
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
File: _zNBly3YofaHHt6Gmjod2SUorrY.mft (raw, json)
Hash identifier: wNIzp7pTkQj/yE37bihPHbRpQ0f8znoUEaK10YoCtBY=
Subject key identifier: 19:62:C8:40:03:35:B0:16:62:EF:86:47:9C:C1:AD:02:77:62:B6:4C
Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
Certificate issuer: /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
Certificate serial: 0E88
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
Manifest number: 0DDD
Signing time: Wed 28 Oct 2026 16:50:11 +0000
Manifest this update: Wed 28 Oct 2026 16:50:11 +0000
Manifest next update: Wed 04 Nov 2026 16:50:11 +0000
Files and hashes: 1: _zNBly3YofaHHt6Gmjod2SUorrY.crl (hash: x36XzrtfEuXvYTC2MXYycTor+izUZdFbAgGs8AL+p9E=)
2: CCFA7454F04611F087BCEF76546F56BC.roa (hash: t8LYkfUz7zztTyEeLhGNHxti7o0f+rU03cgjhjpa5h0=)
3: 69FDEAC6645511EFB98C143DC4F9AE02.roa (hash: 09VvW3k0eoInlQS+H6ZHr0QcmrKaADNzaQ8RUnamjko=)
4: F4A77A06CED911ED9BC69385C4F9AE02.roa (hash: 1z0DBiQnEIz3Dx2+68qVMHYw2A5RwkYWaUuHFrVt564=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl
rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 14:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3720 (0xe88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
Validity
Not Before: Oct 28 16:50:11 2026 GMT
Not After : Nov 4 16:50:11 2026 GMT
Subject: CN=6ae227c3-bbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:df:4b:96:77:4e:76:9e:a3:06:25:02:21:87:
e1:29:19:2a:dd:2f:ab:83:28:54:6b:2c:4e:c4:ff:
b5:04:b5:b5:b6:f3:58:11:9f:00:31:f6:6c:21:1e:
f5:15:e7:0b:ef:ec:4d:05:a4:5c:9e:95:9e:c4:20:
7f:54:a6:33:28:ce:90:01:07:90:68:4a:1c:25:47:
11:d0:f9:81:20:a7:0b:c2:de:93:8e:26:0d:17:62:
f3:40:c9:e0:a8:4e:9b:aa:c5:1f:d2:63:0a:3c:d9:
f7:a8:a8:86:1d:cf:09:96:52:42:56:d8:13:40:04:
82:ef:96:89:88:e9:3b:d6:c3:ac:fb:d6:25:58:e8:
2d:01:19:0c:a1:2d:f4:a6:af:ce:cc:a0:e2:53:fc:
5c:38:16:c9:59:27:8f:63:0b:bc:7b:1c:53:28:63:
71:16:25:27:dd:62:89:cc:b5:bc:02:50:84:25:5c:
be:01:a2:2f:ce:63:12:73:6a:14:ac:79:6b:36:92:
da:6c:8d:30:22:85:2c:9a:a0:27:fe:55:89:d9:23:
17:7c:68:78:40:e5:66:e4:9a:66:c9:58:7c:e8:d7:
f0:4c:ad:a4:9b:0d:1e:9a:c3:38:ad:2d:b4:20:d5:
48:ef:30:bb:53:7d:7d:a6:d2:86:89:e2:3f:3f:47:
44:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:62:C8:40:03:35:B0:16:62:EF:86:47:9C:C1:AD:02:77:62:B6:4C
X509v3 Authority Key Identifier:
keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0e:bb:ba:84:2c:77:49:b8:ed:54:18:94:2f:43:ad:19:01:
44:da:29:e4:26:e5:fe:9f:53:44:81:e5:30:d2:82:46:6e:c6:
87:a2:e2:6a:1b:ed:86:dd:d0:1c:c6:bd:b9:1c:e1:9c:27:6e:
a3:ef:5c:6e:32:54:a4:66:b4:3d:20:69:b9:ca:63:0a:8e:ad:
4d:10:73:33:d0:7a:c3:35:48:67:1b:e2:8c:27:7b:3a:33:c2:
4d:d8:ce:40:86:14:b6:35:24:7b:da:8a:89:8d:65:04:42:53:
06:f0:97:94:d8:2b:07:97:4f:97:f7:53:15:88:4b:2d:a1:85:
63:75:68:84:1e:f7:22:e7:24:a4:d0:7c:0f:2f:ab:ac:83:34:
85:b2:78:c5:fb:0e:b2:aa:30:d5:0e:ea:c2:6c:3c:87:73:d5:
d0:56:c9:72:98:5b:af:2e:7d:0a:52:3c:de:6d:62:31:1f:c6:
9f:a2:a6:e6:ec:ac:49:30:84:0b:d6:2f:43:87:de:cd:c3:26:
16:b8:d9:fb:a1:13:e2:99:3b:1b:02:66:ce:72:d7:e5:5e:03:
0c:ae:35:7b:6a:c8:f5:85:8c:58:9a:79:ba:88:09:e1:24:8b:
05:d0:16:f3:29:17:1f:fa:af:c8:59:c3:5d:77:14:91:2e:ee:
82:1b:7d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:48:52 2026 by rpki-client