
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
File: ZpvKCpDeWAORqO5km-TvvjbOhBg.mft (raw, json)
Hash identifier: M9E5rQu4MChfcTglwApv2UpbK7FxW4XJagNlJCmLZ9g=
Subject key identifier: DF:2E:A7:0D:6A:0F:FA:52:85:94:3E:BA:98:EC:01:3B:F7:8E:24:F1
Authority key identifier: 66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18
Certificate issuer: /CN=A918031D/serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418
Certificate serial: 01B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
Manifest number: 01A7
Signing time: Tue 27 Oct 2026 04:24:47 +0000
Manifest this update: Tue 27 Oct 2026 04:24:46 +0000
Manifest next update: Tue 03 Nov 2026 04:24:46 +0000
Files and hashes: 1: ZpvKCpDeWAORqO5km-TvvjbOhBg.crl (hash: DQdab/6xIHjCLSxRROXzYIEHoODxPT2gosSeT8xm00w=)
2: 314597D64EEF11EF8BACFA30C4F9AE02.roa (hash: fatYWfUiC0oQ2aEV3e8JimC/cTTVSH0n1eBQkWzSdB0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl
rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 04:24:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433 (0x1b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918031D, serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418
Validity
Not Before: Oct 27 04:24:46 2026 GMT
Not After : Nov 3 04:24:46 2026 GMT
Subject: CN=6ae0278e-4f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ba:a9:fd:ba:63:76:fd:dc:a0:dc:18:b7:ce:
58:bf:32:00:a0:d7:e3:49:f9:4d:3b:8b:98:70:f0:
c8:9e:70:49:49:1e:58:25:a9:ba:0d:dd:49:92:48:
74:c0:3a:c4:aa:4c:fd:b6:58:43:d6:c9:0b:e7:cb:
ab:08:f5:4a:82:69:9d:70:e7:3b:32:10:5a:31:89:
e4:a8:df:db:f8:c7:20:b5:22:16:e4:99:fe:de:4f:
75:0a:e2:99:5b:f3:c8:27:af:1e:82:f7:dd:67:fb:
44:ea:e2:05:fd:8e:ae:79:66:7e:f0:bf:35:c5:8a:
c1:33:56:20:c7:18:0b:0a:a6:2c:bb:fe:6f:22:7a:
d8:e4:ae:73:ed:3a:8c:6a:db:df:d0:8a:f7:c1:cd:
ed:d3:4b:d2:49:cc:91:0d:2e:c2:6b:22:73:cc:13:
3f:85:7a:ca:14:bf:6f:46:6b:df:8f:83:14:91:38:
59:8e:2f:26:51:59:eb:cc:bb:4c:0c:fb:bc:13:d1:
4a:b0:a4:b5:8e:28:73:51:39:b3:1d:71:f6:ef:6b:
58:2c:26:ef:6e:8e:fb:6e:12:e6:41:c1:8f:d8:e7:
dc:1a:04:54:48:7a:10:99:0e:a4:4b:76:50:75:90:
89:a1:f3:e5:6e:33:19:e6:b9:47:07:5d:9a:08:5d:
21:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2E:A7:0D:6A:0F:FA:52:85:94:3E:BA:98:EC:01:3B:F7:8E:24:F1
X509v3 Authority Key Identifier:
keyid:66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:d4:a9:d9:10:31:f7:ed:63:5b:64:63:f3:e8:6c:ab:ec:dd:
21:74:a6:1a:a2:0f:a4:a0:de:5c:cb:28:06:70:16:2f:17:ea:
20:4f:c7:70:43:20:eb:55:e5:b2:b2:44:f0:c3:dd:a2:2d:fd:
b4:90:cc:e8:1e:1f:24:80:df:b7:30:23:15:c0:08:cb:ef:e8:
d1:7c:e2:6b:96:e1:90:9f:81:d3:54:53:0a:59:4c:29:a9:39:
1f:85:64:49:f7:6e:b2:94:f6:b3:4d:6d:ec:2e:32:46:ea:ef:
66:c4:d5:13:72:4f:35:8c:8e:96:8e:0f:ee:c7:a1:aa:cc:bd:
da:44:7a:f2:ec:1e:66:be:a0:d3:17:c7:71:30:fe:69:b3:be:
98:ae:30:87:8e:ac:8f:8b:e0:ed:67:cc:a3:84:0b:7b:17:7c:
48:47:85:9f:85:60:db:09:13:44:8d:a3:a4:7b:bf:f4:83:e4:
7a:3b:6b:fe:2a:61:ed:2d:47:23:78:1b:a2:e7:c4:1d:c4:02:
15:c9:04:7c:18:e5:62:97:44:3a:ec:dc:41:47:4e:61:4d:d2:
9c:d4:66:c8:88:8b:e8:dc:a5:ca:f7:56:a9:af:79:93:63:b7:
16:5c:f1:3a:b9:35:35:72:83:37:5b:47:69:a3:76:ac:c5:03:
ab:2a:91:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:11:10 2026 by rpki-client