
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
File: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft (raw, json)
Hash identifier: +5zv3QH10/riZUgQltwruWjzWiZcjh7hvZJIOhMX0Mc=
Subject key identifier: 38:CA:4B:C5:D3:6B:11:B3:21:EB:8A:DB:28:AA:02:F1:8A:76:AB:26
Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
Certificate issuer: /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Certificate serial: 02AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
Manifest number: 028E
Signing time: Tue 27 Oct 2026 02:05:52 +0000
Manifest this update: Tue 27 Oct 2026 02:05:52 +0000
Manifest next update: Tue 03 Nov 2026 02:05:52 +0000
Files and hashes: 1: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl (hash: 2soq29i4zjS3eYFTBgJ5Sztb2eUgK0NYzoDke0ZZt3s=)
2: 282CA82C023F11EEB716134FC4F9AE02.roa (hash: au5ReoWDIsycs2B6WsFnd/TKCzlPPWNf7r6kfYZw9MY=)
3: 9EF724BE2A4911EE81BCF50FC4F9AE02.roa (hash: 0pPo8g6m9fkgC10m1JkoC4zbRTfWIqGtQiM16LFE718=)
4: 309A0AEC073D11EE94A9410CC4F9AE02.roa (hash: pFDSBEaXQzskq04841VPkdgOexvbY84+Oq7ogG0dvvc=)
5: A90DA1C0C71611EE9465BF5EC4F9AE02.roa (hash: SFEP7Eqv5F0cO8qs2JVVwhMOYY0EYGol0tddMhyiU5s=)
6: C2C37E56153A11EF9E378A14C4F9AE02.roa (hash: dhXNyunI39nD/DT1e9lDchzlVmyAT8bbuHRUT42ciqQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 02:05:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684 (0x2ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911710E, serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Validity
Not Before: Oct 27 02:05:52 2026 GMT
Not After : Nov 3 02:05:52 2026 GMT
Subject: CN=6ae00700-1f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4b:1f:53:a3:3e:39:09:b5:67:9a:f6:b5:6f:
c0:96:0e:12:58:e8:e0:b8:47:ec:c7:0e:b9:14:b9:
f4:93:81:3e:e2:58:6e:4e:50:61:f4:4d:0a:13:c7:
cd:31:e4:f3:fa:89:78:94:94:8b:79:75:f6:6a:52:
11:4b:2f:04:8f:48:20:f6:63:ff:5b:d1:d9:5a:a9:
94:43:8a:80:a6:ec:1b:8b:fd:c0:83:2b:74:ed:3c:
b8:21:1d:33:17:8e:32:f2:d9:bf:49:4d:74:aa:57:
d7:dc:c9:2d:14:fc:29:4d:ea:b9:69:b9:73:be:77:
bb:d7:5b:ae:6d:54:e8:2f:e9:e8:51:9d:68:45:21:
84:37:a1:c4:f8:da:d1:c1:e3:a4:15:97:a2:41:72:
33:ba:7a:c1:9b:7b:f7:7c:d9:dc:46:40:cc:44:bb:
8e:ba:90:29:ff:b2:57:d5:dc:a8:19:10:76:49:8f:
95:db:ce:95:c5:c7:3f:81:4c:97:6f:13:54:8c:67:
cd:cd:d5:33:8f:64:5b:39:62:46:3d:f7:40:5f:7c:
98:78:b3:56:a3:55:a5:ff:e3:22:79:16:df:7a:f1:
9f:8e:1a:b4:15:10:db:f1:ef:df:fd:c0:c9:a5:38:
a7:05:0c:89:9f:6c:5f:b8:79:31:1c:08:a4:b3:17:
1a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CA:4B:C5:D3:6B:11:B3:21:EB:8A:DB:28:AA:02:F1:8A:76:AB:26
X509v3 Authority Key Identifier:
keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:56:de:74:92:9b:69:6d:16:7e:da:fc:7e:37:6d:83:68:b1:
c3:9f:9a:64:db:54:8b:49:25:7c:2c:90:c1:f9:ba:55:e9:93:
73:79:07:87:76:19:0d:5a:ba:96:d9:72:c9:6c:a1:92:10:38:
43:94:d2:38:9d:b4:bf:fb:6d:d1:c8:c2:a6:65:92:48:8a:c1:
fc:7a:41:ec:38:58:12:df:aa:a1:a1:1e:f0:c9:aa:6f:95:68:
64:5e:b6:6b:3d:57:4c:3b:f1:82:34:eb:43:85:d5:c0:c4:5e:
1f:4e:09:6f:42:e0:a2:67:b5:9b:ad:82:09:b1:6f:d5:5c:e2:
5c:1c:d4:03:6e:74:eb:85:09:8a:0e:03:41:02:6e:b8:c3:37:
fe:fc:05:d3:23:f3:98:f8:83:7d:69:eb:5b:ed:13:3c:a0:a8:
20:3b:75:d5:36:36:ac:5b:49:6b:61:0f:03:14:22:0e:8d:b2:
b2:80:7e:fc:0f:96:8b:46:d6:d8:39:ec:f9:95:e5:65:a3:52:
61:e8:c0:e9:56:60:a0:bf:6a:51:c7:48:0e:82:dc:34:07:f3:
12:3b:66:00:2c:6e:61:40:2c:80:a6:26:61:8d:90:a6:9a:23:
ff:a6:8a:7b:42:a3:7d:47:75:cb:94:6d:27:ff:02:c9:2b:8b:
cd:cc:8d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:15:31 2026 by rpki-client