
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft
File: Zctcy-UxzE70Kh0wffe0XLDpdNk.mft (raw, json)
Hash identifier: 9qSDqX1yP8aq5xgP2Mev3nLzSZhwoXNhdW6rE2SVsdo=
Subject key identifier: 34:47:22:0B:D9:B3:DA:1A:D1:DE:71:C8:4F:81:F8:CB:DF:E8:E5:9E
Authority key identifier: 65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9
Certificate issuer: /CN=A915451D/serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9
Certificate serial: 09B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft
Manifest number: 09AA
Signing time: Thu 08 Oct 2026 20:04:23 +0000
Manifest this update: Thu 08 Oct 2026 20:04:22 +0000
Manifest next update: Thu 15 Oct 2026 20:04:22 +0000
Files and hashes: 1: Zctcy-UxzE70Kh0wffe0XLDpdNk.crl (hash: VCztE+xC0zOG+vRUuIxPbcXrtk/z5H5HmFR0gJzG+z0=)
2: 593FC45EB89011EA8C060064C4F9AE02.roa (hash: 2k5v5V+a2T7nbvDutqVQldFzjmy9JJnSlbIW5tFWkXA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl
rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 20:04:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2483 (0x9b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915451D, serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9
Validity
Not Before: Oct 8 20:04:22 2026 GMT
Not After : Oct 15 20:04:22 2026 GMT
Subject: CN=6ac7f746-2b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:78:5a:70:93:0e:32:d9:e2:92:8b:d0:f4:
a6:3e:de:d7:88:9a:d7:98:73:86:79:91:85:1d:98:
37:f7:40:40:1f:4d:c2:6b:f5:9f:25:a5:3c:26:72:
21:81:f5:9e:0b:0e:4c:04:65:1b:62:8e:62:99:41:
6d:c4:29:9b:7f:af:06:59:86:91:fa:d6:db:6e:d4:
55:35:0b:a1:47:3c:dc:76:85:6d:f1:56:8d:53:c7:
67:f1:3d:d0:9d:aa:4e:1b:b7:0c:af:91:59:34:1d:
cf:3d:ee:d5:85:b2:bc:c4:d8:88:6b:74:0d:eb:d0:
9a:a3:b9:d0:3f:9d:cc:2d:3a:ab:b3:d7:50:96:15:
bd:1a:0c:fb:fb:3e:78:fb:89:5e:8d:9a:ed:d5:30:
49:32:b9:60:ca:6d:88:ee:26:10:16:56:5f:01:3b:
be:6a:dc:2a:66:bb:a1:96:6c:e6:17:73:3e:03:e9:
c1:71:ef:d6:b9:60:73:3d:0c:56:1b:06:25:bd:81:
fe:03:a8:db:8e:e2:3b:0a:b6:dd:73:ad:01:3c:89:
d8:9c:58:c8:c6:c0:90:75:13:ac:7b:f9:6c:4d:0e:
e2:02:ec:d3:a2:0d:ff:4f:d2:e3:41:c8:80:7d:7d:
be:d6:f9:64:b0:9a:8e:1f:2d:88:5a:15:e9:bb:b2:
8d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:47:22:0B:D9:B3:DA:1A:D1:DE:71:C8:4F:81:F8:CB:DF:E8:E5:9E
X509v3 Authority Key Identifier:
keyid:65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:13:d4:67:17:75:93:10:4a:67:1c:a7:26:1d:d9:6b:45:6b:
b2:8c:87:57:7c:58:03:12:be:86:c0:71:3c:9b:04:ef:ac:e2:
49:7f:2e:77:e6:a7:84:ed:6c:4b:c4:18:0e:54:3b:e8:52:b1:
21:39:c9:26:c6:5e:02:15:1f:00:15:1e:af:b1:69:a9:63:e5:
e7:e7:13:a9:c5:ef:9e:c1:2e:2d:3f:c0:4a:1b:4a:6d:49:ec:
4b:b5:bf:a3:28:d0:92:e5:34:37:ee:1e:70:d1:02:26:0e:e8:
ff:39:c3:75:1d:23:74:2b:ea:cf:38:c1:46:21:88:06:9f:98:
d6:36:f8:03:bf:4f:9c:5b:12:9e:36:b6:41:56:b0:68:c8:5a:
65:ba:14:f6:cc:59:6c:7c:78:2d:b5:cb:47:49:b8:64:7a:9b:
d2:2b:ae:84:44:c5:bd:16:eb:2f:f8:a6:b0:d7:92:24:08:98:
9d:46:a1:c4:0a:60:a8:43:d5:ca:15:65:e4:ca:02:67:36:b6:
8b:36:8d:0d:45:aa:8b:0f:71:ce:20:ed:a9:2b:31:b0:61:57:
c0:23:b5:1d:ab:ec:f1:ad:12:6a:99:e4:4d:d7:85:67:4e:80:
b9:90:a1:45:dc:9a:5b:d2:18:d1:fb:35:36:8d:80:51:ae:52:
3d:c5:1c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:48:45 2026 by rpki-client