
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/sZwyTEZ50uRWg0OJr_t1BO3wlx4.mft
File: sZwyTEZ50uRWg0OJr_t1BO3wlx4.mft (raw, json)
Hash identifier: yytyiPkWDeSZKPX13YxDWsnPemsS2hhA7KccEfgtCdc=
Subject key identifier: E8:76:C7:FA:57:EB:52:44:93:1E:7A:FE:F6:E5:F3:B7:9F:6C:AA:5D
Authority key identifier: B1:9C:32:4C:46:79:D2:E4:56:83:43:89:AF:FB:75:04:ED:F0:97:1E
Certificate issuer: /CN=A91448CB/serialNumber=B19C324C4679D2E456834389AFFB7504EDF0971E
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZwyTEZ50uRWg0OJr_t1BO3wlx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/sZwyTEZ50uRWg0OJr_t1BO3wlx4.mft
Manifest number: 0B
Signing time: Thu 03 Sep 2026 09:25:39 +0000
Manifest this update: Thu 03 Sep 2026 09:25:38 +0000
Manifest next update: Thu 10 Sep 2026 09:25:38 +0000
Files and hashes: 1: sZwyTEZ50uRWg0OJr_t1BO3wlx4.crl (hash: GgzjvH5II5BJ6g254EFxZGEJxLNp4i8GX9HlW9hQHbU=)
2: 862E552A9BC911F18D38C8025A11F970.roa (hash: 8na8yVbkSv2r8L3/v2gwJOLTTRp9fQmqAH2HTVZD2cc=)
3: 403C1EB09BC611F1BF28F2DA5711F970.roa (hash: j/xjaXbBB1ibKX7WVXJ3Yos+ih/Ydlfy2wHxZhD7qPw=)
4: 3F981D2E9BC611F1BF28F2DA5711F970.roa (hash: sKVxProcEOHvrgAV+/slNwjk7EfvxI0MK4OVX+Z8sEw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/sZwyTEZ50uRWg0OJr_t1BO3wlx4.crl
rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/sZwyTEZ50uRWg0OJr_t1BO3wlx4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZwyTEZ50uRWg0OJr_t1BO3wlx4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 09:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91448CB, serialNumber=B19C324C4679D2E456834389AFFB7504EDF0971E
Validity
Not Before: Sep 3 09:25:38 2026 GMT
Not After : Sep 10 09:25:38 2026 GMT
Subject: CN=6a993d13-53a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:64:01:b0:29:fa:ac:a2:4a:f0:ad:89:99:80:
99:08:31:77:b8:b3:4a:03:cb:63:3a:57:43:0c:da:
e6:14:fa:de:6b:32:96:3a:01:77:0d:5b:74:c6:8b:
83:d2:30:bd:46:71:e1:a1:8c:53:e1:7c:aa:f8:ac:
55:2e:d5:74:f4:45:49:24:e3:5d:b2:0e:ed:a7:05:
d4:8b:f5:89:9d:c5:c0:6f:ba:c3:c9:a5:68:81:9d:
e7:f7:4a:8e:19:0b:e3:e2:8e:38:da:f9:60:ed:59:
e5:04:5e:87:16:d6:33:e8:b2:52:31:52:fb:de:3b:
75:b9:29:07:8e:07:46:34:9e:3d:e7:c6:57:5b:1b:
e2:27:b2:f0:ec:fc:d7:d3:68:38:09:f9:74:bf:72:
a0:bb:93:ef:4b:e6:b5:85:79:a6:37:ed:8c:dc:93:
a4:01:bb:7b:1c:b9:74:8e:5f:4e:00:d1:51:c9:f0:
bb:84:aa:93:fc:ed:b5:18:04:cb:17:d7:f9:1f:82:
5b:62:42:18:2d:b4:e9:b0:01:07:6d:01:c5:b5:85:
48:70:57:a2:0d:ff:df:1f:4c:64:a1:05:aa:9c:19:
24:22:ba:2c:83:39:c0:d7:2b:20:5c:31:e9:61:3e:
a2:8a:99:ad:85:42:57:91:45:f0:a5:7f:7e:48:b8:
8c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:76:C7:FA:57:EB:52:44:93:1E:7A:FE:F6:E5:F3:B7:9F:6C:AA:5D
X509v3 Authority Key Identifier:
keyid:B1:9C:32:4C:46:79:D2:E4:56:83:43:89:AF:FB:75:04:ED:F0:97:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/sZwyTEZ50uRWg0OJr_t1BO3wlx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZwyTEZ50uRWg0OJr_t1BO3wlx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/sZwyTEZ50uRWg0OJr_t1BO3wlx4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:42:71:5a:dd:11:d3:ce:44:f6:48:42:ed:bb:3c:66:2f:5c:
86:a0:f7:10:8a:f7:44:1c:bc:d6:7a:9e:7b:08:01:6a:87:ae:
4a:36:94:23:e6:41:21:62:d0:ed:8c:52:f0:74:f1:e8:c5:b5:
cd:3c:60:08:6b:73:c5:2f:48:80:3f:80:fa:03:2b:00:e2:23:
e4:6e:a9:b2:60:b2:6c:dd:8f:44:3e:26:74:e7:47:b7:3d:e9:
e8:b7:60:87:63:ab:0c:f2:12:cc:87:bf:7b:cd:12:38:55:8f:
7f:67:b5:4f:e8:a0:07:ab:6d:c2:fe:d8:a3:09:b1:ec:92:0a:
b4:22:9f:cc:60:5a:f3:56:9b:09:fa:80:fd:7b:3b:ff:eb:e0:
70:e3:61:b3:83:7e:9e:5d:26:13:21:97:cc:74:7e:0f:77:6a:
ea:41:ce:14:fc:c3:59:ba:0b:c3:2b:ca:f5:33:28:a3:ea:b8:
d4:9f:e2:a9:85:df:bf:9a:66:78:41:ad:07:2a:b5:68:a3:78:
9a:5b:75:8e:ee:d0:99:5e:8a:4d:91:6a:d2:ad:fb:27:12:bf:
a0:c8:6a:e3:38:8f:d4:db:6e:be:8e:24:3f:44:ca:e3:df:f6:
98:38:cb:74:6b:19:78:f3:41:01:85:ad:0b:dc:36:d3:cd:04:
9d:f6:41:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:11:00 2026 by rpki-client