
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft
File: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft (raw, json)
Hash identifier: s3KP1sw/KhuZfrhMzzaxms/GIRgexgy4n7JhOymcMZI=
Subject key identifier: 43:96:05:04:C9:EB:30:AE:75:CA:92:0B:B6:28:34:38:40:EF:EF:3F
Authority key identifier: 64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8
Certificate issuer: /CN=A91F5756/serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8
Certificate serial: EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft
Manifest number: EC
Signing time: Tue 13 Oct 2026 07:07:27 +0000
Manifest this update: Tue 13 Oct 2026 07:07:26 +0000
Manifest next update: Tue 20 Oct 2026 07:07:26 +0000
Files and hashes: 1: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl (hash: hDRu8nfJpfiBpspEl+7SC8aUi/GNv4svKcR8aAMW0FA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl
rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 07:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5756, serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8
Validity
Not Before: Oct 13 07:07:26 2026 GMT
Not After : Oct 20 07:07:26 2026 GMT
Subject: CN=6acdd8af-44e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:28:78:4b:f9:ff:b5:f0:45:69:e8:29:9c:aa:
b1:b9:80:29:c8:49:ed:07:82:14:98:e7:b5:90:0a:
c9:62:ed:7c:b1:08:07:59:25:11:30:eb:2a:f1:93:
b7:7f:e7:9f:f7:af:6d:0e:91:a5:1e:3f:f4:4b:7a:
f5:9d:e5:85:71:c2:83:2d:06:46:68:e4:36:6b:05:
da:29:56:f9:02:22:e7:dc:f9:32:b9:05:7d:d3:80:
51:8d:73:dd:2a:82:fc:ed:13:c0:5a:45:08:cc:4f:
56:e2:fe:6e:ed:83:c3:7e:3d:30:8c:2e:73:90:58:
3f:8e:3c:1b:0a:62:c7:00:fe:77:09:32:ae:54:f7:
11:76:9e:b3:95:03:87:a1:2e:11:aa:71:89:ef:ee:
e9:ce:b2:5e:14:08:72:3a:e3:7c:01:a2:f7:d7:fc:
51:a0:16:9f:5c:09:9a:3a:38:0a:42:05:f3:04:0e:
e5:31:5b:79:7b:31:7e:05:5a:fb:0c:6f:e7:f5:1d:
94:2f:41:51:80:6f:9d:e0:eb:b4:96:f1:e2:b5:0f:
32:74:a9:8a:92:e0:9c:e3:52:9d:cc:de:6f:8e:31:
c7:ca:3d:6d:b7:2d:2c:f5:1d:4a:8a:dd:97:db:22:
ac:15:a8:58:85:54:00:a9:1c:00:2a:86:45:f5:49:
6e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:96:05:04:C9:EB:30:AE:75:CA:92:0B:B6:28:34:38:40:EF:EF:3F
X509v3 Authority Key Identifier:
keyid:64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:34:3b:ed:5e:0a:2d:6e:75:2d:0a:3c:3a:ca:9a:83:ea:dc:
82:15:88:38:05:55:8e:81:d7:20:48:87:01:14:64:45:35:5b:
98:a9:fd:67:e9:5e:72:42:63:e4:bc:ca:32:eb:0c:80:f6:9d:
02:0e:89:8c:2d:af:4f:f0:e6:80:59:17:63:8f:7d:c4:1e:09:
5d:19:c1:15:27:c2:46:e3:5b:a7:15:13:23:81:8e:c9:1e:5e:
d2:d8:1b:68:a2:51:cd:42:34:6d:56:22:16:38:ca:c6:e8:d3:
0a:47:a6:1c:ab:50:dc:af:74:77:96:9a:be:20:03:c1:1d:cd:
04:cd:a5:2f:f6:fa:4e:82:c3:72:81:45:51:fb:cf:5e:47:c7:
84:7b:28:24:b7:73:42:34:82:84:40:ba:0e:db:ea:84:4f:30:
52:eb:16:ed:23:84:8f:81:84:9b:3c:5b:1a:11:ac:63:7d:62:
8b:72:07:8f:0c:73:8b:35:6d:42:14:0f:bf:f2:fe:c0:84:23:
22:dc:22:1d:6d:07:06:a5:db:9d:12:a2:1a:5b:f8:06:00:14:
22:83:43:07:fb:b1:de:90:fc:2e:f5:a8:f5:ec:f5:b3:7b:91:
29:ab:6b:69:a2:b0:b6:3c:08:27:91:e1:e8:1a:bf:8b:2e:46:
31:e3:60:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 15:17:20 2026 by rpki-client