
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
File: ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft (raw, json)
Hash identifier: S+NeUz9e0ZaF22+tL8jd2D3DDZYD1pV3rsMj5E5d5d0=
Subject key identifier: CE:48:74:1C:3C:EE:46:7C:B4:E0:2A:DA:FA:6D:BA:3A:58:9A:AD:D7
Authority key identifier: 66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9
Certificate issuer: /CN=A91A12C4/serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9
Certificate serial: 0186
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
Manifest number: 0186
Signing time: Mon 05 Oct 2026 04:54:11 +0000
Manifest this update: Mon 05 Oct 2026 04:54:11 +0000
Manifest next update: Mon 12 Oct 2026 04:54:11 +0000
Files and hashes: 1: ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl (hash: r1biNOQQi5sX/AuD1y2LBjzYwYmfAZVr69x/PiVG3z0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl
rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 04:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390 (0x186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A12C4, serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9
Validity
Not Before: Oct 5 04:54:11 2026 GMT
Not After : Oct 12 04:54:11 2026 GMT
Subject: CN=6ac32d73-9056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b7:02:a6:67:98:ae:ad:4c:c4:9d:2d:d0:9e:
0f:10:14:de:a4:87:e0:bc:79:5c:67:f1:d2:67:88:
73:53:1d:b4:d7:09:9f:08:05:14:08:97:ed:49:1e:
90:00:3e:46:90:ad:92:17:ed:93:0d:80:cb:53:b5:
86:14:68:b9:3e:d8:be:cc:cd:4f:db:b0:42:c9:c4:
50:41:97:30:de:31:3c:d7:06:d8:1a:d0:fc:1b:55:
39:70:2f:36:dc:d7:6f:70:84:5c:3f:35:75:4e:69:
88:2f:1b:52:8a:77:3a:07:f8:2b:7f:ac:14:a1:a5:
23:c3:97:e1:43:0f:0f:1c:4c:96:98:fd:b0:1c:3d:
4f:7f:c1:f1:04:54:07:19:1a:52:41:fe:16:87:7a:
68:d0:2d:07:d3:6d:f2:9f:6e:e4:56:0f:6c:9f:c3:
dd:5c:b4:ac:6a:10:cb:b5:90:fc:a5:37:8d:b3:29:
25:d2:a7:61:9e:ce:f7:69:03:ab:4b:a9:e9:05:06:
8e:00:f9:6c:8f:ad:51:a8:5c:00:82:8a:ca:92:98:
4d:bc:68:15:3a:fd:ff:e6:ec:0e:46:ec:52:c3:76:
06:ec:a0:e8:32:b8:2e:74:0f:4a:af:8b:1d:5c:e2:
1c:ec:eb:86:95:d1:31:0b:de:b7:52:95:a1:8f:be:
21:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:48:74:1C:3C:EE:46:7C:B4:E0:2A:DA:FA:6D:BA:3A:58:9A:AD:D7
X509v3 Authority Key Identifier:
keyid:66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:fe:29:57:5b:55:97:ea:96:0d:23:27:af:b4:b6:44:ee:f2:
e7:d9:b7:39:0f:b7:84:03:db:7d:31:02:37:33:9f:5e:93:40:
a6:2e:2c:59:39:f1:a0:79:7c:7a:fe:df:ee:eb:2c:ba:29:66:
8c:0f:fd:04:4b:ce:ec:63:e7:85:fd:50:09:c0:d0:df:9d:10:
e3:37:e0:64:82:30:43:9e:b5:8f:b3:20:3d:6d:ee:d2:88:c1:
3b:fc:a7:62:14:8f:0d:12:9f:49:7b:32:2c:88:36:79:b1:df:
70:b9:b2:48:68:9a:8a:e9:e7:f8:3a:bb:57:cc:fd:a0:42:95:
44:7a:5f:6a:ea:e6:07:f0:e6:cc:9f:a4:3a:5f:8c:3b:dd:62:
d1:ca:cd:47:f9:09:bb:f6:ff:6a:09:31:b1:ea:22:84:5e:27:
ea:1d:b1:d3:4f:b2:38:a4:48:21:2f:bc:54:62:22:5f:05:44:
d5:4e:48:be:6a:5d:e9:f5:2c:db:d8:df:cf:4c:ca:5b:83:8a:
9c:40:01:5b:9a:26:08:61:e5:11:c2:6d:7f:23:21:51:fc:09:
1b:92:89:cf:e7:11:3f:c2:3f:bc:f7:4e:f6:05:60:1c:c7:0a:
f0:ff:3e:8a:87:1e:14:0a:98:0b:6b:69:f2:90:5b:0e:b8:81:
9f:82:91:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:25:49 2026 by rpki-client