
$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft
File: z7b2KJfnSw0H75YAuncJOQXLh1s.mft (raw, json)
Hash identifier: yoBW/sScoVkOCnhWz/dSHL9gWL/IzjMkbyAzeEGuinA=
Subject key identifier: 13:5C:77:75:54:1E:8A:04:61:92:84:75:28:99:31:6E:63:42:9F:61
Authority key identifier: CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B
Certificate issuer: /CN=A91463ED/serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B
Certificate serial: 024A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft
Manifest number: 042A
Signing time: Wed 19 Aug 2026 02:57:02 +0000
Manifest this update: Wed 19 Aug 2026 02:57:01 +0000
Manifest next update: Wed 26 Aug 2026 02:57:01 +0000
Files and hashes: 1: z7b2KJfnSw0H75YAuncJOQXLh1s.crl (hash: INWZCB9SNvjPJUSqepe0cbycLIqQdhNL4HQ8dsKqT7w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl
rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 02:57:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91463ED, serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B
Validity
Not Before: Aug 19 02:57:01 2026 GMT
Not After : Aug 26 02:57:01 2026 GMT
Subject: CN=6a851b7e-861b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c2:53:e7:e8:2b:2b:c8:c0:be:b5:43:3c:b2:
bc:b3:8a:86:00:8e:7c:7a:02:67:fb:7b:40:bb:6d:
c2:b6:37:2d:41:55:6e:b9:8d:31:1d:ef:a8:19:2e:
10:d6:49:ab:06:c6:b5:d6:b8:6c:64:5c:a3:cd:85:
22:dd:02:01:44:45:4a:86:46:b5:14:63:fa:f1:3e:
30:a9:d0:c8:ef:83:4f:05:ae:7c:7b:27:cc:a9:48:
9e:81:4f:60:25:8c:7c:4b:e3:59:c5:ea:ce:0c:e0:
17:97:90:af:f4:97:f4:8d:6d:08:8b:ff:3a:4d:5e:
73:cd:94:a2:79:07:78:56:6d:7a:e7:40:39:31:ce:
13:ab:7d:6f:07:c2:8a:dd:30:5d:74:53:6d:20:3e:
1f:6a:df:dc:a0:a5:3d:99:b3:d7:4f:e2:33:ca:d9:
21:7f:da:0d:2d:7d:44:41:7c:1f:36:79:ce:fb:d1:
0b:9a:df:2b:ae:82:11:7a:d2:ac:37:8a:f1:b3:0d:
4a:02:04:d2:be:b5:65:13:64:88:06:4f:a5:46:1d:
b5:09:da:92:ca:7d:ba:c8:ae:f1:eb:32:98:ad:19:
1b:a7:be:da:40:cd:5e:eb:a8:00:a4:c5:ef:9f:f9:
cf:f6:45:9c:06:10:65:f3:21:58:d4:25:95:22:6e:
0a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5C:77:75:54:1E:8A:04:61:92:84:75:28:99:31:6E:63:42:9F:61
X509v3 Authority Key Identifier:
keyid:CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:60:7b:82:c9:a5:1b:4f:1b:1b:48:c4:3d:73:04:e6:db:2f:
37:95:b8:07:e6:be:6c:64:e5:db:45:01:ac:d7:cf:03:60:69:
2e:0a:67:09:72:f0:31:cf:8d:eb:9b:64:0f:fa:15:82:0d:d0:
8f:47:23:6e:8b:28:89:e0:e7:36:e0:19:ea:07:5e:16:55:38:
a5:b2:4a:c5:16:28:b0:8c:94:c2:34:90:28:4f:3c:09:f9:20:
e3:ab:68:35:69:e1:f6:2f:b5:02:09:dc:c5:e0:d4:65:34:a4:
d5:86:b8:7a:a6:67:0f:f7:9c:1f:73:c7:1f:81:8a:65:a6:fd:
f3:74:f7:7e:a0:88:21:98:35:0a:20:b7:67:21:45:31:77:ea:
c8:18:fe:f1:82:b6:a4:cc:9a:64:68:e2:9d:25:94:82:7e:38:
8e:c0:52:08:d0:69:c2:e3:28:e6:76:7a:a6:64:ba:1c:0f:b3:
2e:aa:24:d8:6d:4a:f2:74:82:f9:87:26:12:32:32:48:96:67:
0e:16:e1:5b:bd:76:29:57:0c:f8:7b:d8:a2:9f:87:00:a9:5e:
58:ed:f7:d4:58:e6:e6:7f:11:94:78:51:f6:f3:5b:eb:03:5b:
1e:7b:68:b2:84:31:98:63:68:b1:3d:18:b3:cd:e3:7f:78:b1:
a1:f7:d7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:43 2026 by rpki-client