
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft
File: zUHbwYl43ThNT1yPj5a0DnHe5kE.mft (raw, json)
Hash identifier: BBzgoEBgPJ642v+Z1EQp8MQ4SDsdwu2BVUBG5/Az2To=
Subject key identifier: 89:8E:4C:4B:DB:A6:8F:09:C2:E9:2B:87:3E:D5:ED:0C:7F:B5:D2:10
Authority key identifier: CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41
Certificate issuer: /CN=A9197488/serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641
Certificate serial: 0136
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft
Manifest number: 0132
Signing time: Fri 23 Oct 2026 06:13:12 +0000
Manifest this update: Fri 23 Oct 2026 06:13:12 +0000
Manifest next update: Fri 30 Oct 2026 06:13:12 +0000
Files and hashes: 1: zUHbwYl43ThNT1yPj5a0DnHe5kE.crl (hash: WCdIhYZJfYIuPikJ0VLmJMY21X1c3DgEjRmBMe8AHzw=)
2: 26415376FF1F11EFA2518D1DC4F9AE02.roa (hash: fR4AypiQYoJGmxQnLx99QlOWnyJ7/nfzm8EkI/Pllqo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl
rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 06:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197488, serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641
Validity
Not Before: Oct 23 06:13:12 2026 GMT
Not After : Oct 30 06:13:12 2026 GMT
Subject: CN=6adafaf8-574d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:58:7a:29:0e:8a:ef:b5:c0:8f:01:e7:be:6a:
64:22:6d:6b:de:e7:22:60:61:f6:0f:cb:f6:a2:56:
16:20:5d:a0:b4:fb:5d:7f:7f:c6:e9:85:64:63:d8:
fd:1e:f1:1e:6a:1d:41:2e:9c:ce:2a:eb:48:bf:6b:
cb:29:ad:91:64:86:3e:e6:1c:78:52:24:13:64:9f:
96:5d:b9:e0:24:bd:b2:89:ce:5e:50:9b:42:4e:6b:
1b:f9:dd:bd:a4:1b:8d:31:b4:89:26:8c:af:36:dc:
f4:3f:e6:d7:ca:fc:c0:94:3a:9a:22:1f:72:88:c1:
e3:2f:bd:33:bf:02:37:04:7a:38:a7:0c:e0:04:27:
56:b3:70:03:7f:d5:ed:d3:47:4d:00:06:39:02:33:
f2:da:ef:8c:50:92:c2:3b:de:89:34:3f:c6:c9:9f:
55:b4:f2:eb:61:75:21:a1:25:81:6b:5d:8b:34:a2:
c4:d3:f7:4e:75:cd:81:c1:80:89:43:e6:26:ce:b6:
fa:6c:26:32:f5:52:5d:9c:0d:8e:ab:24:e1:17:5b:
e0:f3:56:1b:c8:4c:de:a0:5a:c1:a8:a3:36:9d:4b:
35:e4:5f:be:fd:f2:fb:1d:5b:14:06:ac:8f:0d:63:
ab:f3:13:d8:d5:37:ca:5d:56:a0:f4:cd:c4:bf:ad:
5e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8E:4C:4B:DB:A6:8F:09:C2:E9:2B:87:3E:D5:ED:0C:7F:B5:D2:10
X509v3 Authority Key Identifier:
keyid:CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:42:f9:a4:6b:66:56:ab:97:7f:e1:1a:95:ff:9e:0a:28:02:
32:49:93:f8:01:31:eb:9c:b5:ee:40:d5:31:bb:1b:8d:b3:41:
a3:5d:f9:c1:70:73:2e:64:72:d9:d6:f6:d9:bf:cf:b3:b0:98:
99:93:f8:da:88:b9:e8:a0:b8:d3:26:2a:94:1a:49:fa:ab:63:
98:65:66:cd:b4:13:1f:49:e3:05:25:73:ad:a5:38:5a:84:71:
69:a5:95:5f:94:d9:2d:1e:1c:8f:41:77:ec:42:92:0f:41:28:
2d:b0:04:d5:1e:c3:4d:5e:7b:13:ab:1e:53:65:b0:e3:3c:23:
3f:ba:52:a5:f2:5f:38:87:4e:3e:c3:cd:e9:93:70:f1:17:48:
ef:71:c5:17:24:a2:9d:e0:a0:e4:c2:09:8e:cd:b5:dc:a3:63:
f8:b2:96:42:a0:73:ed:ae:0b:9a:42:9d:e0:dc:65:83:c5:6b:
eb:de:56:96:49:33:fd:d1:57:07:07:21:bb:7c:7b:5e:f8:5a:
43:f0:1f:b6:fb:f8:73:ec:e5:d1:5a:97:17:96:38:f5:2a:5e:
b5:b7:d8:f6:61:33:df:ef:56:6f:5f:25:d3:d2:be:f5:ef:bb:
63:3e:b4:03:d6:d3:00:e6:97:b2:7e:c3:90:c3:51:8e:ca:20:
fe:68:9c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 19:52:46 2026 by rpki-client