
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft
File: zcExhQol8Mzfybm5zI7mTDr6bQg.mft (raw, json)
Hash identifier: Ag0zbypKlbfSyG4eG4pqJeTlFr/FuGfNEt7VrGdlqNU=
Subject key identifier: 76:FF:57:82:86:A6:D0:52:93:8E:D2:1F:BD:EA:4F:35:99:8A:E7:24
Authority key identifier: CD:C1:31:85:0A:25:F0:CC:DF:C9:B9:B9:CC:8E:E6:4C:3A:FA:6D:08
Certificate issuer: /CN=A915B358/serialNumber=CDC131850A25F0CCDFC9B9B9CC8EE64C3AFA6D08
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft
Manifest number: 51
Signing time: Tue 01 Sep 2026 07:49:01 +0000
Manifest this update: Tue 01 Sep 2026 07:49:01 +0000
Manifest next update: Tue 08 Sep 2026 07:49:01 +0000
Files and hashes: 1: zcExhQol8Mzfybm5zI7mTDr6bQg.crl (hash: zqu9R4Rgaf5yeMyBv4bkCrDiNcMhTP2ln6AO8s2wIKM=)
2: 93D240467ABE11F18A7AD4526AA30FBC.roa (hash: w1g0+OCm5KdHfXk1uQN4NK1n9UsJBgBEWbSV3G4nl+0=)
3: 5B12B2B0915511F1A8A4FE826911F970.roa (hash: HrmVhWrBT16ZorM9C2f2yDdovxpvH6JykEKOijJcSOk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.crl
rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 08 Sep 2026 07:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B358, serialNumber=CDC131850A25F0CCDFC9B9B9CC8EE64C3AFA6D08
Validity
Not Before: Sep 1 07:49:01 2026 GMT
Not After : Sep 8 07:49:01 2026 GMT
Subject: CN=6a96836d-d65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:42:e4:c2:1a:27:9c:c2:be:3d:0d:92:1d:be:
65:28:c3:ed:b3:47:b4:de:01:57:14:1a:dd:cb:ad:
63:21:15:71:f1:54:72:7a:8f:e3:11:61:41:97:0b:
9f:ee:77:5f:c0:c7:9e:6d:a6:bb:b6:03:97:76:16:
10:fd:15:81:e6:e7:f1:04:d9:a0:83:2d:d6:f2:31:
b2:10:45:ac:80:f9:69:c0:a5:a6:9d:37:cf:bb:0a:
3f:3f:2d:70:6b:6b:e8:c2:27:b1:1f:aa:d7:dc:a1:
68:84:cf:d8:5b:a8:33:5e:8b:b8:69:79:25:42:51:
9c:c4:da:57:16:68:26:70:9e:e7:7e:39:6d:98:b2:
1c:d1:36:52:33:85:e3:4a:8e:0a:f9:6f:69:9d:a8:
2b:59:cd:b4:a2:32:b6:01:cc:82:63:8a:f6:f3:a7:
34:4f:8b:e4:72:08:38:f3:51:b6:eb:16:d4:7b:31:
f0:07:36:d5:f4:81:89:11:19:46:50:72:40:a3:25:
b0:81:47:3f:f4:a2:82:c7:47:10:56:03:92:8a:d1:
ec:59:70:8c:14:37:84:44:f4:2d:a3:e3:c7:43:c8:
d7:b0:72:4b:b1:b9:a8:6d:7c:62:01:51:3c:8b:98:
62:67:06:58:03:8a:36:78:84:e5:7e:28:d8:31:d7:
03:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FF:57:82:86:A6:D0:52:93:8E:D2:1F:BD:EA:4F:35:99:8A:E7:24
X509v3 Authority Key Identifier:
keyid:CD:C1:31:85:0A:25:F0:CC:DF:C9:B9:B9:CC:8E:E6:4C:3A:FA:6D:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6e:20:20:23:3d:66:4e:a0:63:35:e2:b1:94:30:00:81:c2:
2d:4a:00:00:fa:37:3b:aa:46:46:de:79:64:e3:cd:69:61:cc:
20:3d:e7:1e:9e:71:1f:99:da:90:58:74:22:9d:46:6d:c5:4d:
fe:aa:2e:d1:9f:27:5a:21:59:72:07:dd:79:c0:dd:a5:a6:6c:
55:ce:19:9a:3e:72:67:b8:e9:a9:f2:8b:67:fd:60:8b:0f:2e:
7e:4e:dc:87:a1:ef:98:fc:ce:c1:d5:6a:4d:a2:66:6d:28:3a:
cf:8f:ab:6b:9a:19:d8:70:78:8c:db:0f:2e:25:f8:2b:63:ed:
4f:32:e4:82:0a:10:3c:62:72:ac:eb:67:14:cd:84:09:7a:aa:
ee:f2:3c:13:ad:68:c8:5b:74:10:a0:fb:62:eb:b0:f4:6f:fa:
84:ef:46:bc:cb:0e:6c:84:7a:ba:e0:4e:40:90:ef:a5:d4:21:
8f:75:39:fa:38:25:23:44:a9:be:13:01:0d:54:e5:0f:44:c6:
20:fb:d3:a1:ed:90:8d:0f:16:a0:ac:54:b8:e8:ad:93:e4:3c:
92:48:0d:15:a7:b6:1c:91:e8:08:a4:2b:b3:ba:a9:bb:3f:32:
0e:56:c9:a1:0e:57:a0:54:d3:71:ab:80:80:7c:31:aa:c0:26:
11:87:24:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:18:50 2026 by rpki-client