
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
File: _Z_UV0WCGIOHdsDcCO-2FVIB42g.mft (raw, json)
Hash identifier: kMCWBXvkBWWrZKxvnkZuUXldcCpa9IbY+87b+m6aK0A=
Subject key identifier: EE:E8:08:1F:59:4B:A1:0B:8E:59:84:C0:B4:21:5A:C7:7B:13:4C:74
Authority key identifier: FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68
Certificate issuer: /CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368
Certificate serial: 35DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
Manifest number: 35AD
Signing time: Fri 04 Sep 2026 14:27:38 +0000
Manifest this update: Fri 04 Sep 2026 14:27:37 +0000
Manifest next update: Fri 11 Sep 2026 14:27:37 +0000
Files and hashes: 1: _Z_UV0WCGIOHdsDcCO-2FVIB42g.crl (hash: FpYQUzeP67g+k8GQ0WLbmf+N8mCx8nlPd4DaR3IL9D8=)
2: 2DED29046A8E11EF948C2811C4F9AE02.roa (hash: XBUaXxbl5beMfJKKd1d1AjiKQNSMzNu7XbP3LC5jZ1k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl
rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:27:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13791 (0x35df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6DD8, serialNumber=FD9FD457458218838776C0DC08EFB6155201E368
Validity
Not Before: Sep 4 14:27:37 2026 GMT
Not After : Sep 11 14:27:37 2026 GMT
Subject: CN=6a9ad559-e62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:1b:17:a4:70:11:23:47:f3:28:f3:5e:8f:
62:4f:00:60:29:71:63:05:c2:55:30:00:bf:a8:09:
68:54:93:69:99:6a:91:d8:57:29:09:39:11:8f:29:
0b:98:02:3d:5e:08:12:6d:a4:a2:da:13:16:36:1a:
84:f7:c0:52:20:73:ca:5b:d5:26:72:d8:b2:79:66:
22:08:08:d4:eb:02:67:46:c9:9a:96:1e:5b:09:4c:
0e:18:a0:2d:38:af:29:46:0a:48:29:f1:79:58:80:
f1:96:d1:33:85:8b:9a:e9:9e:81:ae:c9:e8:91:93:
64:fb:d9:02:23:8e:42:07:ca:2e:b6:e2:0f:b7:4d:
79:db:a7:12:6f:ad:d0:0d:11:88:f3:0a:e6:18:f0:
e3:71:f8:2a:ba:1e:c5:d8:cf:27:d6:1a:4b:0e:28:
20:54:8e:05:db:93:84:76:f5:e0:6f:3f:94:5b:32:
8f:0b:38:45:6f:7c:22:2a:90:0b:d5:33:6b:ed:0b:
40:44:9e:d0:ed:99:f8:23:4b:94:85:1f:ab:40:c7:
62:39:f1:e3:81:f9:3c:40:f9:9f:93:4b:c7:26:da:
4b:53:7c:50:f2:39:33:7d:a9:95:cd:49:c9:04:23:
7d:66:15:2c:8b:39:84:4a:12:4c:37:60:1b:f9:61:
3d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E8:08:1F:59:4B:A1:0B:8E:59:84:C0:B4:21:5A:C7:7B:13:4C:74
X509v3 Authority Key Identifier:
keyid:FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f7:64:10:b0:f3:19:2d:24:0a:fd:a8:f0:58:d7:60:28:35:
e3:6a:7d:53:4a:1a:ee:b9:af:57:35:e5:8f:fb:44:d2:11:b8:
3e:32:9e:06:d2:f7:b4:65:77:cd:1c:a8:98:17:0a:16:ec:ed:
e3:03:57:16:a4:9d:9a:e5:39:dd:c8:fb:3c:55:57:2e:47:a9:
64:c3:3b:be:d9:53:1e:43:54:f6:95:28:3b:74:be:e9:08:1b:
41:73:6a:b0:26:79:3f:44:34:29:6e:59:f8:6c:45:11:04:75:
ac:37:90:91:2a:7c:34:63:da:21:70:c1:4a:9b:ce:e4:ca:61:
6f:32:a6:b5:56:da:fa:5d:62:70:51:fb:31:0e:33:18:49:b3:
49:8f:91:2e:d7:0a:44:cf:ca:20:01:43:8e:3d:7c:50:f6:87:
0f:81:d5:53:0a:f1:58:49:52:d0:09:d3:65:bb:83:ae:7b:58:
63:46:6a:aa:34:96:74:d0:b8:16:48:55:f6:db:97:b3:fe:f6:
ee:86:cb:e4:81:0a:d0:39:a3:17:49:37:de:4d:f2:65:5c:db:
ee:16:73:e3:07:93:33:00:7b:bb:13:89:39:31:e4:bf:32:d4:
0d:61:02:4a:85:3e:6a:e8:b1:54:a4:dd:30:68:70:88:c2:5e:
fb:f0:e6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:46:16 2026 by rpki-client