
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
File: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft (raw, json)
Hash identifier: PJQ3MJRJK+udvXrj1cnYJuYJ9LK6vLN90iKC75q0SAQ=
Subject key identifier: DE:A9:B4:9A:63:01:7F:D3:71:56:13:29:96:3A:D2:D1:EB:C1:C7:43
Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
Certificate issuer: /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Certificate serial: 02AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
Manifest number: 028C
Signing time: Fri 23 Oct 2026 02:20:53 +0000
Manifest this update: Fri 23 Oct 2026 02:20:53 +0000
Manifest next update: Fri 30 Oct 2026 02:20:53 +0000
Files and hashes: 1: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl (hash: N+r9myvzp+ykEupMlKQnTs0t6tpnblv3HJpDS19Euqg=)
2: C2C37E56153A11EF9E378A14C4F9AE02.roa (hash: dhXNyunI39nD/DT1e9lDchzlVmyAT8bbuHRUT42ciqQ=)
3: A90DA1C0C71611EE9465BF5EC4F9AE02.roa (hash: SFEP7Eqv5F0cO8qs2JVVwhMOYY0EYGol0tddMhyiU5s=)
4: 9EF724BE2A4911EE81BCF50FC4F9AE02.roa (hash: 0pPo8g6m9fkgC10m1JkoC4zbRTfWIqGtQiM16LFE718=)
5: 282CA82C023F11EEB716134FC4F9AE02.roa (hash: au5ReoWDIsycs2B6WsFnd/TKCzlPPWNf7r6kfYZw9MY=)
6: 309A0AEC073D11EE94A9410CC4F9AE02.roa (hash: pFDSBEaXQzskq04841VPkdgOexvbY84+Oq7ogG0dvvc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 02:20:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 682 (0x2aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911710E, serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Validity
Not Before: Oct 23 02:20:53 2026 GMT
Not After : Oct 30 02:20:53 2026 GMT
Subject: CN=6adac485-323e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:19:cd:5b:b2:63:6d:08:5a:bf:93:e3:5e:70:
02:38:7e:9a:69:9e:f5:72:d0:0d:9a:7a:98:7c:56:
6d:48:a9:0a:7e:8e:c2:33:dc:75:8c:75:1f:52:6b:
fe:f3:7c:4b:9b:97:4a:b1:f6:5b:7e:30:c9:4e:07:
b9:c1:e3:43:4f:6c:46:8e:60:71:a5:86:86:3e:64:
de:3d:17:9c:e1:07:a1:eb:73:02:3b:1e:75:85:03:
f5:5c:18:d9:ed:47:cd:69:0e:77:54:d3:fe:35:57:
c6:4d:87:f6:fd:c3:04:ff:b9:7b:06:31:fe:f2:6c:
2f:35:2c:21:7b:18:6e:70:ea:9b:01:56:8f:99:36:
83:71:eb:09:90:01:a2:81:76:0f:86:3c:04:68:d9:
41:76:74:83:95:7f:50:aa:85:8b:5d:a9:21:af:f4:
14:8a:a1:08:5a:ae:f4:71:c1:52:3e:71:e3:39:d7:
72:02:aa:4a:e9:73:eb:4f:51:72:76:70:e6:b3:45:
3e:22:6f:f7:98:fa:86:28:11:7b:28:b5:82:37:22:
ec:18:32:77:8d:33:8e:3d:62:b6:79:1e:62:01:9f:
07:9d:f0:ca:82:75:56:d2:af:7f:d2:3c:9b:ed:56:
59:19:00:5f:83:ef:fb:37:fe:fc:ac:b4:cb:f2:98:
40:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A9:B4:9A:63:01:7F:D3:71:56:13:29:96:3A:D2:D1:EB:C1:C7:43
X509v3 Authority Key Identifier:
keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d7:e0:54:b1:74:49:19:b4:59:9a:3a:8c:54:2e:cf:61:61:
24:e9:85:03:13:88:f4:a0:c9:b5:90:ea:4c:78:94:a0:5d:f2:
01:b1:8b:18:aa:dd:c5:df:6d:d6:c7:e4:0f:ea:13:90:68:31:
4d:2c:4c:36:e1:c8:cd:a9:7b:e4:a3:77:1a:48:d1:d1:e1:a5:
ba:39:48:d8:a6:c8:50:90:44:5c:9b:57:31:4e:7e:fd:96:27:
b8:f4:bb:99:93:db:ad:28:bf:1d:09:1c:94:0f:0f:97:b6:2f:
8a:d4:da:49:9d:72:ad:82:db:1e:94:82:76:cd:8b:84:e7:fe:
60:c8:52:48:dc:c9:bb:59:3a:e4:bc:62:1b:a5:57:27:2c:50:
17:01:5f:8f:63:2d:50:41:7a:da:10:ee:be:7e:98:85:b3:2d:
37:f8:51:a6:ad:b2:13:05:65:73:8a:a0:cb:e3:26:ef:62:47:
89:d2:e7:5c:28:60:9c:24:8d:ae:3c:c5:71:2f:1b:e1:9a:91:
41:44:2b:27:01:86:c1:b6:fb:b8:63:38:e4:ec:d3:b8:36:45:
33:95:22:a9:9e:51:1c:79:c9:2e:43:d8:81:8e:d8:31:91:55:
33:05:f2:81:25:6e:24:1e:16:3d:3a:20:99:c4:66:3e:b9:42:
85:07:5a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:49:44 2026 by rpki-client