
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft
File: Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft (raw, json)
Hash identifier: 1AQrL3Aa9J1TGXZniClMBtmtaeNl2287c2V85NGPSP4=
Subject key identifier: 09:85:4D:CF:F1:4C:39:F6:4D:33:5C:89:89:39:30:CC:29:31:2B:EF
Authority key identifier: 67:CB:11:45:A8:9C:D8:B6:7A:ED:9E:4E:52:87:03:F5:5C:15:21:B3
Certificate issuer: /CN=A9169E72/serialNumber=67CB1145A89CD8B67AED9E4E528703F55C1521B3
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8sRRaic2LZ67Z5OUocD9VwVIbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft
Manifest number: 55
Signing time: Wed 07 Oct 2026 08:47:02 +0000
Manifest this update: Wed 07 Oct 2026 08:47:02 +0000
Manifest next update: Wed 14 Oct 2026 08:47:02 +0000
Files and hashes: 1: Z8sRRaic2LZ67Z5OUocD9VwVIbM.crl (hash: J4W84c8KkmkNT0nIHV9DLWnfZJmGSgqvCB1OyCfP5VA=)
2: 2EC97C2C3EC911F18D9C5FE1AC833773.roa (hash: EvUSWLNIQOqqmidD5PHrkwd8fAUpWrCITwdT6HKeSIE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.crl
rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8sRRaic2LZ67Z5OUocD9VwVIbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 08:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169E72, serialNumber=67CB1145A89CD8B67AED9E4E528703F55C1521B3
Validity
Not Before: Oct 7 08:47:02 2026 GMT
Not After : Oct 14 08:47:02 2026 GMT
Subject: CN=6ac60706-c9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5d:eb:14:fc:4a:49:d8:ad:0e:07:da:8f:d2:
c8:ef:f7:ff:73:51:72:f6:5b:68:78:88:b5:3d:69:
91:bd:ec:d3:1a:e8:ed:ea:f2:4c:19:a5:b7:4f:1c:
56:ee:1a:b7:a5:9d:65:47:07:a3:0d:1c:d7:e5:7b:
2b:c7:f3:84:1a:90:b9:95:78:19:42:64:85:2a:cd:
33:04:f7:a4:aa:1d:7c:27:21:6d:59:45:fc:45:4b:
bf:7a:0d:13:fd:51:86:2b:f1:fc:58:6c:05:ef:2f:
d2:dd:0d:48:8e:3b:06:b0:0e:e7:8d:da:ef:8e:0b:
cd:ec:88:ed:5d:9e:d8:83:90:d4:59:dd:6d:0d:47:
a5:33:57:a0:57:28:75:ae:1b:2f:e6:12:b8:a4:12:
3d:09:17:cd:bd:52:2f:88:72:4b:20:65:66:b7:1a:
77:97:92:88:60:9e:02:3b:46:c3:f8:a9:da:e1:6f:
a1:b1:f0:97:cb:00:33:5f:1f:0a:bd:a4:d5:29:5a:
db:b7:29:62:00:af:fe:91:dc:47:f5:79:d6:11:29:
7d:6d:6f:ef:ef:a6:66:76:6f:37:f9:68:07:87:01:
35:96:09:75:9b:1e:56:92:75:7d:d5:ee:ed:26:84:
d8:72:68:08:3f:e8:16:44:1e:0b:fc:37:1a:8e:a6:
5f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:85:4D:CF:F1:4C:39:F6:4D:33:5C:89:89:39:30:CC:29:31:2B:EF
X509v3 Authority Key Identifier:
keyid:67:CB:11:45:A8:9C:D8:B6:7A:ED:9E:4E:52:87:03:F5:5C:15:21:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8sRRaic2LZ67Z5OUocD9VwVIbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:a5:47:9c:82:fa:d7:db:43:cb:be:c3:4a:93:0b:fe:8c:0d:
4e:d4:c6:3b:67:c3:e5:dc:4b:dd:38:67:61:4b:b5:a1:91:c7:
c1:2a:ff:63:d6:87:2b:ab:5e:07:c7:81:59:8e:1e:84:e4:c2:
0f:c0:84:0c:36:a2:b9:a1:7f:55:b7:a4:b4:ba:e1:ee:15:ed:
5f:71:27:26:3c:a8:9a:98:cd:23:aa:d0:76:2e:6f:b9:22:29:
f6:f0:29:0d:83:8a:6a:c5:84:dc:10:54:59:7e:fe:eb:30:32:
aa:08:7c:12:4a:87:ca:6e:2f:a9:9d:b9:c6:c3:83:e1:96:e8:
9e:30:8c:a0:c7:31:6c:be:92:c5:fe:49:b1:d8:97:a8:af:07:
fa:45:36:9e:d3:55:71:42:50:0d:f2:27:0c:d1:30:3f:0a:72:
7b:c5:25:5d:4e:a4:2f:bf:81:f3:4d:4a:03:1d:85:5d:b7:97:
bd:4d:33:27:ea:d6:e3:35:4c:fb:20:9b:fc:7f:f0:d0:2f:ac:
a6:f1:ee:e0:f9:65:c0:63:93:08:30:57:98:55:70:d0:3d:59:
ab:bb:c4:dd:5e:ef:60:2b:bf:46:25:17:10:eb:d5:1d:92:f4:
25:a0:f2:f8:ed:a2:d0:e8:bb:01:9a:02:49:f2:7a:53:74:e2:
7f:61:7a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:18:26 2026 by rpki-client