
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft
File: Zi7Jore2zkLSOlI4U0xldiIyU3I.mft (raw, json)
Hash identifier: bRR1gqkukTW7gEOEKJswmAVZA/plkFWt0i3KdNCmiQI=
Subject key identifier: A7:07:D4:AE:EC:C1:03:4F:15:D9:6F:85:F1:49:7E:90:1A:65:44:8B
Authority key identifier: 66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72
Certificate issuer: /CN=A91918AB/serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372
Certificate serial: 9B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft
Manifest number: 96
Signing time: Fri 09 Oct 2026 08:11:20 +0000
Manifest this update: Fri 09 Oct 2026 08:11:20 +0000
Manifest next update: Fri 16 Oct 2026 08:11:20 +0000
Files and hashes: 1: Zi7Jore2zkLSOlI4U0xldiIyU3I.crl (hash: +odxgFptiAFGwlAZLWbkxzFKYATTx0SoVsqP1PMA4YY=)
2: 41527E061CFB11F1BAE9C5A3413D8C67.roa (hash: AA4gBjxlDFvAHeJBtHXm9algpg/YYgqK825E6bjNQcI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl
rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 08:11:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155 (0x9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91918AB, serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372
Validity
Not Before: Oct 9 08:11:20 2026 GMT
Not After : Oct 16 08:11:20 2026 GMT
Subject: CN=6ac8a1a8-211b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7a:a3:74:20:e7:97:62:2c:47:a6:78:8f:03:
b6:e5:ad:ab:56:b9:67:17:c6:02:43:4d:ee:8f:10:
e5:6c:14:5d:99:14:46:82:a2:2c:41:ac:1e:d4:31:
9b:be:dc:cf:13:33:01:60:7d:ca:f3:cf:80:75:e9:
97:9c:f2:a5:60:14:28:99:b4:25:ce:e1:64:27:2d:
1a:1f:6e:ab:63:99:07:5b:8a:05:69:3c:e0:c2:41:
af:b4:da:97:5f:d1:9a:06:d5:fc:53:e3:a5:c4:c9:
f2:be:9c:3c:95:0f:d0:0b:8b:df:ca:ee:f1:83:f2:
76:28:a3:84:8a:79:21:87:38:a5:2a:a5:47:bf:f0:
bc:69:85:97:cd:c6:4d:4d:da:f0:ae:e2:5d:98:6f:
0a:4e:5c:84:ed:3e:5a:56:4e:88:02:87:c9:aa:3e:
e6:cc:ec:23:70:69:61:8e:43:21:17:da:e9:fa:9c:
f0:d0:c7:ee:a2:9c:5b:9b:ef:ea:6f:7b:0a:b1:fe:
09:93:6c:e2:e0:e6:a3:3d:11:25:5f:24:3a:26:43:
ef:b7:61:a2:0d:d2:8a:d7:aa:c9:23:c5:0c:9b:8b:
3e:df:8e:3a:f7:b8:54:76:83:29:67:45:13:33:dd:
93:b7:f5:9d:2e:74:e9:93:0a:49:aa:72:d6:f3:dc:
7b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:07:D4:AE:EC:C1:03:4F:15:D9:6F:85:F1:49:7E:90:1A:65:44:8B
X509v3 Authority Key Identifier:
keyid:66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:18:08:61:ef:0c:7c:5a:87:25:1f:47:ea:98:f3:58:a4:ba:
2c:60:fe:d8:3e:26:43:7a:5a:d1:af:9d:f3:03:13:62:92:79:
fd:cc:b4:a1:04:4d:17:89:34:87:c7:15:9a:02:64:c2:eb:c2:
7e:93:b4:04:ee:e1:4b:07:9a:89:4d:d8:c1:6c:fb:0b:2f:a9:
55:ea:57:95:e9:c0:b6:bf:fb:56:3c:29:63:1e:17:6f:90:ab:
eb:a2:ec:6d:c7:4c:c7:20:e8:c2:b8:42:87:ac:b0:a9:0f:f4:
bd:fe:e0:62:34:00:51:cd:90:f7:c1:71:b8:8b:7c:29:c1:0b:
cc:4f:7e:54:e6:9e:f0:9f:96:a1:a5:79:ae:25:97:e4:69:e5:
d1:6a:a4:a8:eb:24:99:d9:80:50:bc:2d:85:1a:28:56:3d:b1:
e4:37:a6:76:f0:ad:4f:e9:bd:49:6a:46:e6:cc:45:f0:1d:fa:
bd:58:9a:a9:1e:03:e3:50:9d:07:64:51:0b:7e:a0:7d:64:fb:
4f:d4:44:6c:83:13:bd:e6:e1:81:e6:38:8a:1b:cf:51:33:56:
f8:59:66:20:12:4a:dc:f9:20:80:b4:f6:f6:6a:08:77:cb:45:
fd:4e:19:6d:cd:0c:da:27:2e:f2:18:67:bf:42:bd:07:4d:6c:
d4:ed:07:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:40:14 2026 by rpki-client