
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
File: ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft (raw, json)
Hash identifier: aXdA+lIBv8xubwZmseldb04xfjgIWCsg1zIh69wcxdM=
Subject key identifier: D8:B5:D3:D8:37:53:B5:BB:74:F7:46:41:57:55:3E:E1:F3:B3:04:14
Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A
Certificate issuer: /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
Certificate serial: 244D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
Manifest number: 243A
Signing time: Fri 04 Sep 2026 15:45:36 +0000
Manifest this update: Fri 04 Sep 2026 15:45:35 +0000
Manifest next update: Fri 11 Sep 2026 15:45:35 +0000
Files and hashes: 1: ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl (hash: Ze30vlIszTmlCMXv0ijSM5mrRJvKa5V/jqb5nvRmz4Y=)
2: 844E61B635B811EE96EDCC53C4F9AE02.roa (hash: FMM9PWbU/oYp9w4GxmMR0Bnc2OElJZUE63nkK8Lt4YE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl
rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9293 (0x244d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91269B8, serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
Validity
Not Before: Sep 4 15:45:35 2026 GMT
Not After : Sep 11 15:45:35 2026 GMT
Subject: CN=6a9ae7a0-ce91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:2d:ec:6e:80:a7:cd:4b:6b:f4:e1:c5:c4:
39:2e:fc:55:c4:29:43:0c:a7:ed:3d:03:e4:90:8b:
53:a8:d1:c5:23:0f:59:30:71:b2:b9:4b:43:7a:fe:
7f:e5:68:5a:7b:fc:28:4c:54:fc:c3:d5:10:aa:8d:
06:80:7e:ff:7d:6c:c4:74:0a:eb:6b:1b:83:7a:66:
f2:6d:02:22:62:57:4d:04:fe:dc:79:82:9b:69:28:
55:df:35:5f:6b:f2:6c:ae:25:1f:64:c8:fd:44:bf:
bf:2d:01:c2:73:9e:99:d0:b1:bc:89:5a:21:50:64:
7e:5f:73:a2:c4:62:83:9a:97:13:5a:a8:e5:9f:7b:
5e:f8:3c:b7:58:cc:f0:f7:66:a8:45:1f:51:bc:a2:
d8:e6:c2:9c:d8:f8:d4:a6:55:7d:b6:f8:94:bb:66:
8f:1e:f5:f9:5a:62:25:4e:a5:57:e1:54:25:b8:06:
79:5e:b7:38:1a:b6:ed:4e:e2:2b:96:5b:3f:49:21:
dc:87:82:b4:c7:6b:07:00:e3:bb:89:d0:34:87:96:
da:fb:79:1d:78:20:e2:45:03:45:62:4c:2a:09:52:
4c:42:7f:d6:8b:08:02:1a:90:cc:9c:ed:c0:9e:33:
6c:0d:22:fc:fc:47:ec:4d:94:44:40:db:9b:5b:94:
3a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B5:D3:D8:37:53:B5:BB:74:F7:46:41:57:55:3E:E1:F3:B3:04:14
X509v3 Authority Key Identifier:
keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:20:54:bb:b3:51:db:9d:51:8b:0b:17:11:f4:92:70:fc:7a:
9e:36:92:31:92:90:cf:d9:00:80:0e:70:93:e4:81:58:9c:ba:
50:0a:f0:09:5a:73:c7:68:8c:d7:9c:95:af:fe:60:e9:88:f7:
3a:c1:6c:e9:b7:78:d6:0a:f6:f3:83:c6:bf:4d:39:02:4d:63:
2a:52:ae:55:55:f1:73:82:ea:8f:ce:ba:16:96:24:5d:e0:f5:
a7:38:03:e8:e7:c5:f0:b5:9b:ec:40:99:5e:d1:bb:cf:52:c8:
f2:90:b7:18:21:32:fc:ea:01:af:89:89:a1:8f:c7:83:4b:ca:
12:cd:84:7d:e6:61:ee:84:f2:b0:43:17:87:6e:db:ee:95:7f:
30:ad:2a:35:0f:b5:87:c9:ae:99:35:a2:56:b6:9b:51:49:87:
aa:95:6e:1d:07:e3:04:f2:77:ed:bf:83:bc:c9:cf:df:28:75:
61:91:8e:8d:cd:19:b3:1f:01:b2:a0:01:02:dd:c7:67:19:97:
a3:e6:7c:2b:bd:4b:ce:e5:bb:2d:6e:55:34:a1:bd:a8:ec:f4:
c7:bb:da:4e:d1:80:f7:a0:32:34:98:d1:96:e6:4d:56:de:fe:
65:36:d3:34:cb:5e:0e:24:16:cd:40:e8:9f:e5:88:66:43:34:
ea:98:e3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:55:19 2026 by rpki-client