
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft
File: zcBVaYflG5M72WLX70WXHLqnosM.mft (raw, json)
Hash identifier: A/l1V6a9CuttHP7DOKObb3RSZzFsr9C4D0OvT/4H+L0=
Subject key identifier: 44:0F:4D:7B:71:78:D2:6D:3E:C2:1B:A1:70:EA:B9:88:D8:B4:E4:37
Authority key identifier: CD:C0:55:69:87:E5:1B:93:3B:D9:62:D7:EF:45:97:1C:BA:A7:A2:C3
Certificate issuer: /CN=A917D31E/serialNumber=CDC0556987E51B933BD962D7EF45971CBAA7A2C3
Certificate serial: B7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft
Manifest number: B4
Signing time: Fri 09 Oct 2026 07:43:03 +0000
Manifest this update: Fri 09 Oct 2026 07:43:03 +0000
Manifest next update: Fri 16 Oct 2026 07:43:03 +0000
Files and hashes: 1: zcBVaYflG5M72WLX70WXHLqnosM.crl (hash: ZqJQEh6m0wZDlEjSD46v+oKtNUayBC2HidlDfTowFF8=)
2: 53D97C4AB6E011F0AE8E6B74C4F9AE02.roa (hash: TiQZcsUf6hmm4Z9q41HFXcSU+c6S5y0lWjoRYfK9XxA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.crl
rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 07:43:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D31E, serialNumber=CDC0556987E51B933BD962D7EF45971CBAA7A2C3
Validity
Not Before: Oct 9 07:43:03 2026 GMT
Not After : Oct 16 07:43:03 2026 GMT
Subject: CN=6ac89b07-5ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:df:65:c1:c9:f7:4a:c6:a9:aa:54:6b:f4:41:
dc:2b:79:e3:ed:00:9c:72:97:be:90:10:9f:9c:a6:
ef:3e:d2:52:c4:c7:6d:2d:51:bc:05:8f:ca:05:b6:
a3:e9:0c:f7:98:48:b4:5b:d5:95:4f:77:d1:a2:02:
98:6a:e5:26:c3:12:a7:a2:7e:1e:82:55:0c:98:e6:
5c:a8:91:cc:a2:7b:b3:c1:ca:b8:63:c3:68:c2:99:
fc:2a:3f:28:a1:0f:06:28:af:5a:50:36:7c:f4:d3:
ef:09:35:7a:7b:5f:07:34:9d:80:1b:e6:ba:d5:e3:
c3:53:f6:48:00:64:b8:bf:05:24:76:5c:bf:8b:f6:
b8:e7:f7:5f:f5:5d:64:7b:fd:f7:d7:02:de:c1:76:
37:34:a5:58:da:65:80:12:76:3e:7c:30:9c:0d:49:
99:ae:ac:74:39:c8:2e:37:22:1b:1a:e9:6d:87:91:
be:b3:57:5c:9d:cd:39:dc:45:e0:6a:f7:57:f1:5c:
ad:9d:42:f1:e8:ee:7c:d9:0f:71:e4:01:19:9d:8b:
dd:00:42:1a:3e:2a:55:b5:51:61:0b:62:a5:23:8e:
41:d0:7b:0f:c9:7d:74:ed:7e:2b:4e:02:16:18:46:
c8:95:5d:c1:95:f4:52:04:30:95:8a:a9:37:9e:bf:
f3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0F:4D:7B:71:78:D2:6D:3E:C2:1B:A1:70:EA:B9:88:D8:B4:E4:37
X509v3 Authority Key Identifier:
keyid:CD:C0:55:69:87:E5:1B:93:3B:D9:62:D7:EF:45:97:1C:BA:A7:A2:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:0a:ea:51:af:65:57:de:a8:ad:58:fe:6a:ca:ab:e2:a8:61:
f0:40:65:af:7c:72:3f:98:b2:a5:c0:a6:05:57:50:81:09:e7:
fa:76:71:f0:59:d2:ea:f9:16:c2:92:bb:2c:57:03:82:0b:68:
19:6f:33:41:6f:cf:85:26:4b:a2:3e:ff:c4:9d:cf:46:c5:4e:
20:fc:6c:4d:75:8a:23:4c:18:b5:5b:9f:32:42:11:0a:96:1f:
14:fe:f6:34:d3:17:42:ff:52:53:61:df:7f:1c:40:ae:51:05:
c5:7a:69:c5:85:fd:75:9b:6a:9c:47:e2:40:c7:fd:03:e8:4a:
78:44:2f:6e:39:46:f4:ab:ec:8b:1d:2d:c9:e2:da:a2:7f:b7:
bc:2f:3c:f5:76:d0:d6:63:bb:f6:a5:b4:c5:24:93:c7:ad:bb:
6f:61:f2:3a:64:12:85:68:69:9a:ca:52:99:6a:2d:34:55:84:
2f:60:df:76:ef:fe:80:9a:da:f3:05:35:76:ed:6b:02:02:ef:
88:b4:55:a0:78:1d:dc:30:03:3f:47:d2:72:7f:99:42:c4:ca:
94:21:87:d1:7b:87:e1:a6:0a:72:38:ee:56:99:2d:34:db:56:
15:d0:17:c6:87:d4:f1:3b:a6:f9:18:89:e7:f3:fd:11:79:63:
af:16:1d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 11:07:59 2026 by rpki-client