
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft
File: cz1KHp8pnM0_jnJKteer9Ci7GV0.mft (raw, json)
Hash identifier: qnEAD8OV0q9vJvhO3UBPDVjf2hW2xbt9DfUqgCguKuE=
Subject key identifier: 13:62:F6:EE:30:38:EE:C9:86:E4:85:AC:43:65:93:CF:10:14:B7:08
Authority key identifier: 73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D
Certificate issuer: /CN=A91DE500/serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D
Certificate serial: 01ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft
Manifest number: 01E7
Signing time: Tue 25 Aug 2026 03:30:01 +0000
Manifest this update: Tue 25 Aug 2026 03:30:01 +0000
Manifest next update: Tue 01 Sep 2026 03:30:01 +0000
Files and hashes: 1: cz1KHp8pnM0_jnJKteer9Ci7GV0.crl (hash: I6VKIKaiSQ8hzjMDtBRayDCAKKDRqFGR/6bZ/SbPnTI=)
2: D035B7BE5BC711F097260D5EC4F9AE02.roa (hash: 4MonzweCLEnl+TnK4Sp/6IiK94a2qiwQ1O3fFdo89mM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl
rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 03:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 493 (0x1ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE500, serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D
Validity
Not Before: Aug 25 03:30:01 2026 GMT
Not After : Sep 1 03:30:01 2026 GMT
Subject: CN=6a8d0c39-1f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:30:bb:44:c0:b5:7d:df:7e:25:34:29:07:1b:
c7:f5:1d:87:10:42:bd:35:cd:32:58:20:28:16:b8:
d8:f6:5b:81:b4:6d:36:1b:97:b5:b9:e7:7d:b3:4f:
6a:a7:48:5b:72:8e:07:db:c1:b9:0d:ba:c9:b6:66:
23:ec:48:da:73:d9:32:ee:ec:b0:2d:48:5c:5c:f5:
ea:f1:86:c8:8f:06:ec:18:54:92:e1:d2:2b:6a:84:
43:e0:68:07:48:ca:f1:b5:d3:26:e4:81:3c:c7:4a:
ee:2f:8b:72:38:e1:6e:2d:51:f0:fd:b8:cd:63:26:
c7:51:04:8e:6c:77:a4:96:23:2e:48:ae:89:34:f7:
1d:47:68:fb:a8:dd:f9:16:0a:51:e4:e5:09:a4:a6:
ba:54:a1:2a:7f:30:10:cb:a9:09:7d:95:97:56:7c:
a8:88:06:40:9b:c4:1c:d7:9c:f9:31:e2:65:49:28:
a5:4b:3a:06:6b:e7:c0:7e:15:3c:d6:b7:f6:63:f1:
b1:0b:fa:f3:da:15:1d:f2:89:27:8f:f0:06:0a:70:
be:dc:0e:3e:c1:a0:ae:be:e2:13:0c:03:ca:6f:0d:
d0:88:4c:3e:30:bb:1f:12:cc:b4:d8:04:47:d5:b4:
46:06:60:3e:c5:f0:91:cb:fd:36:0f:4b:93:51:e5:
75:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:62:F6:EE:30:38:EE:C9:86:E4:85:AC:43:65:93:CF:10:14:B7:08
X509v3 Authority Key Identifier:
keyid:73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:0a:98:fa:b6:d1:5c:54:fc:83:56:85:29:55:bc:5e:39:0c:
1c:fe:5e:f6:eb:86:db:84:7f:d9:d7:82:67:de:07:9d:5c:6a:
fa:a6:4c:74:10:33:b2:e5:1d:cd:89:74:3a:14:2b:51:db:92:
7f:ba:d5:48:1b:4c:6c:1a:a4:d0:a2:18:5d:ab:08:da:b1:07:
8f:98:13:b7:5d:fe:19:c7:73:ed:a9:32:46:fb:c7:59:e4:c1:
ac:97:05:f1:31:67:a1:c4:58:4c:fc:d7:ac:71:57:bd:1c:90:
d7:88:41:dc:ab:a6:0a:b2:7f:6f:af:14:d6:d5:bf:8a:82:bb:
59:3e:dc:a0:75:26:3b:b7:7b:77:ce:95:0f:0f:b8:15:49:a5:
4e:ae:44:1f:03:5d:f6:84:12:b7:49:84:88:e6:64:2e:2a:e0:
ca:54:8a:35:4b:4f:60:62:74:06:6a:c1:2f:60:e4:b3:72:cd:
70:48:ee:90:ad:48:7a:04:d9:19:5e:56:db:94:ae:d7:df:ff:
cd:a6:04:60:90:90:ec:1e:fe:6f:8f:78:4e:92:31:5e:b5:f9:
02:8c:da:96:fa:93:86:6b:00:60:dd:3b:7f:34:10:c5:11:b3:
e1:b8:83:9b:e3:fb:b7:5b:f5:96:5a:53:a8:51:3d:de:72:ab:
0c:dc:71:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 10:59:34 2026 by rpki-client