
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft
File: Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft (raw, json)
Hash identifier: yb6IeYME5NtmmiciZ4lknISKnySGBvK4T2tMRZvs1WY=
Subject key identifier: FC:C9:BD:4A:6E:AF:A2:87:35:D3:03:63:B5:36:A8:5F:C2:89:18:C5
Authority key identifier: 67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA
Certificate issuer: /CN=A91BEC31/serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA
Certificate serial: 014A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft
Manifest number: 0140
Signing time: Wed 07 Oct 2026 06:00:59 +0000
Manifest this update: Wed 07 Oct 2026 06:00:59 +0000
Manifest next update: Wed 14 Oct 2026 06:00:59 +0000
Files and hashes: 1: Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl (hash: F9sT3Mce0tM3dLM4LcwG+mMXv7IEZOxfNVHd1gPDlFw=)
2: F8B0BFEEE4A411EF8C2D0460C4F9AE02.roa (hash: pme8BEo7whHw/nE985T4YJ9ukK31bkVycJriDT2MMKc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl
rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330 (0x14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEC31, serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA
Validity
Not Before: Oct 7 06:00:59 2026 GMT
Not After : Oct 14 06:00:59 2026 GMT
Subject: CN=6ac5e01b-6ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:ab:7f:4c:1e:37:69:06:17:b9:c8:80:9b:
07:7f:15:58:1f:88:e6:f9:fd:a4:86:bf:40:79:7a:
5c:55:ee:24:a8:cc:c2:d1:84:9b:32:f2:6a:62:f2:
38:f4:67:f9:ed:30:1b:d3:d3:e1:c9:5a:d1:30:33:
6d:ac:86:a9:92:bc:03:e3:1d:a4:6d:15:34:24:60:
e2:27:6b:45:9a:8f:fa:3e:21:52:51:8a:d6:5f:d4:
fd:0b:01:04:31:9c:3f:54:cc:05:39:50:93:28:b4:
e4:f0:0d:61:cd:47:41:d8:f9:0c:5c:f8:57:99:2f:
8f:15:90:a8:19:15:85:4d:cc:92:9c:14:5d:a8:24:
d2:70:a9:24:72:5a:e8:2a:f9:5b:69:7e:6d:6f:e9:
af:50:4b:b5:ad:de:cb:c4:33:2c:c1:50:98:95:2a:
d2:15:14:78:27:01:9f:fd:f8:67:eb:c0:47:5f:83:
30:17:76:f6:8d:c7:f5:78:c5:bd:04:52:d6:d6:48:
32:ee:8c:0c:c5:57:2d:2b:48:df:eb:ca:5e:83:31:
4c:43:8f:ad:27:36:72:52:e5:57:1b:e9:4a:0e:93:
f7:c0:da:33:14:83:9e:49:67:33:34:58:16:98:4d:
2e:dc:ea:e7:3d:c0:80:e7:0d:02:62:8b:02:41:16:
b4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C9:BD:4A:6E:AF:A2:87:35:D3:03:63:B5:36:A8:5F:C2:89:18:C5
X509v3 Authority Key Identifier:
keyid:67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:0e:fe:63:5d:39:f7:48:e8:74:95:44:e0:de:d0:5a:6d:3c:
80:8e:2f:8f:76:b6:7d:8a:16:d7:ea:16:8f:22:e8:0c:18:48:
d0:fb:48:7c:08:b5:c7:35:6f:48:23:b2:7a:ea:45:1b:46:16:
1b:33:46:37:c5:72:d2:94:ef:2f:2f:17:71:d8:88:a0:7f:22:
96:03:e7:7a:96:b9:a8:ba:15:90:4e:c8:f4:64:29:f9:56:2a:
0e:eb:c9:65:e9:ad:ae:8a:f6:48:58:53:0c:52:04:78:48:42:
b0:89:2f:7d:d5:38:8a:d9:43:55:87:af:b9:97:cc:85:59:f2:
95:aa:28:08:62:de:da:fc:e9:7f:97:61:3c:3e:4b:b5:db:2f:
37:c1:6a:95:e4:29:d8:58:ad:9b:3f:2a:5d:1f:6c:a4:a3:9d:
14:b7:36:4a:2d:53:40:55:04:a9:1d:29:7a:8e:6f:b7:b7:46:
ad:d6:c2:06:2c:f8:0e:6c:ae:a9:00:e7:f3:46:6c:ba:ed:1e:
9b:8b:68:c4:4c:22:1c:0c:5d:4d:7f:78:97:3b:44:0d:c7:83:
49:4e:0f:de:96:23:c4:85:fa:90:61:93:f4:1d:d6:47:68:78:
95:8c:b7:7f:50:81:0d:0d:9e:2d:ae:04:7a:b3:1b:dd:1d:f0:
09:08:c0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:56:22 2026 by rpki-client