
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
File: Zw46BnIWhKtHO7vlzCLPBdAkv20.mft (raw, json)
Hash identifier: 6BrAfAPlNPQCd7A+xl57gmpc74JXfbOonBUaS89jivI=
Subject key identifier: E2:4E:52:EA:DA:00:61:6B:BA:77:93:C3:D6:DF:DF:0D:60:62:43:94
Authority key identifier: 67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D
Certificate issuer: /CN=A91EAE0A/serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
Certificate serial: 015F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
Manifest number: 0155
Signing time: Fri 25 Sep 2026 05:19:12 +0000
Manifest this update: Fri 25 Sep 2026 05:19:11 +0000
Manifest next update: Fri 02 Oct 2026 05:19:11 +0000
Files and hashes: 1: Zw46BnIWhKtHO7vlzCLPBdAkv20.crl (hash: x7EQV3h0oTKAB5PEvK1tnd7AY7OVjNWPuLPPzyOyA10=)
2: C491ED725A7A11F083B3F885C4F9AE02.roa (hash: 7WBAHsig/Kovz/pUrk3p+Cxc7oQA5m4kNqg7vSnWYU8=)
3: 2018750A5FC411F0ACE3A087C4F9AE02.roa (hash: R8o39adrmBVnGQ0//ScQ4qDFf9KvWQlMZLY/6u7Uyoo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl
rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 351 (0x15f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE0A, serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
Validity
Not Before: Sep 25 05:19:11 2026 GMT
Not After : Oct 2 05:19:11 2026 GMT
Subject: CN=6ab60450-b2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:53:13:f9:6e:37:7b:96:70:11:48:f4:f2:1e:
c8:62:60:a0:7f:28:ef:92:3f:ee:4e:22:57:20:0f:
ea:0e:21:69:60:d0:68:98:e2:1c:ab:af:d2:73:89:
43:ea:7e:1f:47:83:64:94:38:ec:74:ec:60:f6:9c:
f9:3f:86:b5:19:0c:9c:ff:61:58:27:89:07:0a:00:
42:88:cd:22:af:47:35:25:59:ac:55:92:ee:f4:c7:
f4:df:bf:67:af:c4:09:24:e1:b0:a3:38:9d:6b:e1:
fd:8c:5f:d4:23:40:fb:87:79:8d:9a:df:68:5c:31:
50:48:13:21:7e:c7:a1:b6:d3:b9:f3:7c:e3:c8:82:
6b:c6:8e:45:c2:43:11:76:8e:6f:c9:c9:69:eb:1b:
23:5c:de:08:a4:73:22:ce:95:d4:bc:28:5b:c9:87:
9a:ca:36:0a:61:92:b7:2e:ae:c2:97:5b:a9:3e:0d:
d6:50:40:0e:f0:58:a4:ce:29:17:e8:91:04:b2:20:
83:8f:48:ae:11:1d:6a:8b:73:62:4f:cf:f8:fd:d5:
27:c4:85:4e:e4:aa:c4:63:31:c6:9c:f9:04:87:3c:
1e:ca:a9:bf:4a:a1:d5:cb:54:cb:e1:bf:de:c4:ee:
a1:d0:dc:06:99:b6:f1:2d:2e:f6:98:f7:fb:c2:fb:
d9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4E:52:EA:DA:00:61:6B:BA:77:93:C3:D6:DF:DF:0D:60:62:43:94
X509v3 Authority Key Identifier:
keyid:67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:68:e9:6e:c9:19:a8:61:29:be:75:18:7d:57:38:27:9a:8d:
ac:d4:88:b5:07:e0:93:d7:b2:e5:10:d2:f9:de:54:66:ca:74:
fb:88:9f:9f:f4:fa:56:7b:a2:a9:a5:9d:02:aa:e9:40:fc:83:
51:45:21:88:79:b0:66:2a:bb:4f:c4:08:03:60:44:c2:a0:f4:
60:9d:cb:06:2d:90:2b:3a:8b:ad:99:34:c5:de:2c:12:4d:79:
a3:4d:ca:60:c5:c4:b1:2c:c8:ff:5a:37:25:66:fe:64:be:9d:
d0:59:26:5c:be:f3:81:a8:bb:7b:ea:0f:de:e6:b4:18:79:5b:
cb:c1:0e:07:ac:ca:7c:ee:60:ee:9f:1a:44:41:8e:eb:9c:6a:
94:ea:4d:8d:d9:57:c3:f8:df:12:4b:00:91:42:4a:cc:13:3a:
0a:b8:43:cd:33:74:9f:f2:18:f2:7c:14:41:1c:34:bd:b3:4f:
be:24:e0:d6:c3:e5:44:e3:73:8b:b6:61:7d:c8:e0:d4:dd:76:
e6:3b:46:df:65:2b:f6:70:07:64:0b:d8:8c:b5:67:6f:49:d1:
49:0e:11:de:9e:28:3d:a1:86:11:49:8f:32:75:dc:62:1f:dc:
72:ca:a0:31:b9:e5:35:de:f8:30:24:b2:60:21:63:e9:6d:69:
04:a9:57:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:54:08 2026 by rpki-client