
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft
File: Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft (raw, json)
Hash identifier: mH8cDS+KoOvfj7j06EuVVCEFaVSjpqCigES2sBYi66Y=
Subject key identifier: F3:96:71:61:5B:1F:9C:F2:B2:A5:8B:8B:E0:42:E0:6B:EA:B6:9A:FA
Authority key identifier: 67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0
Certificate issuer: /CN=A91DA13E/serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0
Certificate serial: 08A0
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft
Manifest number: 0894
Signing time: Mon 31 Aug 2026 20:40:48 +0000
Manifest this update: Mon 31 Aug 2026 20:40:47 +0000
Manifest next update: Mon 07 Sep 2026 20:40:47 +0000
Files and hashes: 1: Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl (hash: J4FiyeYlpGDRkKZwGDehd54SmKvyuDZzm4buG2Ad6c0=)
2: 28D471BA06B611EBBBFD6B2CC4F9AE02.roa (hash: 6D7ij53r9ioYBrQpTrEg7bEtxQIHnICUtJjGzqeUXdY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl
rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 20:40:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2208 (0x8a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA13E, serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0
Validity
Not Before: Aug 31 20:40:47 2026 GMT
Not After : Sep 7 20:40:47 2026 GMT
Subject: CN=6a95e6cf-ff55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e9:c3:b5:e9:3d:cc:ad:65:72:79:47:aa:b9:
fd:2c:53:e6:07:d7:20:c4:30:c8:da:5e:d3:80:9d:
67:a3:ec:dc:b6:9b:07:dd:80:56:0f:8d:e8:fa:1b:
1e:70:ee:25:2d:53:57:85:fc:51:f3:3a:e1:0c:17:
f5:5f:53:5c:72:25:5c:07:63:b2:d4:71:d3:65:3d:
d8:21:94:74:f0:71:07:ca:c3:82:2d:3b:89:9f:4d:
7d:3d:31:8f:a8:82:a7:0c:09:4c:99:52:bc:17:6e:
f9:ce:b5:41:53:7b:fa:51:d4:0d:7b:1d:8b:b1:0b:
51:f5:5e:21:b8:7b:22:24:d0:52:17:2c:f6:c2:81:
19:e8:f1:c9:5d:e2:44:66:b6:9d:e4:eb:4a:51:07:
7b:23:3d:4c:0a:ea:68:a7:98:6e:35:b5:3e:f4:93:
21:be:64:cf:5d:8b:68:c0:7b:9a:80:04:e6:94:98:
78:cf:10:d8:14:c0:09:32:a8:59:d8:98:1b:5a:4c:
db:95:df:db:2d:f2:d0:00:1c:c2:30:26:ac:da:a1:
17:e5:30:3b:d2:7b:01:8c:56:d3:3a:d8:5b:22:b2:
2e:43:c9:66:cd:94:d9:f9:95:52:b1:d8:cd:ad:ae:
ab:d1:69:93:19:6c:0b:8a:2f:9c:81:a8:4c:91:54:
38:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:96:71:61:5B:1F:9C:F2:B2:A5:8B:8B:E0:42:E0:6B:EA:B6:9A:FA
X509v3 Authority Key Identifier:
keyid:67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f9:b5:10:d7:6a:49:33:da:3b:b8:15:5b:64:cb:76:47:24:
06:f6:06:4f:fd:77:1f:a9:bc:2b:23:7e:5a:bb:4d:5a:87:a6:
fc:84:93:d9:7a:5b:33:db:eb:35:b9:17:6a:7c:b6:c6:de:59:
a6:42:bb:d0:4d:02:40:d3:86:de:b6:1b:66:2b:ff:83:2c:9a:
79:84:a6:b3:06:89:c0:c9:81:ee:04:d0:38:ce:7c:ef:3f:9b:
1f:6e:fa:3f:e4:95:6f:c1:91:0b:0d:85:a3:68:54:f0:1d:57:
d3:83:7f:3b:ec:09:fb:09:37:fc:b5:d4:51:e5:c0:bd:0d:1b:
11:eb:27:88:5d:58:0a:b0:9d:c1:06:9d:96:92:43:2a:d1:fb:
6c:0e:b7:3c:f7:1d:d5:3d:f7:fc:cb:ff:e4:5f:cd:e6:e9:87:
2b:a1:3d:3e:d9:ae:8f:2e:02:51:35:91:5b:53:43:f5:ce:69:
4b:06:ea:e8:77:d3:80:57:6e:a9:a4:cf:3e:3c:61:b3:83:cf:
d7:bd:2a:07:80:fe:ae:91:32:9e:40:81:15:dd:b1:8c:ed:78:
5b:22:6c:04:18:fe:39:4e:68:46:13:4f:90:0f:c5:a5:7d:d0:
21:43:30:f2:5c:6a:6c:d7:ed:69:83:98:a0:70:01:e5:24:1e:
1a:9a:e1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:51:41 2026 by rpki-client