
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.mft
File: z64jGpiXN_YdrZV8wk0hNYWBjtw.mft (raw, json)
Hash identifier: z3gEQzjfl4FrtDCiBN3XWFHnQ1q4oVfXrwGSHGBMtlM=
Subject key identifier: AC:4C:DD:F8:D2:8D:F1:5F:EC:B3:90:93:DA:CB:75:09:54:B6:3B:64
Authority key identifier: CF:AE:23:1A:98:97:37:F6:1D:AD:95:7C:C2:4D:21:35:85:81:8E:DC
Certificate issuer: /CN=A914B45F/serialNumber=CFAE231A989737F61DAD957CC24D213585818EDC
Certificate serial: 025D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z64jGpiXN_YdrZV8wk0hNYWBjtw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.mft
Manifest number: 0257
Signing time: Wed 07 Oct 2026 02:42:07 +0000
Manifest this update: Wed 07 Oct 2026 02:42:06 +0000
Manifest next update: Wed 14 Oct 2026 02:42:06 +0000
Files and hashes: 1: z64jGpiXN_YdrZV8wk0hNYWBjtw.crl (hash: 343V8705P3pKtq8XdXE9WU20StIPLj8FCUXtBlT4J2M=)
2: 578C92D62F6611EE9CAFAA58C4F9AE02.roa (hash: FR10caEvoT0zaZX3UiBQZ1EGitLJzcXq6qYptVC5bz4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.crl
rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z64jGpiXN_YdrZV8wk0hNYWBjtw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:42:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 605 (0x25d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B45F, serialNumber=CFAE231A989737F61DAD957CC24D213585818EDC
Validity
Not Before: Oct 7 02:42:06 2026 GMT
Not After : Oct 14 02:42:06 2026 GMT
Subject: CN=6ac5b17f-5baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:27:48:a3:10:54:ab:da:d8:85:b3:e9:2d:a0:
36:b3:38:2d:15:63:3d:81:c4:22:fe:de:af:44:b5:
70:7b:9c:2f:18:20:bc:49:d5:4d:1b:3c:92:c2:f7:
2d:99:7d:53:00:2a:53:9a:ce:e5:ed:05:77:af:b5:
15:bc:14:ec:af:a4:03:50:34:78:b8:49:6a:5c:d9:
d2:11:74:c6:c3:c5:f7:2a:61:ec:9f:16:4d:3d:a2:
cb:5d:04:02:26:da:c7:ed:4f:81:40:3a:13:a2:05:
c4:f9:4f:fb:af:e7:7c:2f:91:8f:d8:29:ce:1b:b7:
51:e4:2d:c1:d9:1a:5b:0c:be:ab:89:5b:8e:1e:05:
f0:bd:21:7e:19:6f:88:22:0c:3f:5e:88:a5:76:55:
9b:75:b0:d6:0b:aa:00:b6:b5:91:e6:3c:78:c4:0c:
ac:ff:9d:b9:ad:a7:d3:3a:e1:f8:d6:15:f7:59:82:
ee:78:15:f4:3e:55:41:a0:91:d2:3d:d2:d3:27:9f:
18:a3:d5:e3:1a:92:09:08:7c:55:2f:35:66:7b:2f:
c7:2f:4e:11:36:df:4f:0c:26:1c:0a:4f:b9:b2:59:
da:35:97:b1:37:9c:4a:fd:14:89:24:38:4a:7a:f5:
4f:a9:8b:95:08:b0:24:66:d3:51:10:52:dd:ca:7c:
a2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4C:DD:F8:D2:8D:F1:5F:EC:B3:90:93:DA:CB:75:09:54:B6:3B:64
X509v3 Authority Key Identifier:
keyid:CF:AE:23:1A:98:97:37:F6:1D:AD:95:7C:C2:4D:21:35:85:81:8E:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z64jGpiXN_YdrZV8wk0hNYWBjtw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:cb:e7:e6:48:2d:52:aa:76:10:c7:7a:a1:2e:db:39:f2:d8:
e6:1c:e9:5f:5b:93:6b:30:9b:c0:7a:1c:30:59:fe:49:66:f6:
8f:ab:a0:27:9e:ee:68:07:cc:c9:4f:4b:ca:9a:c8:16:66:51:
db:2e:43:8a:f5:dc:a3:e1:44:53:af:60:95:ce:4c:b0:b2:7f:
5b:c1:34:ec:ec:89:c4:db:0b:c3:0b:80:89:3c:2c:36:8b:bb:
45:ef:6a:fd:2a:19:3f:17:80:ec:cf:60:c5:35:93:2a:85:78:
d4:bd:55:3d:f6:e8:e3:c3:72:fa:c6:d5:e4:dc:23:5f:46:6b:
bd:a1:c9:c5:5b:cd:c8:2c:e0:9b:e8:7d:41:a7:b6:6d:94:de:
43:98:0f:56:b2:2b:d5:9c:ee:d2:7b:23:31:fd:22:87:64:c4:
82:10:6b:fc:f2:c6:e1:3f:2a:c8:f8:58:3b:7f:5e:2a:a3:01:
92:a9:38:b3:49:b7:44:18:87:72:e2:95:76:64:da:11:90:8d:
22:a5:6f:8f:df:21:25:6e:89:4c:af:9d:3c:9e:22:d3:a1:1f:
94:49:0b:69:2c:9a:1e:78:ca:14:3d:ca:63:b3:46:ca:7d:b8:
03:84:59:5a:c8:13:9d:1d:a8:33:0f:7e:3f:1e:ab:3e:16:32:
c3:74:28:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:58:41 2026 by rpki-client