
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft
File: Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft (raw, json)
Hash identifier: Fi3WXZTHdvqOTri1PlJmcEbQrIP3yNnH8eeRdq4CW0Q=
Subject key identifier: 6C:55:A8:6A:1B:66:72:8F:72:06:9E:F7:83:4C:89:09:B1:66:83:25
Authority key identifier: 65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE
Certificate issuer: /CN=A91BB000/serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft
Manifest number: C3
Signing time: Fri 09 Oct 2026 07:31:32 +0000
Manifest this update: Fri 09 Oct 2026 07:31:32 +0000
Manifest next update: Fri 16 Oct 2026 07:31:32 +0000
Files and hashes: 1: Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl (hash: lAbPOPsHLxD+sZ9gWA7LWWEfG15BdZqMpz92Wzwyguo=)
2: C2B54C4E9D2611F0A7B9140CC4F9AE02.roa (hash: YeM5Ob93+NlZS8Ef/mJRnsGe6iFv4NqaLaZpJ+XqgGE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl
rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 07:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB000, serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE
Validity
Not Before: Oct 9 07:31:32 2026 GMT
Not After : Oct 16 07:31:32 2026 GMT
Subject: CN=6ac89854-6e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3f:af:20:32:f7:33:d5:7e:08:f7:81:95:d3:
d9:42:0b:a8:47:4a:14:6a:3d:cd:12:94:0c:c2:4e:
ab:15:63:55:b8:b6:d6:20:2c:c4:3c:43:60:f8:03:
5f:3c:22:32:0a:6d:4d:15:21:c8:ba:35:6c:4e:df:
4f:76:e9:9b:4a:75:ad:76:d7:a3:54:98:39:3f:43:
ed:28:f3:1d:9e:d8:3c:70:f0:f4:30:03:66:1f:ff:
bc:9b:7c:79:aa:f7:6d:57:c5:0c:4e:e6:f3:2b:9c:
9f:fc:38:ef:a4:cf:b3:cd:f3:4b:33:c8:43:52:4a:
78:12:13:5b:5b:41:6b:e2:c1:41:f1:1e:46:b5:0d:
11:bc:78:8a:0b:90:28:d5:1a:e6:64:e4:92:10:0d:
ad:f3:8d:8e:5b:95:e0:66:1a:97:e2:ee:e8:e3:f9:
fe:bc:b4:ae:03:c4:e6:59:0d:22:e2:18:94:1b:4e:
22:e3:ea:8b:22:49:6a:8b:f8:07:87:6b:b2:b8:d4:
3e:ed:22:66:0d:33:9f:24:b5:b2:a6:ef:79:dc:d3:
45:7a:98:42:f6:b5:2c:d5:dc:94:a3:b2:d9:17:07:
b9:67:b5:b3:15:f1:71:f1:1a:3b:2e:4e:97:7d:11:
e1:d3:00:05:af:ce:e5:d0:88:46:c2:dd:81:00:00:
1d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:55:A8:6A:1B:66:72:8F:72:06:9E:F7:83:4C:89:09:B1:66:83:25
X509v3 Authority Key Identifier:
keyid:65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9e:49:2e:87:fe:a2:e1:30:b1:6b:d2:e3:a7:c1:13:4f:bc:
3d:a1:5b:9a:88:35:10:93:8d:40:01:f1:70:f9:d2:ec:96:85:
89:ec:da:ac:43:ef:12:f9:d0:ed:ed:26:aa:f6:c5:be:16:99:
2e:2a:2a:8a:be:78:d3:d4:42:fb:aa:a1:93:b5:19:7d:25:af:
23:7b:2f:4c:e6:50:8c:69:93:d8:2c:c0:d2:d1:b8:aa:5f:7a:
9e:e2:da:34:45:c3:4d:97:9c:11:0f:d1:86:15:b3:f6:7e:3a:
96:bf:19:b3:18:10:92:b7:39:44:02:69:dd:e1:11:03:5f:f6:
88:46:78:33:e9:96:8e:70:6f:03:e6:1d:48:fd:03:bd:ae:41:
de:19:32:04:c2:b7:b8:42:f9:87:ea:d8:8e:68:e8:8b:a1:21:
b8:0d:ac:d9:8f:06:bb:ff:93:32:b3:f9:b9:a6:e2:48:24:6f:
29:f5:73:41:de:5d:87:7c:5b:fa:11:c9:5b:00:b2:31:67:d0:
40:24:ce:44:19:92:24:c8:d1:eb:66:95:bf:7d:1c:c3:47:39:
ac:66:4b:2f:4e:78:be:b3:bd:f5:8c:aa:9a:49:5b:35:8d:9a:
14:2d:8f:5a:d1:a1:76:cc:73:76:04:88:0b:e0:5b:0d:d0:1b:
28:23:42:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:37:43 2026 by rpki-client