
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.mft
File: ZYpZAQJeJrcXbdKtrqu2fPCh7R0.mft (raw, json)
Hash identifier: xCKRPL4oZ66a1NQ4vUPF3x/ksFuyYzk9i2rmuw/MJbw=
Subject key identifier: A0:2F:B0:01:1D:15:E2:4A:8C:AA:88:E4:23:03:58:07:BA:AE:26:14
Authority key identifier: 65:8A:59:01:02:5E:26:B7:17:6D:D2:AD:AE:AB:B6:7C:F0:A1:ED:1D
Certificate issuer: /CN=A91DC76E/serialNumber=658A5901025E26B7176DD2ADAEABB67CF0A1ED1D
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.mft
Manifest number: 6A
Signing time: Sat 03 Oct 2026 08:40:51 +0000
Manifest this update: Sat 03 Oct 2026 08:40:50 +0000
Manifest next update: Sat 10 Oct 2026 08:40:50 +0000
Files and hashes: 1: ZYpZAQJeJrcXbdKtrqu2fPCh7R0.crl (hash: MyG/IjAeHb0k9jjDMPgXMm+Hm3Qcbi6aVJbUgouSsok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.crl
rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 08:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC76E, serialNumber=658A5901025E26B7176DD2ADAEABB67CF0A1ED1D
Validity
Not Before: Oct 3 08:40:50 2026 GMT
Not After : Oct 10 08:40:50 2026 GMT
Subject: CN=6ac0bf93-0df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:0a:3e:88:b5:98:0c:f7:ba:3c:99:19:d6:
e1:81:8e:bb:2e:01:32:fe:db:e3:73:c1:fd:e0:da:
b6:da:60:26:e4:96:4b:5b:5e:42:f7:c1:fb:a0:f0:
70:7a:f2:23:3c:de:42:0c:fa:12:45:d4:01:7a:8f:
5f:32:37:ec:14:c3:f4:ee:02:28:cf:95:49:57:bc:
19:03:1c:35:32:44:39:02:6e:cf:35:96:3b:6a:1f:
0d:98:a1:7d:f8:73:ad:9f:54:62:73:40:e3:70:05:
2b:87:fe:8c:c8:c2:51:91:5b:bc:d5:bb:15:95:5b:
a8:4d:bc:98:e4:8e:a5:80:70:09:2f:df:96:69:c8:
db:19:be:7b:5f:c5:d9:98:d8:2f:ec:c3:70:15:ac:
32:f3:f3:82:c4:1f:b8:f4:e6:a2:03:fc:82:45:fd:
79:df:f9:70:08:f9:87:f2:35:dc:28:d3:93:81:8b:
b9:fc:1b:ed:2f:6c:b9:c8:c0:d8:d9:61:c8:07:e7:
14:c4:12:43:36:df:82:e1:8c:ca:b9:53:6f:9a:b2:
b3:87:e7:e6:5b:0a:9a:ae:6c:31:61:cd:c0:61:15:
38:2f:ce:48:e1:c7:61:cb:6e:28:46:ca:31:bb:93:
22:47:b7:34:09:4f:36:ee:85:5f:77:28:19:39:17:
0c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2F:B0:01:1D:15:E2:4A:8C:AA:88:E4:23:03:58:07:BA:AE:26:14
X509v3 Authority Key Identifier:
keyid:65:8A:59:01:02:5E:26:B7:17:6D:D2:AD:AE:AB:B6:7C:F0:A1:ED:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:21:f5:f5:07:70:b0:93:cc:8e:1f:f4:20:93:94:5b:52:81:
b2:33:31:9f:9d:82:31:8a:fb:ee:3e:73:9f:2a:cf:55:f7:2a:
72:2c:6f:e3:7a:50:7b:e7:fc:d0:71:b4:6a:88:89:ba:6d:e1:
02:b8:6f:7e:fe:93:97:ef:14:89:58:70:52:fb:ed:17:29:b6:
e6:8c:c4:53:63:b5:bb:a7:69:a9:ac:dc:28:37:96:7d:07:9d:
27:75:36:49:36:9a:97:6b:09:8d:a5:5a:d5:f6:51:0f:ac:4b:
1e:0a:7b:ce:2c:5f:b8:68:8d:8a:42:13:13:8f:a5:02:4e:66:
e2:7f:6b:f3:bd:27:0b:6a:6f:37:c7:1f:1a:7d:5b:5c:25:89:
83:36:ef:dc:f4:3f:2e:fb:eb:b6:77:33:c5:20:b9:01:1b:29:
82:33:2a:35:ff:5c:6d:5b:1b:27:5d:62:92:e9:fe:b1:d3:4a:
5e:c5:38:25:5c:1a:ec:33:a5:4b:c3:01:76:e5:e6:15:bb:4a:
f7:5e:15:09:4a:33:4a:30:ba:1c:00:06:55:9b:5e:26:dd:a6:
6e:f9:28:e5:9e:a7:d1:6f:b9:fd:7c:d5:2d:c2:02:91:c8:94:
2a:8e:31:be:27:54:39:50:10:0b:41:13:cc:00:af:8c:00:f6:
ae:d2:bf:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:51:29 2026 by rpki-client