
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121E1E/8C9DD9649F9611F1A0C006F54311F970/Z8yoslZifZLRcDYUO_9qEKe22ew.mft
File: Z8yoslZifZLRcDYUO_9qEKe22ew.mft (raw, json)
Hash identifier: nYFBH1FGxY2KDSoJkj7cDOLf5ql61C1XeLt7co6nJFQ=
Subject key identifier: ED:C2:6D:53:17:87:DF:7C:2B:21:F8:6D:1A:02:72:A9:61:8B:8B:B4
Authority key identifier: 67:CC:A8:B2:56:62:7D:92:D1:70:36:14:3B:FF:6A:10:A7:B6:D9:EC
Certificate issuer: /CN=A9121E1E/serialNumber=67CCA8B256627D92D17036143BFF6A10A7B6D9EC
Certificate serial: 18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8yoslZifZLRcDYUO_9qEKe22ew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121E1E/8C9DD9649F9611F1A0C006F54311F970/Z8yoslZifZLRcDYUO_9qEKe22ew.mft
Manifest number: 16
Signing time: Tue 29 Sep 2026 09:41:54 +0000
Manifest this update: Tue 29 Sep 2026 09:41:54 +0000
Manifest next update: Tue 06 Oct 2026 09:41:54 +0000
Files and hashes: 1: Z8yoslZifZLRcDYUO_9qEKe22ew.crl (hash: Hy4lKFS2TzI0n8XYG/FbxvFiVDUvL4FdCY3Y6dodF7s=)
2: 2A23164A9F9711F19B115F094411F970.roa (hash: NnIG7XSOCJWmPtwlTSlZ0/zNRsexl7ybGGJ/J6cm5Ic=)
3: LAH7Du9F9cuiAoOOWQhAoAjf5EI.asa (hash: ag2EOhhJZZyvZxakYWuVQNtDTZ4ck9KIHpSWh0q3VT0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9121E1E/8C9DD9649F9611F1A0C006F54311F970/Z8yoslZifZLRcDYUO_9qEKe22ew.crl
rsync://rpki.apnic.net/member_repository/A9121E1E/8C9DD9649F9611F1A0C006F54311F970/Z8yoslZifZLRcDYUO_9qEKe22ew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8yoslZifZLRcDYUO_9qEKe22ew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 09:41:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121E1E, serialNumber=67CCA8B256627D92D17036143BFF6A10A7B6D9EC
Validity
Not Before: Sep 29 09:41:54 2026 GMT
Not After : Oct 6 09:41:54 2026 GMT
Subject: CN=6abb87e2-93e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:36:af:b5:5e:aa:dd:de:12:dd:a9:0e:b9:10:
4a:14:04:32:68:4c:e5:fc:be:a1:43:e5:d2:6d:d3:
05:d5:76:02:36:60:43:68:04:64:d6:2d:0d:7f:ac:
01:ed:f4:9c:46:9f:e3:1b:70:aa:4f:01:d9:d8:e2:
c4:21:e8:ea:10:32:95:d1:a4:0b:0d:b7:fd:bc:72:
59:f5:10:06:20:d1:9c:ff:33:7c:22:a7:30:4b:83:
ae:50:eb:98:b8:e0:1a:ba:75:93:b8:7f:30:08:83:
64:43:8b:c0:6f:74:02:88:28:f3:fa:ce:37:95:b9:
3d:fb:eb:69:0b:fa:23:21:39:42:6e:90:bf:2d:85:
f6:f8:d6:2e:8e:7c:14:2b:99:f8:92:71:7c:62:a0:
ff:67:42:68:36:0b:cb:7f:e8:55:e5:5f:36:5d:73:
74:e4:93:43:9e:f1:d4:da:34:a4:8a:8a:9d:ea:59:
70:12:05:17:fa:fa:64:cb:73:60:c7:15:d7:2c:07:
78:01:eb:26:5e:2d:23:42:f1:38:41:39:ee:29:a1:
b8:ea:e5:1c:af:38:b3:e6:d0:73:9c:2a:2a:96:5d:
2d:c1:b0:3c:94:c2:32:32:6f:9f:94:7d:a9:1e:46:
d9:ed:ae:ce:62:76:4e:49:df:4c:8a:c0:0c:c9:a1:
6d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C2:6D:53:17:87:DF:7C:2B:21:F8:6D:1A:02:72:A9:61:8B:8B:B4
X509v3 Authority Key Identifier:
keyid:67:CC:A8:B2:56:62:7D:92:D1:70:36:14:3B:FF:6A:10:A7:B6:D9:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121E1E/8C9DD9649F9611F1A0C006F54311F970/Z8yoslZifZLRcDYUO_9qEKe22ew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8yoslZifZLRcDYUO_9qEKe22ew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121E1E/8C9DD9649F9611F1A0C006F54311F970/Z8yoslZifZLRcDYUO_9qEKe22ew.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:43:32:09:d2:2a:3a:81:14:60:ea:a7:dc:39:80:bb:74:b1:
65:54:ea:48:86:5f:43:d4:ed:ab:42:d1:3f:4b:bb:e3:10:97:
71:86:b0:41:1c:f5:89:3d:f5:26:e9:27:d2:97:7d:c8:03:0b:
9c:51:91:c3:05:83:e5:cb:d2:3d:d4:05:fb:a8:25:95:9b:e4:
7c:b3:d3:68:79:19:02:74:bf:7a:25:bc:84:e7:58:a0:1a:67:
b4:58:a6:54:32:46:f1:87:65:8e:28:df:df:a9:c1:1b:67:34:
4e:eb:67:d1:da:81:d8:22:96:17:30:4f:7f:fe:e4:50:ec:d1:
06:15:e4:7d:86:fd:de:49:ac:b1:c8:e6:7b:d3:0c:03:13:90:
f0:a6:1a:fc:10:54:63:1b:e1:75:3b:5e:a0:d9:aa:67:ab:cd:
43:52:8c:4a:bf:3b:9b:cb:74:65:5d:57:b1:fb:fd:13:88:04:
d8:14:78:60:49:ab:55:8e:4d:e1:2d:5e:44:05:b1:3c:5c:bd:
a1:cd:8e:dc:f3:f1:3f:8e:c6:c0:4a:8c:2b:50:1e:8d:59:dd:
7a:f3:49:93:b5:dc:41:f2:19:4a:a9:03:e7:dc:24:ce:4f:39:
a3:a5:f8:05:a6:86:d8:bf:a2:31:2a:4d:2d:bf:2c:d5:16:ab:
1e:86:fe:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 03:45:43 2026 by rpki-client