
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
File: zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft (raw, json)
Hash identifier: qCHpn9zQMHxzv2j6HJgdmQks6jdljYBvf1gfGbmvkn4=
Subject key identifier: F0:79:B1:FA:10:2C:7B:82:06:78:A8:9D:FB:01:0A:38:D6:15:A6:C1
Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14
Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
Certificate serial: 082D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
Manifest number: 07C0
Signing time: Sat 10 Oct 2026 21:53:34 +0000
Manifest this update: Sat 10 Oct 2026 21:53:34 +0000
Manifest next update: Sat 17 Oct 2026 21:53:34 +0000
Files and hashes: 1: zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl (hash: jKGyOeyxxcXNXc8IE6lw4cSbEWqwnuws1a8wW64gqZY=)
2: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (hash: Ro74anOTti8QG6vyjwS8aXc9bfV+QmfdwMUJorqRPP8=)
3: 90BBD1B6884C11EB88489B75C4F9AE02.roa (hash: H5yiTmZmqNzfgLkNUSshTejgEC9QW5DzJpuCaDVZPHo=)
4: 337DA192C3FC11EF8C3B0B5DC4F9AE02.roa (hash: jdZ9eU0HcGePAnaPpQJ/8+6uq872C01hZ+qnBvUiNlQ=)
5: B23B879EE89C11ECA30FD20EC4F9AE02.roa (hash: x07pQS6pEgJZLrxI+4SzaUGa4YwQ96qN1jF+DrtdcJY=)
6: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (hash: td9+M54k5hj2c/thTOFATgj6CforEojuE42TknTzpYk=)
7: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (hash: 6CI5SC55Jio94/KfoS9G/a4W782wVeKHBLf24nIGCPM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl
rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 21:53:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2093 (0x82d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
Validity
Not Before: Oct 10 21:53:34 2026 GMT
Not After : Oct 17 21:53:34 2026 GMT
Subject: CN=6acab3de-b546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:33:c3:08:b0:2d:1f:ce:d3:14:14:4b:a5:29:
f3:f1:05:c5:5c:21:16:99:b0:39:03:90:f0:74:b6:
19:f7:09:3d:d1:1a:7c:23:ff:e7:ae:86:28:e2:5b:
e9:37:b2:db:c5:10:ab:de:64:02:88:31:63:cf:97:
02:ba:04:80:32:44:13:60:16:08:23:3b:67:14:33:
5b:a1:5b:9b:c8:8d:78:9c:37:c0:52:51:a5:c0:cc:
2c:13:c4:4c:8c:50:06:23:87:0e:83:5c:44:f2:d7:
19:df:9c:a8:a0:bf:8c:b7:b8:38:ee:4a:0b:2f:78:
4d:2e:ec:d6:7a:6a:37:6f:5d:f4:aa:2f:ec:c8:29:
21:3a:bf:fc:3e:5b:f2:67:2d:be:a6:d0:fe:e4:2d:
d7:11:17:b2:4b:f1:16:98:78:97:ff:28:c9:25:b1:
d5:9d:04:37:91:67:3e:5b:ef:4b:c6:cc:b0:52:23:
01:ef:15:da:2a:49:45:78:f9:06:f2:b7:88:01:87:
f9:15:21:ab:cd:0b:a6:20:5f:ad:af:c8:20:ce:52:
de:82:e7:4d:d0:e8:e4:cc:3b:38:5a:ba:d6:8e:9a:
fb:3d:31:4a:86:0a:4f:2a:8e:5e:d9:a6:60:2d:ea:
7b:64:b0:c7:09:d3:9d:f1:9a:bf:2a:20:46:eb:75:
61:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:79:B1:FA:10:2C:7B:82:06:78:A8:9D:FB:01:0A:38:D6:15:A6:C1
X509v3 Authority Key Identifier:
keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:0f:47:be:b0:0a:4a:c9:fa:c8:b8:96:4a:7a:d8:28:c4:bb:
26:35:c7:25:71:da:58:33:3f:24:1d:35:52:8b:25:aa:a0:03:
5e:7c:15:e8:23:bd:50:b2:6f:c1:66:83:7e:ca:3c:ea:59:c1:
56:4f:9e:73:9b:d7:65:b5:d9:eb:bd:4a:e8:2e:fe:6f:c1:1d:
3b:21:15:ba:23:e6:20:e6:a6:a3:55:9a:bb:00:bf:8c:38:0e:
54:4b:36:c0:45:81:f5:73:6f:df:9f:4b:5a:3a:1c:09:3d:aa:
bb:cb:84:ec:32:38:5f:45:81:21:08:4a:24:4a:76:71:a5:05:
99:24:cf:45:dd:08:a4:91:1d:ee:80:7a:81:42:fd:c2:2d:f6:
3f:af:85:e4:60:9b:1f:e7:ce:6e:a8:5b:30:58:25:b7:42:c1:
1c:69:66:c3:61:47:7f:c0:c3:95:ad:a2:c2:49:7c:52:12:0c:
e8:57:c2:e4:0c:fe:97:19:a3:29:42:9b:d8:5c:14:d4:bd:8f:
46:25:e2:b3:f6:c9:e2:59:a3:e8:c5:a5:4b:0d:cb:26:4d:6a:
2f:a2:73:2d:ae:72:0e:7b:c9:7b:05:70:a0:a4:b2:58:79:38:
b6:12:b8:f1:65:28:42:44:7f:ba:03:38:00:5c:21:6a:1d:ac:
9a:79:d7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:36:15 2026 by rpki-client