
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
File: zoytNWIakBLECzY3U3ykDj0H6M8.mft (raw, json)
Hash identifier: KCEYX5dCafJSYSBtQ5iPw2O46bQlHagTT+YijV1cHPQ=
Subject key identifier: 27:87:F1:08:49:2E:B1:CE:A9:E1:48:2D:C7:77:DB:23:9D:D0:04:8A
Authority key identifier: CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF
Certificate issuer: /CN=A91B9F08/serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF
Certificate serial: 0F56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
Manifest number: 0F43
Signing time: Thu 08 Oct 2026 17:39:06 +0000
Manifest this update: Thu 08 Oct 2026 17:39:05 +0000
Manifest next update: Thu 15 Oct 2026 17:39:05 +0000
Files and hashes: 1: zoytNWIakBLECzY3U3ykDj0H6M8.crl (hash: 3Tyuh2AGTKZKtfVti64YeM76W6qhQPS8ksgngO9ZTUE=)
2: 8ADFF772924011ED867BE311C4F9AE02.roa (hash: WSppEKr3uUGfSP4JpZ6XY6kJsR4i7zyDZgxCkaSBcy4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl
rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 17:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3926 (0xf56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9F08, serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF
Validity
Not Before: Oct 8 17:39:05 2026 GMT
Not After : Oct 15 17:39:05 2026 GMT
Subject: CN=6ac7d539-e493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5c:9d:7a:ef:4c:92:59:6b:08:be:5f:d4:46:
36:c0:9d:0f:44:de:f2:b5:43:5f:6d:b9:b3:4d:9a:
e0:b6:68:0c:b7:4c:d1:69:4f:dd:01:41:47:f4:d2:
3c:6b:bd:73:0d:14:36:47:4f:03:6d:94:c6:d9:bf:
95:94:41:ba:01:46:d9:fb:60:f6:03:b1:2b:6e:c9:
be:0e:05:b4:10:c4:70:5c:58:b8:84:3a:de:2d:40:
60:3b:97:00:be:a8:d4:dc:8a:fe:46:b7:77:4d:cb:
1d:4a:b5:ec:52:e7:2f:38:35:8b:24:49:7e:3c:2c:
eb:a3:06:90:99:16:c0:6c:4f:37:5b:98:d4:d8:74:
27:98:a1:2e:dd:85:71:20:d2:77:0e:1a:bb:06:0d:
ed:8c:d4:56:e8:a5:df:2d:62:8f:6c:24:03:c6:f2:
a0:b1:60:68:3b:fd:d7:fd:b1:05:90:63:6f:5a:ad:
44:b5:85:3e:8a:f4:a7:5d:06:1d:51:33:84:14:65:
b4:85:98:c6:3a:15:5a:f6:52:1a:c0:f5:41:33:7a:
c1:2d:82:02:70:98:a6:96:67:65:f3:ba:ef:aa:c5:
ac:f1:0f:1f:7d:ad:c0:3d:bd:3f:99:62:ff:73:d6:
70:46:e2:16:d7:cf:be:1b:08:32:92:aa:dd:68:ef:
52:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:87:F1:08:49:2E:B1:CE:A9:E1:48:2D:C7:77:DB:23:9D:D0:04:8A
X509v3 Authority Key Identifier:
keyid:CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ff:c0:96:4c:26:dc:1b:33:d6:2b:1f:c4:26:76:bd:f9:86:
a0:5c:6b:b4:52:0a:40:c9:ab:35:18:2a:f0:af:27:51:47:f6:
ee:7d:9f:d8:2c:fd:39:e4:b5:8d:ff:c0:21:c2:89:b3:b4:23:
b6:cf:38:e4:0b:d9:e2:be:56:bf:f1:cc:ab:ab:b3:19:50:77:
d3:53:dc:43:7d:77:20:a3:a2:1a:8b:7f:cd:66:ac:f2:5c:ce:
16:aa:43:b8:be:21:63:b6:c8:d6:f0:96:79:70:23:b2:4e:57:
2c:bb:fd:cf:d0:87:c2:d7:17:12:70:56:ef:71:6e:42:3a:c1:
78:5d:6d:23:1a:b9:25:7a:e7:c8:8b:c9:e4:c8:ce:d5:a1:c2:
60:fb:11:6a:ba:6f:4a:36:0e:69:d0:bb:84:22:27:e7:d1:97:
79:2f:20:83:1b:bc:35:93:d1:b7:33:d6:90:fd:69:ee:25:4c:
73:67:6f:ca:21:16:1c:95:15:e2:67:e4:00:07:3d:03:ce:37:
95:45:5d:99:8e:9f:74:3d:de:db:05:74:31:ef:53:c7:7c:f9:
39:de:24:84:cf:48:6b:d1:ee:c1:af:5c:1b:85:e0:56:e9:d6:
e3:c7:c1:f6:93:57:73:d8:03:ff:90:4a:e9:48:21:09:21:41:
36:6d:b8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 09:38:18 2026 by rpki-client