:3e:90:95:e8:32:76:7f:22:e8:
1e:3c:9c:b5:0a:46:2a:3e:f6:6f:15:a7:c6:41:00:94:ba:4b:
1a:98:19:d3:68:5c:9b:84:7f:c9:21:e2:a2:86:f8:c3:df:85:
17:31:1f:77:44:27:25:a3:af:77:67:a0:0e:fa:b9:a8:86:e5:
e9:3a:36:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:31:11 2026 by rpki-client