
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
File: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft (raw, json)
Hash identifier: Xl+49iRedt1trRl3vnQXsa5vhgGBInDj+8c0a1ApF3k=
Subject key identifier: F3:20:B8:50:4C:E6:54:66:BE:AB:58:39:04:E5:33:CF:A3:9F:E0:F1
Authority key identifier: 66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84
Certificate issuer: /CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
Certificate serial: 10C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
Manifest number: 10AA
Signing time: Sat 24 Oct 2026 17:18:43 +0000
Manifest this update: Sat 24 Oct 2026 17:18:43 +0000
Manifest next update: Sat 31 Oct 2026 17:18:43 +0000
Files and hashes: 1: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl (hash: FvZk1gcSQSdsW32VznChtoR8zUnNMWyJPUq59Ul9SQw=)
2: 1313114A5B3D11E996E4A744C4F9AE02.roa (hash: d+s7KZXz1WqJhrg7kNulx9MrS05rezWlx0peNL2GZrc=)
3: 373ADDFC1CC411EF90865B7DC4F9AE02.roa (hash: BUHXcbwgDCfppQqI14tt+SHKjsNJaOwlcThHrAcU48k=)
4: 27A298A00C6C11EC82638A40C4F9AE02.roa (hash: +GqC4kHrlGijBhG+Vf9OqiE+irbiFIUUxvaGXJ8E0NA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl
rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 17:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4289 (0x10c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194E51, serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
Validity
Not Before: Oct 24 17:18:43 2026 GMT
Not After : Oct 31 17:18:43 2026 GMT
Subject: CN=6adce873-db06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ce:5d:f5:95:c5:fa:33:a6:bc:8c:a3:ea:af:
8d:f3:00:cb:7b:d6:f5:2e:85:e5:39:66:ee:0d:6c:
ed:c8:7a:0d:24:2e:ab:04:bd:d7:e2:9f:cb:a1:c1:
52:88:d3:a3:39:b3:ce:90:28:d8:7e:4d:05:57:c4:
93:00:56:f7:3f:3e:44:f1:a8:12:ac:c4:47:d7:b7:
6f:ed:45:21:63:59:78:3a:e2:5f:d9:d8:1a:b7:57:
e8:f6:4a:97:88:90:c2:2d:aa:d1:10:b4:d9:4c:3e:
a9:88:94:28:c8:39:ff:52:00:85:0d:2d:2c:c5:b8:
9f:e1:84:5e:ed:cd:98:e6:8d:22:7f:3c:29:bf:54:
d7:4d:1b:75:1f:57:89:35:d5:97:e9:f2:7c:db:d7:
51:bb:d2:c5:c6:7f:cb:cb:d0:68:cd:9a:98:63:c2:
1d:b7:1f:f1:03:48:1f:80:8b:1f:1f:8f:48:9b:7a:
c2:c5:f0:42:3e:c1:36:04:31:f2:7e:7b:60:14:13:
6d:95:9c:a9:f6:44:96:42:7d:9e:d5:b4:ce:87:70:
58:7d:6d:04:3d:04:66:09:4b:02:ac:56:fc:43:d0:
41:32:db:07:2d:bf:13:c1:dc:2c:fa:32:ad:14:04:
49:a4:f2:a9:d9:9b:d7:08:ff:e9:c1:23:f9:60:55:
1b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:20:B8:50:4C:E6:54:66:BE:AB:58:39:04:E5:33:CF:A3:9F:E0:F1
X509v3 Authority Key Identifier:
keyid:66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:74:c9:ce:ad:31:2b:96:34:74:23:2f:89:35:4b:79:fb:72:
6d:1b:c9:7c:91:2f:4e:ab:09:46:10:79:c4:df:16:1c:01:31:
c9:c2:32:5a:5c:b0:7b:3a:f8:2a:a5:55:96:af:89:6b:a1:60:
56:78:ff:32:5b:f2:a6:d2:e7:b2:57:1f:7d:d1:76:a8:ee:4c:
d0:14:2a:82:08:f9:81:0c:e1:e1:36:60:d9:6a:f3:15:41:0b:
f2:9f:13:24:a9:7b:34:80:c2:ef:67:17:df:3d:d2:76:78:7b:
97:e1:83:08:ac:97:05:62:76:59:88:d6:c8:b0:e5:f6:d5:2b:
4c:ae:fa:89:e6:7f:8e:e3:1f:af:ad:69:58:d1:49:bd:ea:d5:
a0:1e:ed:d4:9e:6c:7a:5a:13:e3:d4:ef:f1:6a:95:fa:af:cb:
cf:c6:95:02:8a:6b:ee:11:88:82:ed:9c:1b:aa:2b:62:35:55:
c5:12:e3:e3:19:39:71:60:80:4b:4c:ff:c8:97:10:23:08:89:
d2:c1:5e:5f:33:d5:cb:54:36:24:aa:a4:86:10:52:6c:71:a2:
7a:2e:76:f2:4f:37:82:fc:86:cc:a2:56:d5:54:a4:9b:cf:d3:
93:aa:a1:08:ce:5e:5c:2e:63:b3:4d:8c:f2:7a:da:e1:19:f1:
e7:fe:25:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 00:00:18 2026 by rpki-client