
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft
File: ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft (raw, json)
Hash identifier: f9d82uGYPRMzwMW3f1Cx4fHa2Iwk9qgXoQtnrvrH23g=
Subject key identifier: CE:80:41:B5:CC:F5:70:AA:7F:F2:9A:77:29:18:80:07:B5:5F:79:EA
Authority key identifier: 64:64:A8:D4:CB:7A:6B:C9:2B:94:9D:1A:1E:6F:09:93:33:C5:6D:F1
Certificate issuer: /CN=A91694A4/serialNumber=6464A8D4CB7A6BC92B949D1A1E6F099333C56DF1
Certificate serial: 39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft
Manifest number: 38
Signing time: Fri 25 Sep 2026 08:44:10 +0000
Manifest this update: Fri 25 Sep 2026 08:44:09 +0000
Manifest next update: Fri 02 Oct 2026 08:44:09 +0000
Files and hashes: 1: ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.crl (hash: x8pFDuqcCw0NmO3vOJiVJ7GlKWKBS5TZFBNoM+hBH6I=)
2: CCB3F0C665C411F19AAB55CC8147A888.roa (hash: 6HsQ3Z7sCMaiW2glN0WOtCM/Fh9gJPdbJXQJdZ4RzC8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.crl
rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 08:44:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91694A4, serialNumber=6464A8D4CB7A6BC92B949D1A1E6F099333C56DF1
Validity
Not Before: Sep 25 08:44:09 2026 GMT
Not After : Oct 2 08:44:09 2026 GMT
Subject: CN=6ab63459-df88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:44:b8:4a:a3:82:cf:b4:5d:81:75:c3:33:
59:b7:e2:ba:4d:87:c5:16:01:bf:e6:4e:21:ab:1f:
89:ed:b0:c9:ba:11:7d:74:1a:f5:b1:64:c5:0f:7f:
56:ba:23:ad:dc:81:46:81:e2:78:1e:6f:3b:ad:77:
c5:0d:f6:7f:d1:46:ac:66:29:8a:47:8c:3f:01:d5:
e6:e4:97:7f:14:c4:af:13:11:91:cd:b2:60:1b:30:
c7:eb:3c:65:14:e8:0c:ad:a1:36:d7:0f:fc:76:9a:
8c:a9:ec:84:c9:b4:13:e5:12:67:30:09:1a:4b:1a:
2e:33:13:92:e4:55:93:56:cb:50:fa:e5:81:5c:2b:
55:49:f2:fc:42:40:c5:f8:9b:06:b6:a5:2e:4c:57:
00:ae:6b:bd:58:ca:e0:28:27:16:63:a5:96:98:8d:
f3:03:47:b6:4a:f7:aa:da:04:02:81:73:7b:32:24:
68:57:6c:26:55:42:2e:12:3c:14:98:ac:66:fd:02:
7f:1e:63:dd:a2:4c:02:39:99:be:7a:c2:16:d3:ac:
8c:bd:60:93:5c:23:c7:d1:9d:d0:5f:7e:f2:8a:79:
d2:f1:d3:7c:8c:3d:b1:f4:61:f3:d0:ba:0c:d7:4d:
4c:13:28:4a:cb:8a:ff:1d:f0:51:e0:87:0a:32:4f:
c6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:80:41:B5:CC:F5:70:AA:7F:F2:9A:77:29:18:80:07:B5:5F:79:EA
X509v3 Authority Key Identifier:
keyid:64:64:A8:D4:CB:7A:6B:C9:2B:94:9D:1A:1E:6F:09:93:33:C5:6D:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:09:dc:13:62:6c:1f:7e:d3:6f:fb:2c:57:f1:21:ce:8a:98:
1b:d7:b4:c9:7a:7b:7d:e2:e2:54:be:9c:56:14:58:b2:2a:5f:
35:ac:21:f5:c6:ae:f5:56:5a:1a:1a:76:34:8c:10:f7:29:0c:
1e:fd:9b:0a:42:14:dd:e4:de:3f:c4:1d:1c:84:12:20:28:15:
f8:da:0d:77:b6:a4:21:35:5b:a9:b8:b3:5d:7c:1d:67:fc:d7:
7d:a5:47:2c:51:ee:cd:27:66:68:95:6b:97:d0:44:95:48:cd:
db:66:24:da:d0:c6:27:8d:03:99:38:98:b9:ff:43:40:25:59:
30:68:0b:60:b9:1e:8e:c6:3e:53:65:5d:b1:06:79:89:74:47:
9d:87:c6:c2:f4:d7:2e:8c:61:be:08:4f:cb:2b:9f:20:f5:fc:
e2:17:e0:eb:2b:a2:00:73:1d:75:f2:b7:8e:91:cb:15:28:a8:
39:6d:c6:5f:c1:66:11:d3:b3:f4:1e:72:5e:6f:3b:f5:70:eb:
b9:df:89:26:c6:82:33:dc:6d:ce:bd:79:0a:27:a8:8b:b3:22:
a9:ec:f5:18:8b:e2:9f:09:9d:57:b0:7e:21:37:bb:ec:fa:11:
4a:22:07:4d:60:5f:20:79:13:4a:b9:cc:05:90:f3:91:25:61:
a6:d0:cf:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:34:29 2026 by rpki-client