
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
File: zl8rQ5utW-vicqch6qzDj6rdSbQ.mft (raw, json)
Hash identifier: dgxAXj5O6wwu4TNJs7rUxdx0oB9WSrYIE1DlmXgqkDw=
Subject key identifier: 15:43:63:67:5E:44:4A:99:66:DB:EB:54:F1:14:1C:50:1E:4D:63:7F
Authority key identifier: CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4
Certificate issuer: /CN=A91AB9A1/serialNumber=CE5F2B439BAD5BEBE272A721EAACC38FAADD49B4
Certificate serial: 0736
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
Manifest number: 0736
Signing time: Tue 18 Aug 2026 14:41:54 +0000
Manifest this update: Tue 18 Aug 2026 14:41:53 +0000
Manifest next update: Tue 25 Aug 2026 14:41:53 +0000
Files and hashes: 1: zl8rQ5utW-vicqch6qzDj6rdSbQ.crl (hash: JHp1yWD9Pbhl+x084tSP6uS5eTfOtPnLOM+s/fLApUg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.crl
rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 14:41:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1846 (0x736)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB9A1, serialNumber=CE5F2B439BAD5BEBE272A721EAACC38FAADD49B4
Validity
Not Before: Aug 18 14:41:53 2026 GMT
Not After : Aug 25 14:41:53 2026 GMT
Subject: CN=6a846f31-a07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9d:b1:df:43:6b:93:87:e3:44:66:18:dc:1b:
1b:68:07:36:bd:6c:f5:2d:a1:dd:23:ee:54:12:93:
47:bb:d9:1e:96:ff:5d:53:e3:5e:14:9e:9d:96:a2:
00:ab:ab:89:63:16:9e:9c:77:2e:2b:27:bb:8a:48:
45:f3:43:45:c7:98:7c:52:95:16:50:16:33:c2:28:
82:5d:89:f7:9d:06:47:c2:6d:eb:6f:10:5f:4e:7b:
51:f5:82:f2:c6:08:cd:78:68:7b:30:20:33:b6:e4:
e2:7b:8c:c2:84:0b:ef:70:41:85:25:96:65:b0:8b:
ad:9d:04:aa:00:7a:c4:97:4a:aa:43:40:43:b3:ed:
91:38:c8:bc:d1:04:b6:9e:49:f0:d5:80:8c:d6:ab:
2d:27:75:bb:d5:40:7e:b2:c2:ae:bd:23:1d:0f:48:
9a:58:88:0b:17:66:ed:bf:c3:fd:16:0f:8a:a3:21:
ba:2f:e0:97:01:94:2d:93:a3:e3:bd:40:93:8b:6d:
da:81:94:83:53:83:3e:29:cc:12:87:31:37:9f:66:
f6:63:59:90:0b:a9:1e:67:4f:bf:e1:60:b4:1f:8c:
a6:7a:61:25:11:1a:16:3a:57:20:ba:f5:b8:4d:4a:
c7:c4:17:c1:c6:a6:82:80:05:92:02:1d:4c:00:91:
a6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:43:63:67:5E:44:4A:99:66:DB:EB:54:F1:14:1C:50:1E:4D:63:7F
X509v3 Authority Key Identifier:
keyid:CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ea:b8:c4:dc:5b:95:b8:cf:4c:c1:30:70:de:b3:9a:23:48:
2e:04:ac:42:c0:cf:28:fb:ae:bf:ca:45:25:b5:de:86:ac:89:
26:ea:88:0d:ae:ed:47:36:93:28:d2:14:25:47:70:10:5e:cb:
72:a3:3c:c2:5e:c0:ea:53:e5:2b:f2:f6:25:8e:7c:48:b4:37:
d9:f4:66:17:fb:2f:99:38:94:c6:f5:0c:a5:6b:25:79:8a:57:
ce:46:2c:b5:f2:ca:ff:00:6d:f5:50:8e:7a:65:db:31:5e:65:
a7:aa:4d:9b:80:2a:5b:a5:1c:cc:c1:cc:df:92:91:06:67:31:
55:d4:ee:14:e7:f1:aa:8b:98:d0:71:e9:59:d1:8f:66:50:ab:
e9:be:64:10:83:d2:bc:47:86:4f:be:b2:59:b6:fc:79:d7:52:
c5:9d:e0:e4:1a:79:4a:19:fa:ca:54:22:b2:8f:81:1b:e5:f4:
38:2f:7c:e8:ad:e1:e8:a5:0a:e4:df:c2:67:a6:28:f4:94:24:
dd:86:a5:36:ca:ec:18:dd:bc:f3:8e:46:3d:51:ae:c4:9b:73:
bf:51:b8:0d:1d:cf:95:b4:fa:41:d6:82:62:44:5a:1f:79:1f:
be:3f:8d:69:35:05:ce:b7:4b:d4:5e:b2:12:82:7d:a3:8b:91:
35:76:4e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:39 2026 by rpki-client