
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft
File: ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft (raw, json)
Hash identifier: 6o4CmPVvzYGDOWa6fbXaqliZzPGKwW8L0aSo3yD/SNM=
Subject key identifier: D2:8B:E3:83:28:D2:76:CB:9D:BD:CF:5D:B0:BB:4B:29:50:EA:34:F8
Authority key identifier: 64:93:B1:9F:7C:BF:DF:19:04:BC:75:2A:A8:E4:A3:43:06:26:54:05
Certificate issuer: /CN=A911DF56/serialNumber=6493B19F7CBFDF1904BC752AA8E4A34306265405
Certificate serial: F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft
Manifest number: F4
Signing time: Mon 19 Oct 2026 07:01:02 +0000
Manifest this update: Mon 19 Oct 2026 07:01:01 +0000
Manifest next update: Mon 26 Oct 2026 07:01:01 +0000
Files and hashes: 1: ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl (hash: LxOQvgDygSr1IfAxrSD3XlRxGAoLsKbh9zHYKy5eY2Q=)
2: D24B5EDE93C911F09C542E6EC4F9AE02.roa (hash: s8SPE1fuhHGCWfjRI4Arz3DIriyv/pjOPJwncxjTFHw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl
rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DF56, serialNumber=6493B19F7CBFDF1904BC752AA8E4A34306265405
Validity
Not Before: Oct 19 07:01:01 2026 GMT
Not After : Oct 26 07:01:01 2026 GMT
Subject: CN=6ad5c02e-65c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:11:4b:93:e0:90:11:fe:e9:42:70:d7:ad:3a:
73:99:62:fd:7a:1f:dc:c5:ba:4e:a0:bd:5f:da:c7:
d3:df:49:49:b2:7d:45:a3:5b:47:f4:ef:7a:d6:ce:
71:40:81:74:3f:ae:1e:b0:1c:5f:bb:21:7b:1a:32:
59:a4:85:de:57:69:2a:27:ad:8c:87:30:3b:b5:89:
6c:e8:ec:01:c8:a3:bb:ec:6e:75:c9:4d:3f:b5:3d:
cc:b5:8d:47:8b:57:d1:66:ac:3b:5c:58:25:35:fb:
25:47:d0:c6:77:7a:43:1a:6a:cb:5a:c4:bd:35:30:
1e:c4:e8:21:f0:59:cf:5d:a6:3b:42:7a:62:9e:71:
96:d8:85:79:ab:8c:19:4f:ca:ce:25:20:ea:ed:9b:
37:03:0c:03:5d:0c:ee:6c:31:81:33:d6:16:0d:12:
ce:c4:c7:10:6c:51:b7:41:eb:e9:2c:e4:a4:c8:cc:
71:7e:5a:12:81:b2:21:da:25:6d:7f:14:05:7b:55:
3d:7c:ab:a5:54:e5:82:73:aa:61:ae:f1:79:0a:5c:
ff:e3:31:0e:62:d8:15:76:a4:29:af:54:eb:30:c4:
a5:55:8b:9d:ab:25:07:13:0e:7f:69:30:2d:0e:3a:
a1:0b:90:cd:39:b7:80:d5:6b:6e:b4:5d:34:4d:cc:
c2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8B:E3:83:28:D2:76:CB:9D:BD:CF:5D:B0:BB:4B:29:50:EA:34:F8
X509v3 Authority Key Identifier:
keyid:64:93:B1:9F:7C:BF:DF:19:04:BC:75:2A:A8:E4:A3:43:06:26:54:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:99:7a:72:59:4f:bd:eb:c8:e0:cd:16:36:37:03:77:93:3a:
15:7e:87:41:70:a3:5b:8b:39:aa:9c:a2:02:8d:bc:1c:4f:5b:
ea:70:e6:c3:00:a0:02:61:3a:06:dd:ad:d7:c8:44:dd:bf:74:
dd:72:2a:bd:96:be:2f:d7:5c:8b:b7:6a:ae:e3:99:0f:09:7c:
15:2c:6f:e7:ad:c2:00:43:6f:e0:72:5f:0d:15:07:5f:ac:01:
bb:80:d6:ad:8b:f8:01:c8:23:87:a8:f7:31:17:ef:95:c9:31:
39:a5:b0:17:4e:a1:72:c1:02:02:7c:51:71:a5:66:5a:2b:70:
af:85:ba:fd:c5:e2:bf:0d:6b:a4:14:9c:bb:58:cb:c8:4e:67:
b0:85:68:e9:c1:17:93:6f:a4:d1:4f:45:92:e1:da:c4:46:1f:
c5:8b:06:c5:d7:52:2a:79:7f:46:13:21:0c:90:0f:2b:9d:ba:
d3:a9:09:ac:7f:cb:bd:bc:c3:4e:d2:55:17:99:d5:ed:c9:1a:
0b:e5:ff:17:6a:34:53:1c:ee:ea:e5:60:0e:3a:88:8c:03:58:
ac:5c:1d:88:3d:c5:c3:d9:7a:2b:7b:fa:51:26:8e:4a:a6:12:
a6:79:09:ef:eb:9e:2e:e6:8c:b2:e5:dd:4d:a4:21:98:24:9e:
9a:7c:32:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:19:00 2026 by rpki-client