
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft
File: zGryB1D43jn7dcCh0KRBmXytN7g.mft (raw, json)
Hash identifier: EO5w+vVk5XDW1xRcmo5RqW+Pp3PvyjShCqs2ljiTo3U=
Subject key identifier: 2D:B5:27:30:1F:BC:50:71:95:F2:C5:83:93:9F:73:E1:9E:50:0D:F8
Authority key identifier: CC:6A:F2:07:50:F8:DE:39:FB:75:C0:A1:D0:A4:41:99:7C:AD:37:B8
Certificate issuer: /CN=A915A9FD/serialNumber=CC6AF20750F8DE39FB75C0A1D0A441997CAD37B8
Certificate serial: 0885
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft
Manifest number: 087D
Signing time: Thu 08 Oct 2026 20:57:17 +0000
Manifest this update: Thu 08 Oct 2026 20:57:17 +0000
Manifest next update: Thu 15 Oct 2026 20:57:17 +0000
Files and hashes: 1: zGryB1D43jn7dcCh0KRBmXytN7g.crl (hash: Sue9FlmcGgJ+Zk657S2xB22nnPJdiHDruwXJtTpaZjs=)
2: FEA470A4137911EBA3A5F233C4F9AE02.roa (hash: QLTfJIXHekXFtibNVc4Q+2innR3VNQ5N9hMeUx/Akls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.crl
rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 20:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2181 (0x885)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A9FD, serialNumber=CC6AF20750F8DE39FB75C0A1D0A441997CAD37B8
Validity
Not Before: Oct 8 20:57:17 2026 GMT
Not After : Oct 15 20:57:17 2026 GMT
Subject: CN=6ac803ad-bef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:b3:32:7c:f1:76:32:41:2a:72:a3:46:a3:
bd:bb:d9:72:f7:4b:57:60:4c:01:38:0f:8b:96:69:
0e:57:32:ec:76:73:d2:89:1b:d1:26:79:94:02:84:
e8:ac:fc:35:73:04:bf:1a:06:53:ba:ee:3c:b1:8b:
9c:df:ad:74:b3:31:25:88:1f:8e:1c:ac:6f:a1:3e:
a2:a5:c9:1d:7d:fc:1b:8c:a4:7a:61:96:8c:11:ba:
a2:8c:09:41:d4:42:f5:d9:c6:07:3d:cc:7d:a5:a1:
fb:28:7b:5f:4b:dd:72:03:70:aa:a4:78:d6:59:de:
31:5e:d6:f4:20:6f:09:f6:49:d3:73:91:a5:50:9b:
db:68:07:42:0b:ea:c3:c2:40:ce:f7:19:39:62:f8:
49:7c:f7:6d:4f:22:7d:89:a4:e7:9a:c8:a7:53:1c:
a6:5e:23:06:25:78:be:fe:93:82:cb:3a:b4:95:09:
9c:95:06:8b:4e:40:c2:e6:8c:0b:e4:a2:0f:36:6f:
c8:df:d0:c5:aa:b0:3e:8d:ee:f0:73:1b:27:d5:4a:
e4:db:f2:f8:3c:1b:4d:b6:67:68:de:62:49:a2:3f:
1f:b9:be:67:10:e8:d1:06:82:9b:45:11:6b:e4:62:
d1:d8:c7:b2:97:0c:87:1a:4d:ac:2b:27:11:8a:1f:
ba:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B5:27:30:1F:BC:50:71:95:F2:C5:83:93:9F:73:E1:9E:50:0D:F8
X509v3 Authority Key Identifier:
keyid:CC:6A:F2:07:50:F8:DE:39:FB:75:C0:A1:D0:A4:41:99:7C:AD:37:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d3:ee:88:ce:cb:da:c6:c5:2c:7b:68:de:b1:b2:7a:0c:6f:
0a:7c:bf:17:a4:77:18:30:b3:9d:60:df:64:35:1f:71:d9:87:
12:aa:16:4c:44:01:ac:93:4f:64:7c:a7:d6:28:96:9b:9c:d2:
ee:32:14:24:e8:9b:fd:e3:11:14:0c:d7:ce:7d:9d:5d:a0:e7:
b5:87:27:52:86:b3:17:d1:28:1d:25:5c:a9:65:f0:5b:ca:27:
fa:45:2f:b3:94:84:d5:a4:c4:a6:3d:73:3e:8e:fa:2c:6a:52:
05:e6:7e:4c:80:0a:f3:d3:c1:9e:1e:19:31:e8:11:1e:13:b5:
e2:f1:7d:af:bf:6f:6c:26:04:85:7f:21:cc:f2:3d:a4:fb:39:
31:0b:f3:e9:de:68:78:e7:23:22:c4:7a:32:15:fc:07:40:12:
64:83:b0:17:a3:27:70:88:45:d6:88:a6:c5:d7:1b:f4:53:94:
e8:88:c3:b7:22:6a:d4:46:b1:44:59:dd:29:dd:1f:4c:55:7c:
72:eb:d4:47:28:46:eb:29:f4:b0:df:09:0c:08:f8:12:b7:b4:
4f:53:72:44:48:d7:6c:5c:e9:38:f0:eb:f1:eb:42:7d:f0:31:
c6:22:56:09:3f:5d:46:01:f7:86:8a:81:ea:98:70:ce:b0:e8:
8a:c2:85:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 07:51:05 2026 by rpki-client