
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft
File: zPugs5k5MOsTt6JZJyqoEfh0SyM.mft (raw, json)
Hash identifier: Hgq4uQwCXp0TIALLQFQm7pHNhyARC1UwRFoMh3P2QsI=
Subject key identifier: C6:C0:00:05:2E:0B:0F:8A:C5:C2:18:3A:5F:AE:2C:C3:CF:79:8B:AC
Authority key identifier: CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23
Certificate issuer: /CN=A9191D22/serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23
Certificate serial: 0B14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft
Manifest number: 0AFA
Signing time: Sun 04 Oct 2026 19:26:49 +0000
Manifest this update: Sun 04 Oct 2026 19:26:49 +0000
Manifest next update: Sun 11 Oct 2026 19:26:49 +0000
Files and hashes: 1: zPugs5k5MOsTt6JZJyqoEfh0SyM.crl (hash: zno4SepLo34V1+JQp5XJq+ItdC2FV29OZ7dygDRfcZg=)
2: gDxsBjNnJl9S9K3Wa5yvgY3eFBw.asa (hash: b2+oal8IAfCc5mvBSdPucHtJD4+1omZ1iVZSgvXvRK4=)
3: 683CD6083EF511F1AB4378F7C3833773.roa (hash: T0lznJAaSKXYpbpLdqNeEVZXOC0Zvhur00MTPjvLVBM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl
rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 19:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2836 (0xb14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191D22, serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23
Validity
Not Before: Oct 4 19:26:49 2026 GMT
Not After : Oct 11 19:26:49 2026 GMT
Subject: CN=6ac2a879-a391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c8:96:c9:25:cb:7f:2e:e9:1a:e1:aa:2e:e8:
e6:1d:60:2a:f6:06:07:dc:2a:62:45:8f:8a:8c:c3:
3b:da:5b:61:92:33:ea:a6:b1:a4:0f:90:57:37:9c:
96:63:b4:cd:3b:09:e9:b9:b8:9d:a0:59:d2:79:4c:
a8:2e:44:89:fd:31:fb:86:5c:31:2c:2e:95:3f:c1:
4b:d3:af:d2:d5:a1:2e:66:cb:1f:9e:83:ee:e3:fd:
5e:02:86:65:e0:b2:9f:94:1f:a6:cb:c9:6f:5e:39:
a4:f0:08:09:10:26:14:e8:e3:cc:a5:c6:95:38:25:
19:0b:ad:5d:84:a6:26:5e:c4:b8:23:d1:39:99:84:
af:9d:ed:92:cd:1f:16:a5:5d:06:cd:e5:f7:03:21:
07:74:71:88:44:e5:ec:2c:ad:98:7a:2e:72:39:7d:
3f:d7:5b:fa:d0:31:b0:4b:4e:a3:f6:6a:bf:83:70:
f0:27:0e:a8:59:76:77:52:c3:9e:3e:4a:5d:09:99:
81:34:e1:42:63:4b:6d:3b:34:43:55:0d:5c:c2:f7:
aa:8c:6d:d3:4a:a6:fb:6b:82:41:b4:ac:db:06:0e:
b4:26:6a:9e:92:a1:d8:af:d1:0c:b7:08:88:0a:b4:
04:6c:b9:bf:5b:1f:eb:1e:ca:55:45:ca:16:8a:3e:
0c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C0:00:05:2E:0B:0F:8A:C5:C2:18:3A:5F:AE:2C:C3:CF:79:8B:AC
X509v3 Authority Key Identifier:
keyid:CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:79:35:48:37:d5:0c:1f:39:ff:28:27:d5:2a:80:50:a6:20:
b8:d9:1f:31:cd:c1:dc:e1:8a:bd:93:15:00:df:62:6e:20:bb:
0f:ce:3c:ab:70:fa:9d:3c:1a:e6:15:35:21:8e:31:49:85:3b:
94:c5:b4:65:8d:92:51:f0:d5:71:64:bf:f9:5a:da:f1:b4:66:
56:c1:0d:d7:21:87:19:92:c0:4d:b2:b4:e8:d4:85:7b:f6:67:
ac:60:7f:05:64:3c:ed:43:e8:ee:cf:95:7e:cb:46:36:ec:36:
ac:ba:6f:c2:a0:92:41:13:a0:ad:22:c7:fb:59:61:8e:1e:54:
af:23:01:c5:2e:4d:25:7a:42:b7:f3:17:85:00:12:44:91:f7:
41:c8:6a:7b:f3:79:32:dd:80:c0:72:15:e3:b4:f7:f9:81:54:
e1:e8:46:81:52:15:89:bb:8a:bf:f5:91:00:01:ea:0d:4f:15:
82:ae:d7:29:c2:a3:e7:52:ef:39:60:d1:a5:ec:40:12:f3:7e:
db:20:6c:54:05:c3:be:ef:db:68:ae:7b:0e:17:cb:e0:52:60:
36:66:0f:05:22:51:d9:c3:8c:14:e4:11:4e:28:4d:ab:bf:33:
6f:69:24:76:77:bd:46:ed:35:5b:5b:49:6d:60:35:90:58:6a:
69:f4:c3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:06:14 2026 by rpki-client