
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
File: ZDqJ6ggKrIb4potVEI53sQahQco.mft (raw, json)
Hash identifier: JhXIuxUTDxkxnzjJAqh9qviGkaePT0Bn8e1NnpYnHMc=
Subject key identifier: AB:F9:FB:B2:69:D2:69:48:94:14:29:65:77:E4:13:1F:0D:39:D7:84
Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA
Certificate issuer: /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
Certificate serial: 026A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
Manifest number: 025C
Signing time: Wed 09 Sep 2026 02:40:40 +0000
Manifest this update: Wed 09 Sep 2026 02:40:40 +0000
Manifest next update: Wed 16 Sep 2026 02:40:40 +0000
Files and hashes: 1: ZDqJ6ggKrIb4potVEI53sQahQco.crl (hash: 5scz3kYPE4USoiKCImoAU6mNy8Q6j7Qm4TtUCFryFY4=)
2: 133A934C693111F0A51E5767C4F9AE02.roa (hash: nSQXNi2ZjVcTfBYdL/JBUUsl+LZUNi12cbTDHTeZACg=)
3: 47620F428FBB11EF8DDB8746C4F9AE02.roa (hash: ttjS00c2KG8TfhOWjt/eFcp3eeq+USxoD6ESfymiud8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl
rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 02:40:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 618 (0x26a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914237B, serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
Validity
Not Before: Sep 9 02:40:40 2026 GMT
Not After : Sep 16 02:40:40 2026 GMT
Subject: CN=6aa0c728-c0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:95:fd:93:ab:c1:32:d6:72:f5:0d:bc:25:d7:
d5:46:ba:8c:c2:6e:74:85:f2:4b:2b:00:2c:33:c4:
49:a9:87:7a:a8:19:99:8c:e4:a7:38:39:19:73:1d:
58:07:bf:15:31:2a:b9:e4:23:40:16:7c:64:ae:89:
70:6b:85:80:30:33:29:d6:59:96:ff:4c:16:d6:2a:
2a:11:5f:4e:fc:17:13:d0:53:62:58:1b:d1:0f:12:
d5:54:9a:ec:a1:5f:ee:51:59:2e:e9:19:42:04:a1:
56:ba:67:5b:23:3e:7e:9d:e0:c3:5e:79:37:85:a9:
9e:77:a3:de:62:a6:1f:07:b0:d5:2f:dc:e6:78:58:
6f:fd:c7:c3:b2:68:44:5b:89:a1:a2:91:d1:92:fc:
04:75:7b:9e:b9:79:05:66:a8:09:a3:82:d3:b4:a1:
3a:06:f4:cb:75:6e:f2:6e:ba:4e:bb:46:fd:55:2d:
c3:95:85:e8:56:e6:41:15:30:24:b4:10:c9:5d:d8:
a8:3b:76:fd:25:a7:38:67:8e:e5:88:b9:83:19:74:
84:8a:a0:04:fe:a2:bf:41:7a:a9:c7:3d:00:63:e5:
94:c3:09:15:3a:45:3a:79:b2:61:72:3b:a9:7b:a0:
22:34:a1:48:33:e1:5c:c0:75:d7:a0:23:e2:01:81:
3f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F9:FB:B2:69:D2:69:48:94:14:29:65:77:E4:13:1F:0D:39:D7:84
X509v3 Authority Key Identifier:
keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:75:1f:2e:79:9c:eb:73:01:85:99:40:b8:1c:2a:59:44:7d:
50:98:62:1a:17:f7:01:9b:23:d1:a5:fa:b9:7e:5f:9f:b4:5b:
b4:42:6b:e7:24:2b:93:93:60:b7:58:27:27:89:82:dc:eb:60:
f2:23:a0:30:40:f2:e7:18:f6:78:05:95:8a:2a:0a:f9:d0:c1:
79:9a:e7:9f:16:4b:5c:e7:b0:a7:4a:2d:fe:95:99:b9:ae:b2:
d2:e0:a4:35:38:be:aa:51:ac:1d:97:3c:02:14:f1:a7:e9:c5:
d7:a1:2b:88:9c:1c:9d:35:25:46:ce:1e:e8:8e:c6:49:66:15:
73:89:25:8d:7b:5a:db:cf:3b:44:14:72:0f:46:ae:1a:67:92:
b4:07:5a:11:b5:49:4a:61:5e:e3:fc:76:3e:25:30:4a:3c:2b:
e7:57:d2:67:04:90:6c:95:6b:1a:3e:6f:d4:f5:1f:22:b6:8e:
45:b9:36:02:56:6d:b0:d3:cf:f3:46:d3:d7:c1:79:ca:87:72:
7d:1d:32:2e:0a:67:4e:55:d1:ce:fd:c2:c3:13:2a:cb:05:e2:
db:92:c9:99:25:20:6a:81:af:de:26:ab:02:84:cd:dd:d5:c1:
3c:89:f8:4b:e7:0c:5d:8c:0f:cd:83:dd:df:f9:d0:42:62:e0:
30:99:5e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:42:45 2026 by rpki-client