
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft
File: zcaQgy8tEjXavx7zF_EbaV7r2k8.mft (raw, json)
Hash identifier: Pgjv/bo2z3jxwiujJizG34MxJERSwS2UtFzf2YXP0nU=
Subject key identifier: F0:9D:D0:CE:92:96:6F:95:97:E4:31:53:5E:62:03:70:69:0A:63:D9
Authority key identifier: CD:C6:90:83:2F:2D:12:35:DA:BF:1E:F3:17:F1:1B:69:5E:EB:DA:4F
Certificate issuer: /CN=A9166D02/serialNumber=CDC690832F2D1235DABF1EF317F11B695EEBDA4F
Certificate serial: 91
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft
Manifest number: 8E
Signing time: Sun 25 Oct 2026 08:00:15 +0000
Manifest this update: Sun 25 Oct 2026 08:00:15 +0000
Manifest next update: Sun 01 Nov 2026 08:00:15 +0000
Files and hashes: 1: zcaQgy8tEjXavx7zF_EbaV7r2k8.crl (hash: ZBrvVh+pEA1LL0PDJ/Tf4ezY2t165uI402MIo0Lz2Zg=)
2: 01AB053800E611F1BE6C33EC376F56BC.roa (hash: kmY0qRrvIDIK9Tv6KUtstC/wtlPYaFhtrXRSIWFN1NU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.crl
rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166D02, serialNumber=CDC690832F2D1235DABF1EF317F11B695EEBDA4F
Validity
Not Before: Oct 25 08:00:15 2026 GMT
Not After : Nov 1 08:00:15 2026 GMT
Subject: CN=6addb70f-f407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bc:da:a0:6e:0a:a4:66:ad:6d:0a:42:f1:5e:
1e:45:b3:5f:8b:17:6d:18:9c:ff:6d:f7:21:04:53:
16:1b:37:09:4a:e6:e4:20:f6:c8:ea:ea:2f:d1:40:
39:76:3b:84:19:95:5f:4b:66:9e:61:21:26:2a:cb:
b9:18:f9:46:5e:33:5b:28:dc:fa:6b:fb:66:36:a6:
85:3d:6c:d3:28:9f:46:b3:bc:2a:0c:7a:f6:69:69:
33:36:0a:68:97:59:7d:00:23:64:71:ec:4b:cc:37:
3a:bc:3c:72:92:a3:07:cf:31:fd:64:de:0c:3e:86:
45:87:93:08:56:66:1a:5a:56:37:bd:43:b1:e7:0b:
75:16:f3:6c:88:99:8f:6a:0c:be:b6:0f:7b:4b:f6:
09:2b:e7:1d:69:f8:2f:f0:01:fe:de:fb:a7:c3:da:
45:02:f5:90:85:f5:fc:99:5a:2f:9f:3e:bb:75:49:
b4:2b:1a:0a:79:4a:67:bd:79:f8:97:b6:0c:16:35:
27:06:af:50:78:7a:28:7e:4d:0d:f7:9e:bd:4c:f6:
ca:9b:99:be:46:46:8d:c9:7f:e4:54:27:f4:72:6b:
60:2e:cd:df:15:21:f7:43:a9:43:ab:e3:c2:54:0c:
d5:2f:23:14:19:f4:d1:a5:5f:41:1b:71:92:8b:32:
45:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9D:D0:CE:92:96:6F:95:97:E4:31:53:5E:62:03:70:69:0A:63:D9
X509v3 Authority Key Identifier:
keyid:CD:C6:90:83:2F:2D:12:35:DA:BF:1E:F3:17:F1:1B:69:5E:EB:DA:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:43:e5:99:e1:86:e4:29:ce:c0:21:8b:5d:59:20:55:7a:c2:
5c:de:56:d7:39:84:a1:85:03:d2:43:6c:b0:a5:f6:2e:9f:67:
ec:a3:2d:1d:5e:6d:a4:52:55:86:5f:46:a9:a4:d4:e1:42:fa:
5f:4e:c3:6f:9f:8d:0b:75:1d:21:f3:54:46:48:2c:a6:32:24:
07:7d:f4:b2:c9:9c:42:90:b6:ce:3e:05:a4:29:0a:d8:a9:6c:
c8:76:43:46:cc:d3:6a:9d:6f:c7:e6:2c:32:2a:84:10:9b:47:
84:b2:dd:24:80:ab:eb:7c:a9:6c:d9:cd:3a:1f:e0:53:68:a2:
19:d3:95:cf:d1:1f:fa:4b:ad:de:4e:de:33:48:ef:96:0c:8d:
91:2b:fb:5d:29:3e:1a:6c:4c:37:cf:4b:2b:93:e5:8d:fc:0a:
e4:9d:29:9b:85:4f:e8:dd:ed:20:6c:07:da:c1:cd:1c:12:ba:
2b:23:48:36:57:6e:c6:6a:fd:49:82:4c:7c:06:e4:e5:06:dd:
5b:49:d9:fb:ae:08:37:fc:a0:2b:3f:08:34:3a:a6:12:ee:26:
bb:82:82:31:83:13:7c:fc:aa:24:8f:9e:61:a2:dd:95:9d:03:
02:15:18:9c:d9:36:bd:9f:7c:17:64:c0:6a:c3:c5:95:26:4b:
b5:4c:38:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:12:52 2026 by rpki-client