
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125AAB/563C491CBD2011F1877D501A93EE528E/Z4lnWEncvImucj6btvX7sBVSwpE.mft
File: Z4lnWEncvImucj6btvX7sBVSwpE.mft (raw, json)
Hash identifier: nJahAzilYnnjoMlKxKbtA9TsLpIh80a4p8aYdUpmoIM=
Subject key identifier: D1:22:29:57:28:F4:4A:08:17:0B:84:8C:36:93:BD:7B:D2:85:E0:D8
Authority key identifier: 67:89:67:58:49:DC:BC:89:AE:72:3E:9B:B6:F5:FB:B0:15:52:C2:91
Certificate issuer: /CN=A9125AAB/serialNumber=6789675849DCBC89AE723E9BB6F5FBB01552C291
Certificate serial: 0B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z4lnWEncvImucj6btvX7sBVSwpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125AAB/563C491CBD2011F1877D501A93EE528E/Z4lnWEncvImucj6btvX7sBVSwpE.mft
Manifest number: 0B
Signing time: Mon 19 Oct 2026 09:45:57 +0000
Manifest this update: Mon 19 Oct 2026 09:45:56 +0000
Manifest next update: Mon 26 Oct 2026 09:45:56 +0000
Files and hashes: 1: Z4lnWEncvImucj6btvX7sBVSwpE.crl (hash: wx8V98MN7uGO+H/Z/zFNTrnBuCP6DW8ubJ0V/ibVM3c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125AAB/563C491CBD2011F1877D501A93EE528E/Z4lnWEncvImucj6btvX7sBVSwpE.crl
rsync://rpki.apnic.net/member_repository/A9125AAB/563C491CBD2011F1877D501A93EE528E/Z4lnWEncvImucj6btvX7sBVSwpE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z4lnWEncvImucj6btvX7sBVSwpE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 09:45:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125AAB, serialNumber=6789675849DCBC89AE723E9BB6F5FBB01552C291
Validity
Not Before: Oct 19 09:45:56 2026 GMT
Not After : Oct 26 09:45:56 2026 GMT
Subject: CN=6ad5e6d5-7c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9b:99:4a:42:c3:30:51:0a:a7:c3:02:16:c1:
82:64:01:21:0c:33:e9:ff:f1:47:5d:c8:b5:92:22:
05:c2:fc:0b:c2:dd:93:d3:ef:58:38:df:4b:c6:51:
b2:5b:a8:c9:3e:55:ea:af:ba:27:7a:cd:44:d4:6e:
6f:5a:7e:7e:58:ed:87:6f:1d:bd:60:ef:a1:7c:be:
90:75:d5:e3:14:c7:0a:7c:5a:e0:ba:f8:54:07:93:
b6:8a:28:9f:95:be:b0:e2:79:4e:6e:74:86:b5:df:
45:75:df:94:81:d6:20:cc:0e:f8:54:d0:96:ab:12:
61:28:cd:e3:c3:a2:69:a9:2d:58:5a:42:f4:13:e2:
76:04:ee:eb:38:08:70:96:2c:95:9e:0f:c1:be:c5:
76:38:7d:30:3b:fc:5f:ec:3b:14:02:07:75:08:8d:
90:32:fc:6b:c0:3c:2a:31:a9:82:99:b1:3d:e8:24:
ee:b5:2b:ff:5a:e6:fd:78:c1:20:29:3e:85:af:7d:
51:cd:51:ca:7a:f1:4c:a5:b1:0b:5c:c6:19:95:73:
83:47:af:ff:3d:c7:76:9a:1f:bd:06:eb:1d:fb:40:
7a:c3:db:ad:7f:a6:45:07:c7:85:ff:15:5f:57:b2:
fe:98:bb:8c:2a:c2:b7:6c:b7:e2:93:d4:60:75:e5:
c5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:22:29:57:28:F4:4A:08:17:0B:84:8C:36:93:BD:7B:D2:85:E0:D8
X509v3 Authority Key Identifier:
keyid:67:89:67:58:49:DC:BC:89:AE:72:3E:9B:B6:F5:FB:B0:15:52:C2:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125AAB/563C491CBD2011F1877D501A93EE528E/Z4lnWEncvImucj6btvX7sBVSwpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z4lnWEncvImucj6btvX7sBVSwpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AAB/563C491CBD2011F1877D501A93EE528E/Z4lnWEncvImucj6btvX7sBVSwpE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:03:41:94:f4:be:12:52:15:a8:8a:5e:ba:76:29:99:16:83:
84:33:52:f1:f2:9d:17:fb:77:1d:57:84:70:3d:6c:f1:21:30:
b1:08:0c:fc:a6:18:be:59:34:03:a0:41:02:36:96:e2:6f:07:
7a:d6:18:c1:45:0f:a1:79:79:68:24:57:86:00:43:85:a6:8d:
cb:5f:2b:8c:06:d7:be:e6:34:21:59:c7:d4:4f:eb:80:6f:10:
0a:46:3d:fb:5f:6f:e2:b6:cd:a8:95:fd:06:9e:9e:45:dc:95:
e4:1a:1f:d2:93:7a:d7:31:a5:d6:29:c4:09:74:a4:0f:59:31:
74:40:0f:f2:08:a6:46:c6:7b:a8:0b:67:85:12:3d:bb:e7:e7:
20:a3:a4:2e:6b:4d:c1:fa:43:59:6a:22:7e:e3:86:1b:c7:d7:
78:19:3b:41:1e:0d:23:c5:29:54:92:0d:fa:40:b4:62:79:9b:
54:85:4e:31:a5:6d:df:ba:1d:23:c1:63:15:7f:e6:9d:0a:f6:
88:44:d8:9c:b9:62:4d:73:43:60:07:8a:c5:60:ad:e9:95:34:
63:8c:c9:e9:48:3f:85:22:15:cf:df:d6:47:91:0f:cc:5e:94:
94:4d:b7:88:dc:75:99:1a:06:88:7d:bd:92:6c:c4:04:60:c7:
c5:37:cf:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:57:59 2026 by rpki-client