
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft
File: RZTy7BffVsPQZUDzZtKvEYsxfx4.mft (raw, json)
Hash identifier: svVq97Qb5ojcb8JxTP36wcAoReWnl1gDjEqHpv7oo2M=
Subject key identifier: 65:55:CB:A0:72:2B:D7:70:8E:E1:40:50:DB:F0:D1:E8:F7:B8:78:55
Authority key identifier: 45:94:F2:EC:17:DF:56:C3:D0:65:40:F3:66:D2:AF:11:8B:31:7F:1E
Certificate issuer: /CN=A91CE978/serialNumber=4594F2EC17DF56C3D06540F366D2AF118B317F1E
Certificate serial: 0201
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft
Manifest number: 01FC
Signing time: Fri 18 Sep 2026 14:51:25 +0000
Manifest this update: Fri 18 Sep 2026 14:51:24 +0000
Manifest next update: Fri 25 Sep 2026 14:51:24 +0000
Files and hashes: 1: RZTy7BffVsPQZUDzZtKvEYsxfx4.crl (hash: uxLaXdqHiFtyshikE5cwyJItpWSaKm/o0Fs92T8+xqE=)
2: 30EAE110B9AD11EE83063243C4F9AE02.roa (hash: QreKN0Rd5UfNyWwEd5SMYjaTfZ6J0wKhOlda79WX3co=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.crl
rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513 (0x201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE978, serialNumber=4594F2EC17DF56C3D06540F366D2AF118B317F1E
Validity
Not Before: Sep 18 14:51:24 2026 GMT
Not After : Sep 25 14:51:24 2026 GMT
Subject: CN=6aad4fed-9a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:11:2c:2b:38:27:a6:51:67:15:4f:cd:e4:ae:
22:d0:04:3c:82:33:e8:4d:68:46:3d:ea:9a:5e:29:
bf:fc:cb:fc:76:68:46:af:41:70:30:c7:91:3e:bd:
66:a6:dd:30:90:8b:d8:43:53:1c:91:3d:3f:ec:b2:
14:31:36:1a:83:d0:5f:f7:f2:50:b8:39:4e:f9:89:
65:5b:13:e3:db:e8:64:7c:93:bd:b7:e3:e9:9e:b3:
91:40:e5:06:fc:eb:13:c4:9e:03:b6:b2:d6:ab:bb:
ea:a9:5a:45:6b:72:e2:b9:0c:0b:8b:cc:3b:4d:92:
42:c8:0f:77:53:7e:c3:24:4c:9c:91:b0:59:dc:68:
47:f9:ce:65:c2:0e:88:47:4e:97:bb:54:cb:4f:d4:
65:1a:8c:db:09:73:b9:f8:74:9d:d4:a9:82:a7:86:
75:0a:47:75:68:56:5f:f3:45:50:ec:64:22:89:ae:
51:4d:a9:a5:90:e7:cb:53:3f:2a:1e:ee:59:5f:fe:
27:44:26:ca:e4:9b:b4:8f:7b:01:a3:d9:a7:a3:e1:
40:0b:c2:df:f6:03:ec:46:70:83:a8:80:14:b7:60:
b3:96:a8:dc:65:46:f6:8b:cf:84:53:81:6d:27:0b:
f8:84:91:a9:a0:12:94:13:e9:ca:b6:91:20:52:59:
41:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:55:CB:A0:72:2B:D7:70:8E:E1:40:50:DB:F0:D1:E8:F7:B8:78:55
X509v3 Authority Key Identifier:
keyid:45:94:F2:EC:17:DF:56:C3:D0:65:40:F3:66:D2:AF:11:8B:31:7F:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:44:28:94:35:53:b2:06:3a:c6:52:0f:a0:bb:4c:85:66:ce:
31:5b:03:18:36:b0:63:50:40:6d:39:cc:c7:1b:59:d9:3f:68:
f2:ed:13:15:5b:31:7e:ea:70:2c:71:82:68:34:96:71:b6:ce:
54:e9:a2:d6:81:fb:f2:8b:a0:51:60:39:41:5b:17:14:36:72:
4c:0c:b9:7a:73:71:d7:c9:7f:53:b8:a2:e0:40:1d:bc:f3:aa:
1e:25:a4:40:cd:61:10:44:49:d5:d8:52:fb:a4:ad:26:8e:bf:
7d:03:14:c0:18:30:a5:9e:0c:76:cd:81:a1:07:78:35:8c:f1:
6c:58:3b:ef:da:53:3e:35:67:6f:3f:df:16:d7:3f:bc:b3:d9:
6b:ea:04:bc:62:2a:01:48:30:ab:fc:38:78:d6:d4:28:f1:fd:
17:6b:66:6c:e0:8c:59:70:6b:eb:26:78:ed:ba:6c:13:81:28:
fe:a3:45:30:43:d7:86:03:3b:91:5d:4f:f9:f8:f0:ea:4c:57:
22:41:df:2c:ed:40:e5:04:fa:f5:2c:3d:22:7a:de:0e:4c:97:
46:0b:7d:0c:bd:e1:e7:79:fa:26:70:f3:fe:72:0a:60:5c:8c:
b7:75:71:c7:e4:c9:37:fd:f9:d0:7c:b2:da:34:52:2a:a4:6a:
cf:6b:81:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 09:02:16 2026 by rpki-client