
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft
File: zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft (raw, json)
Hash identifier: RWNJDhVYh4q9mYnX+IFsx+SuuwCUibLQG0kGhV9gIXY=
Subject key identifier: 9D:DA:E1:A8:CC:FC:AC:27:00:C8:B3:24:22:E9:4D:BA:1C:08:7F:36
Authority key identifier: CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8
Certificate issuer: /CN=A9133239/serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8
Certificate serial: 01AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft
Manifest number: 01AD
Signing time: Mon 05 Oct 2026 04:22:53 +0000
Manifest this update: Mon 05 Oct 2026 04:22:52 +0000
Manifest next update: Mon 12 Oct 2026 04:22:52 +0000
Files and hashes: 1: zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl (hash: 8l07klPMnaCO7XRwGPpLqmMTNLAAlHsFiuR21Qet79E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl
rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 04:22:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133239, serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8
Validity
Not Before: Oct 5 04:22:52 2026 GMT
Not After : Oct 12 04:22:52 2026 GMT
Subject: CN=6ac3261d-7cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:20:a0:cd:95:25:d8:13:41:b8:93:3c:d4:a4:
63:63:7c:d8:54:7c:69:e2:ae:ae:25:93:be:f7:d4:
1f:8f:06:d6:48:7e:a2:bf:47:55:64:2a:0e:27:1b:
5a:3b:79:6d:9f:20:63:65:57:b4:6d:22:13:56:0b:
a3:10:3f:c0:cf:ee:45:5c:58:b1:e1:94:09:67:aa:
8c:4f:26:55:3e:f2:80:74:12:9a:ca:cf:e8:57:fa:
1f:85:a2:0c:e3:86:29:5a:aa:0e:48:68:65:30:a6:
8c:78:98:df:3e:a7:59:26:14:d5:2a:67:6a:cb:20:
1f:d2:fb:8b:c9:a7:8e:e0:4c:c6:e1:21:4b:44:02:
39:c8:8a:e2:e2:57:ed:09:3d:3a:83:18:f4:2f:01:
3b:88:77:0e:21:cd:42:cd:cf:58:5a:f3:57:05:85:
b2:03:bf:c9:19:5a:ec:20:6d:45:aa:d3:fb:e7:3d:
0d:34:07:f4:1a:cf:ec:ba:6c:55:03:30:07:76:e5:
d9:95:05:01:ef:26:4e:30:d6:c6:6c:a9:d4:60:39:
5c:f1:9f:e6:84:bf:46:c1:80:b2:a0:6f:00:ce:fa:
e3:ec:c6:8e:b1:61:f9:36:a9:2a:bc:a9:a3:9b:71:
1a:3d:9e:46:02:c2:fa:f7:01:ba:4f:6c:e6:52:b2:
f7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DA:E1:A8:CC:FC:AC:27:00:C8:B3:24:22:E9:4D:BA:1C:08:7F:36
X509v3 Authority Key Identifier:
keyid:CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:c6:ee:6b:4e:ac:d9:4a:f2:46:54:79:c3:28:44:30:1c:b7:
b2:80:18:9c:92:57:14:92:06:19:c4:d8:2e:d0:9d:ee:39:66:
66:27:f5:d4:d3:d0:bd:f0:e8:39:bd:14:13:99:76:28:da:f6:
69:e6:6e:e5:91:a5:4e:ec:18:3b:3d:9c:42:c2:1f:30:35:7c:
5c:29:6b:c3:c2:4e:03:27:46:cf:c6:52:a6:d4:da:4a:60:f2:
6b:0d:b2:d0:5a:79:35:80:ba:b7:97:91:81:94:93:87:1d:fc:
5f:8d:28:85:e6:90:5f:68:2f:18:a1:a3:9b:d0:56:cc:83:a0:
cd:50:18:eb:3d:56:56:57:42:49:fc:98:88:87:ac:cf:b3:3c:
54:56:3a:f9:ba:d3:d1:f6:fe:27:d6:91:14:0a:05:35:02:cf:
b4:28:5f:a9:ea:26:ff:fc:c2:e4:74:6a:b2:f6:6a:f9:d3:73:
3e:c3:7c:70:52:df:d5:d2:fd:12:79:73:03:0d:3f:22:b1:8b:
d1:c3:f3:b9:19:1d:50:67:50:be:15:1b:58:c8:18:64:1b:39:
dd:cc:f8:31:2b:e9:85:6c:bb:f2:65:c1:72:77:ea:bf:5e:43:
f0:ad:c2:9a:d9:98:b5:22:f0:9b:e9:60:57:0e:ee:71:b0:32:
82:5d:c4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 20:17:04 2026 by rpki-client