
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
File: 584ZoXhVIoFdq2P_ZttviQP8-fo.mft (raw, json)
Hash identifier: P4DguXYbCMsZISuZdA9y/G6J3j3UrWN8sdlZj7LIViI=
Subject key identifier: 6F:DB:77:C2:CB:41:BF:CA:75:16:35:B6:A3:E9:00:42:9E:DE:57:46
Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
Certificate issuer: /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Certificate serial: 0312
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
Manifest number: 02EC
Signing time: Sat 03 Oct 2026 01:40:02 +0000
Manifest this update: Sat 03 Oct 2026 01:40:01 +0000
Manifest next update: Sat 10 Oct 2026 01:40:01 +0000
Files and hashes: 1: 584ZoXhVIoFdq2P_ZttviQP8-fo.crl (hash: k6kbvZXMEW7bgM1kLpOkGsUbjQVtUpYSq6FGH84Ph8I=)
2: 455D199EE38B11EE84566164C4F9AE02.roa (hash: gOV5rPqQrYO4YVfNAWomUe0MtcUzLHbDhM46sP91PRA=)
3: 0BC0C374A7D711EEB631CA47C4F9AE02.roa (hash: IUtOdJiE9Ch7kGLlPuHyU4+jmWHwHE+NOWpak4vAtYM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 01:40:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 786 (0x312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190CC7, serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Validity
Not Before: Oct 3 01:40:01 2026 GMT
Not After : Oct 10 01:40:01 2026 GMT
Subject: CN=6ac05cf1-2f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:c4:53:df:13:eb:ae:22:d6:c3:cb:c2:79:
37:fa:88:ac:f9:1d:91:2b:39:8b:c1:af:1e:3d:e8:
76:fc:e8:29:19:85:99:7d:53:1b:dd:a4:87:d4:f9:
58:8c:71:46:75:74:0b:f9:c6:e8:ba:d8:3a:b6:25:
57:55:1e:bc:55:80:97:4b:cc:f4:5c:1a:83:ad:df:
c0:33:ec:14:9d:d7:12:34:eb:39:0e:65:34:6a:10:
a4:f6:26:b1:3a:32:d0:b5:86:e1:ba:aa:b1:73:38:
6c:f9:b9:c8:8a:df:dc:9f:59:fa:b4:68:36:38:38:
ef:63:6a:1c:f9:48:7f:fa:b7:1e:08:eb:7a:e5:65:
2d:32:3f:89:d8:cd:78:c8:a3:d5:58:03:91:47:96:
5f:7a:83:5d:4e:d5:e1:1f:9e:c9:c1:55:fe:2a:b7:
66:dd:2c:86:14:9a:c9:97:2f:b3:b8:64:03:1a:85:
15:e2:ae:7a:4e:16:98:8f:27:6b:f1:0e:56:34:9a:
89:84:3b:10:54:e5:f6:9f:07:63:79:a5:26:ad:ae:
0f:52:41:f5:6b:7a:8f:7f:f6:e6:97:6a:e0:27:7b:
78:4e:25:6b:3f:da:6f:aa:d9:34:1d:be:92:b2:84:
e3:aa:fb:a7:94:44:76:5a:3e:37:b4:33:65:ce:a5:
5d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DB:77:C2:CB:41:BF:CA:75:16:35:B6:A3:E9:00:42:9E:DE:57:46
X509v3 Authority Key Identifier:
keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:07:dd:17:10:25:ed:cb:a5:75:bd:d1:6c:de:d0:ce:a7:e8:
44:a4:a7:c1:ae:37:42:61:78:02:67:80:2d:bd:9d:79:9d:28:
f6:57:7e:39:f8:b8:60:f9:cc:db:34:8d:2e:10:a3:38:9d:a6:
59:2a:8a:7b:ed:e4:69:9c:2b:2f:89:52:66:59:5f:31:c8:fa:
67:f1:ec:30:31:86:f8:b8:cc:a8:52:8c:12:fb:1f:6c:ef:0e:
f3:72:81:57:ca:da:49:96:df:85:2a:74:86:d0:54:5f:7c:f4:
b3:ea:d7:ed:6a:89:da:68:3e:73:c2:02:25:fc:13:4a:d6:06:
cd:96:e8:97:6d:4b:53:72:03:26:0a:7c:b4:c8:50:cb:f1:b6:
ef:f5:a0:71:ae:95:3a:df:2f:01:c9:c2:5d:be:7d:b2:e8:fd:
59:f7:49:95:fd:fd:b2:3c:9a:1f:21:14:f8:f0:b4:b2:0d:f3:
39:5f:0d:cc:ee:80:8a:6d:42:c4:26:be:ac:c0:80:e8:a2:f7:
47:25:70:b3:49:c5:57:96:f3:62:8c:a9:fc:13:1f:1e:af:d5:
f0:27:14:9a:2f:66:26:9d:96:4b:18:45:69:f7:c8:54:ae:b8:
df:75:47:32:70:5a:17:e7:7c:ed:3a:40:1c:26:c3:e8:be:54:
62:2a:fb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:38:23 2026 by rpki-client