
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDA42/CCAFCAFEB1BA11F1A69E71483911F970/RPZMRz46Y41Z4YoK-iONzYeYx1Q.mft
File: RPZMRz46Y41Z4YoK-iONzYeYx1Q.mft (raw, json)
Hash identifier: kRSTBBa7iCf/egkr0R0vSJJMChDimUP9wG+/TatXnaE=
Subject key identifier: 64:FC:25:06:72:56:DD:97:D7:98:05:FC:73:FD:79:85:4E:D4:EB:03
Authority key identifier: 44:F6:4C:47:3E:3A:63:8D:59:E1:8A:0A:FA:23:8D:CD:87:98:C7:54
Certificate issuer: /CN=A91CDA42/serialNumber=44F64C473E3A638D59E18A0AFA238DCD8798C754
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPZMRz46Y41Z4YoK-iONzYeYx1Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDA42/CCAFCAFEB1BA11F1A69E71483911F970/RPZMRz46Y41Z4YoK-iONzYeYx1Q.mft
Manifest number: 0B
Signing time: Sat 03 Oct 2026 09:56:54 +0000
Manifest this update: Sat 03 Oct 2026 09:56:54 +0000
Manifest next update: Sat 10 Oct 2026 09:56:54 +0000
Files and hashes: 1: RPZMRz46Y41Z4YoK-iONzYeYx1Q.crl (hash: q3/Ct2xRHqMwgbrVgt0YwfgQU9A2D85n6SCRTh9VN9U=)
2: DZr8Whm9G0q2UTY6ATAt2PQNZKU.asa (hash: EQuIyZqz36tlNEX2RXbyf/oGDe/1+hdr6fH5I/bv7Ms=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDA42/CCAFCAFEB1BA11F1A69E71483911F970/RPZMRz46Y41Z4YoK-iONzYeYx1Q.crl
rsync://rpki.apnic.net/member_repository/A91CDA42/CCAFCAFEB1BA11F1A69E71483911F970/RPZMRz46Y41Z4YoK-iONzYeYx1Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPZMRz46Y41Z4YoK-iONzYeYx1Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 09:56:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDA42, serialNumber=44F64C473E3A638D59E18A0AFA238DCD8798C754
Validity
Not Before: Oct 3 09:56:54 2026 GMT
Not After : Oct 10 09:56:54 2026 GMT
Subject: CN=6ac0d166-68aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:11:b4:18:2b:e1:14:07:a1:f3:b7:5d:f5:02:
7e:42:05:29:fa:be:c8:ca:e9:7f:80:44:e2:71:4f:
29:fa:46:9e:eb:71:3c:19:4d:fd:c8:47:5c:c8:35:
2f:93:b8:91:32:29:4e:98:04:1f:23:01:66:a2:96:
38:17:b8:c9:c1:85:12:ef:73:6d:fb:f2:58:de:c7:
6e:ff:39:27:47:0b:48:ba:07:6d:4b:e2:e9:e8:7e:
34:b4:d7:3a:e9:a0:8a:54:f9:53:bb:cc:08:f9:ee:
f6:2e:e9:6a:1f:da:2c:7e:05:78:1f:3c:36:59:64:
31:47:29:8c:ad:02:55:d0:a0:a7:b8:7f:7e:ad:04:
ed:ab:b2:5a:09:6c:94:2d:07:26:1b:20:72:91:a6:
ff:7d:0a:f7:b9:52:d3:80:eb:4e:66:4c:41:5c:ad:
d9:5b:38:a2:9f:b8:38:e1:a1:09:6d:4a:ba:1f:d3:
5d:25:b2:b9:2f:2b:3b:74:f1:6c:96:7f:64:e0:8f:
50:50:2f:5d:50:f1:b3:8f:46:6f:7a:cd:86:41:3d:
8d:36:88:8d:c8:3a:17:ec:6d:ac:11:28:34:2f:85:
41:f6:3d:dd:0a:d6:11:86:e4:d9:06:62:8c:b8:db:
6c:03:cf:a2:89:93:c4:a1:64:61:34:5b:ee:90:f3:
f8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FC:25:06:72:56:DD:97:D7:98:05:FC:73:FD:79:85:4E:D4:EB:03
X509v3 Authority Key Identifier:
keyid:44:F6:4C:47:3E:3A:63:8D:59:E1:8A:0A:FA:23:8D:CD:87:98:C7:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDA42/CCAFCAFEB1BA11F1A69E71483911F970/RPZMRz46Y41Z4YoK-iONzYeYx1Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPZMRz46Y41Z4YoK-iONzYeYx1Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDA42/CCAFCAFEB1BA11F1A69E71483911F970/RPZMRz46Y41Z4YoK-iONzYeYx1Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0c:c7:6c:66:45:85:74:2c:c5:a5:b3:0a:49:80:0a:c1:4e:
58:34:84:e5:da:5f:c4:ec:19:71:4e:94:3b:19:c1:4a:be:0c:
8c:54:b1:38:ad:85:0b:34:65:34:23:ff:47:62:a2:e9:42:3b:
74:08:f1:7d:60:2a:bd:fe:81:53:6d:f8:2d:ec:4b:d0:b4:0c:
3d:79:86:1e:b6:f0:3b:1e:fd:7b:45:8e:4f:34:f3:76:99:37:
c4:4b:05:c0:46:13:7d:ea:0d:dd:77:a5:82:49:d5:15:80:a1:
ff:45:7d:db:2f:74:04:5f:62:7a:7c:3e:26:00:0c:76:50:b3:
e0:3f:a1:e1:63:55:d4:6d:6c:31:b3:0f:71:81:26:23:63:5d:
a1:66:29:5c:54:02:3a:92:76:24:15:56:0e:47:26:69:a5:df:
08:9a:dc:d5:79:82:47:18:52:55:81:4f:09:97:ca:66:fb:70:
ac:f7:08:ec:79:9a:bc:08:43:74:63:52:e2:7f:01:7f:dd:eb:
12:b7:74:67:b0:82:86:0f:cd:21:2f:6f:96:37:49:24:7d:90:
37:12:6a:af:c5:52:aa:e3:88:08:c9:2c:bf:90:eb:96:0c:81:
30:42:7c:c7:d1:12:3a:43:b6:f8:b5:92:85:fb:a5:09:61:14:
98:35:9c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 20:06:32 2026 by rpki-client