
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.mft
File: z8OBRZAZiWAcekIm8uBfuM-SloM.mft (raw, json)
Hash identifier: rODcRWJLmaUcPmn/Qt7hTMXLafu6dU7jwc6aQgnbo/Y=
Subject key identifier: D0:1D:5C:9B:E0:C2:33:5D:5C:EA:78:3D:2C:31:D6:67:25:A7:37:70
Authority key identifier: CF:C3:81:45:90:19:89:60:1C:7A:42:26:F2:E0:5F:B8:CF:92:96:83
Certificate issuer: /CN=A91629D4/serialNumber=CFC38145901989601C7A4226F2E05FB8CF929683
Certificate serial: 30
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8OBRZAZiWAcekIm8uBfuM-SloM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.mft
Manifest number: 2F
Signing time: Sun 11 Oct 2026 09:22:17 +0000
Manifest this update: Sun 11 Oct 2026 09:22:16 +0000
Manifest next update: Sun 18 Oct 2026 09:22:16 +0000
Files and hashes: 1: z8OBRZAZiWAcekIm8uBfuM-SloM.crl (hash: wBHXk1LefXZOMDyVaiy92m33PoCB49emU0eWDqxFWV0=)
2: C12E80FC84AC11F188069C008EA30FBC.roa (hash: WPKl0RmubRsg2zOYR5o/LCEZKLKwHEqKhd2tRJMYw50=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.crl
rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8OBRZAZiWAcekIm8uBfuM-SloM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 09:22:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91629D4, serialNumber=CFC38145901989601C7A4226F2E05FB8CF929683
Validity
Not Before: Oct 11 09:22:16 2026 GMT
Not After : Oct 18 09:22:16 2026 GMT
Subject: CN=6acb5548-3061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cb:80:9a:b1:a9:7a:52:04:44:f4:76:e3:a1:
5b:bc:d8:f3:cb:7c:13:5c:c7:4b:11:87:19:6c:51:
4c:cd:2d:2d:c4:3e:3c:5a:24:6f:b3:1b:62:b4:fe:
0a:1f:ba:1d:ad:01:a9:1d:c7:0c:70:a7:45:c0:7f:
dc:d4:da:85:16:98:59:c3:30:a9:50:9d:cc:1f:1e:
44:12:80:13:9f:e1:ec:23:fe:1a:9d:86:7a:57:44:
34:27:4d:39:d3:bc:b9:16:34:d1:4d:27:ed:e0:dc:
4e:cd:65:06:27:7d:10:47:84:40:04:75:b1:d1:59:
3d:be:dc:4b:63:7e:3b:a2:98:07:7c:b4:fc:05:c6:
8e:b3:f2:ca:05:b1:f6:dd:90:d5:30:55:02:64:c1:
29:5a:26:66:54:0b:b3:de:4c:ed:00:b7:91:79:41:
85:37:d2:53:cd:d0:97:38:b1:6b:48:9e:af:d4:f3:
21:44:2b:de:7d:3e:21:b4:1d:9f:9d:51:af:62:3d:
17:77:06:d1:aa:45:63:91:3b:ae:62:91:3a:36:08:
2c:44:9e:84:a4:a3:fd:3e:45:0a:b3:d2:fa:73:2c:
70:d4:c9:40:20:96:72:37:37:ed:07:8d:99:12:2a:
9f:54:5b:bf:40:0a:61:49:3e:4d:c6:5e:55:41:a0:
80:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1D:5C:9B:E0:C2:33:5D:5C:EA:78:3D:2C:31:D6:67:25:A7:37:70
X509v3 Authority Key Identifier:
keyid:CF:C3:81:45:90:19:89:60:1C:7A:42:26:F2:E0:5F:B8:CF:92:96:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8OBRZAZiWAcekIm8uBfuM-SloM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5c:3f:aa:f3:5d:f6:2c:86:b6:4c:f2:ec:77:7b:ec:70:2c:
df:04:c7:89:b5:c2:9e:86:05:13:0f:d1:10:c7:b6:75:14:7c:
85:65:f2:7d:04:17:bb:9c:80:ce:1f:b2:34:f5:c2:c3:b0:4f:
a7:85:a5:4c:2d:86:ae:b7:84:ad:f2:d9:b0:17:11:a1:08:ff:
28:43:40:13:6a:54:ba:24:ad:44:ad:83:f5:dc:38:6b:02:ca:
2a:e6:f7:8b:40:a1:70:5a:6b:a0:a3:c7:e1:ae:61:e0:09:4a:
f1:78:ba:31:6a:4b:84:bc:ed:b0:ba:fa:5e:be:76:ff:1c:b6:
f7:63:83:c3:47:4c:43:81:fb:bf:e0:fa:3b:5d:97:94:00:04:
a9:71:82:5b:b3:36:94:b1:e8:2a:38:0a:e2:0c:c3:b3:b6:44:
3e:2f:47:fb:f8:a1:76:f1:b7:f4:6b:82:30:fc:d5:54:d9:ef:
69:65:da:b9:6e:36:e1:8b:1e:40:00:98:6b:c8:44:36:57:ce:
79:9a:24:ab:7a:d2:2b:a0:45:63:34:c1:a7:d4:9a:3b:11:a8:
25:fd:58:db:07:46:20:bd:50:76:a7:c5:37:b9:1b:24:01:e7:
7f:ac:c4:c9:55:0b:cf:a6:c5:5a:cc:85:18:75:57:e7:e4:88:
bf:8d:db:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:22:25 2026 by rpki-client