
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
File: ZEfjYbGkSWugEo32lWV0SOleK5U.mft (raw, json)
Hash identifier: QhqZ6oWta3JD8h85pVtT+Vg/k47PAY1YwGurwsm4fLY=
Subject key identifier: 4C:83:FF:C5:6E:24:DA:4D:D4:AC:C8:B1:01:07:D9:94:E9:47:4E:C0
Authority key identifier: 64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95
Certificate issuer: /CN=A917F879/serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95
Certificate serial: 0AC1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
Manifest number: 0AB1
Signing time: Fri 18 Sep 2026 19:27:14 +0000
Manifest this update: Fri 18 Sep 2026 19:27:13 +0000
Manifest next update: Fri 25 Sep 2026 19:27:13 +0000
Files and hashes: 1: ZEfjYbGkSWugEo32lWV0SOleK5U.crl (hash: swvFNTzzB5duVR5vLaWFn3Vzs48MgkMwq/zpCY0qRuU=)
2: 894FFF40556111EDB7E45424C4F9AE02.roa (hash: bQj5mxklQD19F906ONQY4Ae0sdx03lDa6OD6mt+hkGU=)
3: 8A6AA178556111EDB7E45424C4F9AE02.roa (hash: EASpkdXObrJ8H1sWrr81zx66bGecEu9OLYPesUTFCoA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl
rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2753 (0xac1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F879, serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95
Validity
Not Before: Sep 18 19:27:13 2026 GMT
Not After : Sep 25 19:27:13 2026 GMT
Subject: CN=6aad9092-3b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c4:38:75:0b:a3:02:ca:8d:54:cb:19:d6:8c:
c5:2f:56:11:35:35:bf:ba:e0:24:e1:58:3d:25:34:
21:eb:2d:3e:33:14:1d:5f:10:12:ee:17:0b:8f:e5:
e8:8c:fc:ac:47:0f:ae:d3:a7:21:5d:c4:6e:ff:61:
18:aa:47:5c:ce:2f:0f:83:e3:70:b7:7e:0b:3f:2b:
81:d1:bf:1f:b3:d6:bb:fb:cf:85:44:c0:2c:83:47:
69:f7:cc:5f:2c:8c:b5:10:4d:0f:60:68:60:01:56:
16:f2:79:03:65:39:e3:b8:c1:ae:c0:f2:36:fa:8e:
15:4a:0c:3b:e0:82:28:18:55:a7:95:d6:51:ae:1a:
79:ca:85:40:30:ab:e0:3e:69:f5:83:74:13:91:d6:
90:80:6e:d6:8f:4e:23:7f:78:d7:00:f7:05:65:8a:
f3:d6:0c:e8:4d:81:5f:21:7d:4e:1b:7b:db:fe:93:
e0:1f:80:b4:06:84:1c:a8:c0:f6:d5:c3:af:c6:47:
6a:4d:1c:91:b6:fe:7c:29:b6:c7:a8:2d:28:a2:b4:
fd:f2:00:6f:45:d3:fd:11:2d:b4:46:6d:59:c5:b2:
53:9c:1b:3e:0d:da:8f:0d:1d:7c:f2:8c:74:ca:63:
48:d2:0b:e8:27:d2:81:7e:fa:05:69:91:5c:f5:3a:
22:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:83:FF:C5:6E:24:DA:4D:D4:AC:C8:B1:01:07:D9:94:E9:47:4E:C0
X509v3 Authority Key Identifier:
keyid:64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:a1:91:28:87:88:b6:c9:4b:ca:7b:f3:40:59:dd:a9:1e:39:
b4:09:45:be:53:f1:82:2a:8e:d6:06:16:98:a3:39:6d:84:14:
e1:86:d3:d1:4e:96:b7:0a:ec:85:78:ad:cb:94:32:52:73:1e:
fe:8c:7a:7c:97:f6:b5:15:bc:14:e0:be:db:79:f9:12:7e:64:
d1:39:74:ef:9e:0f:41:4d:2f:b3:3c:4d:09:46:02:91:e6:38:
4a:f6:2c:3a:28:17:22:10:e8:d2:23:a5:30:45:3b:db:e3:74:
97:17:17:bb:ce:b2:6a:7f:aa:a9:5d:47:f6:c2:95:f5:a8:aa:
dc:5d:66:0d:ab:a9:b5:14:93:6a:d5:1d:98:c0:73:3f:46:a8:
55:ae:4e:d5:89:71:c5:03:35:f0:e3:6c:87:01:78:30:2e:11:
f0:2c:6f:44:b2:d5:5d:57:a9:52:06:87:1f:a1:56:e1:87:b3:
34:e5:79:e7:bd:90:b7:93:42:52:56:eb:0d:8d:2d:6f:5d:64:
cb:84:d4:c9:06:bb:7e:69:3a:36:68:c7:01:84:29:00:c7:e5:
f6:f4:00:a4:f6:2f:6c:12:cd:bb:37:a4:da:4d:8f:33:e5:6f:
ee:f5:59:50:40:68:4d:d9:ae:bc:95:8a:bb:7f:f6:cf:11:5f:
12:10:0d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 10:04:08 2026 by rpki-client