
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft
File: z4nWqxHn1Hqhe0MJxypytxy6R64.mft (raw, json)
Hash identifier: pG4MQdkQHlUK8dnVyFzzRZ6IEThOlaeI+LZ19/mygd4=
Subject key identifier: BF:4E:99:56:DC:BC:59:27:BA:02:E7:78:F7:8A:5D:8F:6B:8E:48:CD
Authority key identifier: CF:89:D6:AB:11:E7:D4:7A:A1:7B:43:09:C7:2A:72:B7:1C:BA:47:AE
Certificate issuer: /CN=A91E4D9B/serialNumber=CF89D6AB11E7D47AA17B4309C72A72B71CBA47AE
Certificate serial: 0973
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4nWqxHn1Hqhe0MJxypytxy6R64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft
Manifest number: 0965
Signing time: Sat 10 Oct 2026 20:11:22 +0000
Manifest this update: Sat 10 Oct 2026 20:11:22 +0000
Manifest next update: Sat 17 Oct 2026 20:11:22 +0000
Files and hashes: 1: z4nWqxHn1Hqhe0MJxypytxy6R64.crl (hash: NjKcuCyuKy/tRWinFOpkvP3jeMQgIrWxRw78V5MOBRY=)
2: CCF7B8AA22B811ECAD21FB20C4F9AE02.roa (hash: 1CyYq91UMI9nO5A27oE7aoFsJZc6+2bPjCTWW5sqvcE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.crl
rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4nWqxHn1Hqhe0MJxypytxy6R64.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 20:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2419 (0x973)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4D9B, serialNumber=CF89D6AB11E7D47AA17B4309C72A72B71CBA47AE
Validity
Not Before: Oct 10 20:11:22 2026 GMT
Not After : Oct 17 20:11:22 2026 GMT
Subject: CN=6aca9bea-8942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:f3:3b:92:9f:01:be:f4:de:b3:18:c9:29:
0b:0a:a1:96:a1:89:d4:fe:63:dc:bd:fa:ae:8f:57:
9d:db:f4:a3:40:9b:5a:59:d3:60:08:1a:09:a1:3d:
49:77:6b:d3:04:73:c7:e5:19:6a:75:5a:78:a2:67:
c6:72:ae:33:10:58:ba:59:11:02:87:cd:6e:56:20:
47:93:57:07:34:c8:b7:3c:cb:b0:b6:e0:f8:b7:b2:
77:c0:d2:a0:ea:f3:79:ac:43:41:8d:24:dc:f2:aa:
f6:dc:b0:0e:b6:1d:c7:be:4a:dc:98:43:7f:c3:5c:
9c:2c:ed:9c:de:d7:88:2a:ce:cd:42:c5:ee:ba:2d:
99:df:47:bd:49:9f:e7:c1:65:bb:ad:5a:e2:23:93:
40:3a:8b:dc:bb:e6:a0:79:72:77:79:07:fc:bc:54:
59:41:0c:b5:d8:0e:6e:af:00:15:fb:25:75:d7:96:
ad:27:59:8d:b9:5c:44:6b:9c:28:24:72:d5:8a:8f:
8a:60:39:ad:60:f5:a0:34:1b:91:54:52:47:a5:4b:
17:ce:63:ab:82:02:69:ba:d5:14:0b:1d:77:c5:2c:
ab:b2:b8:78:4a:d8:25:37:5f:94:9b:1d:d2:fd:a9:
8c:ce:2d:c2:7f:f1:29:80:c0:7c:8c:7d:28:39:65:
82:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4E:99:56:DC:BC:59:27:BA:02:E7:78:F7:8A:5D:8F:6B:8E:48:CD
X509v3 Authority Key Identifier:
keyid:CF:89:D6:AB:11:E7:D4:7A:A1:7B:43:09:C7:2A:72:B7:1C:BA:47:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4nWqxHn1Hqhe0MJxypytxy6R64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:f8:45:9c:31:08:c6:67:47:f0:ed:cc:00:45:aa:e1:33:7d:
ff:8e:9a:2b:7d:3b:9a:b9:42:df:77:72:da:74:92:d3:50:99:
bc:1e:d9:61:32:25:a7:7f:a9:32:13:a1:4e:b7:9b:4d:e2:36:
cc:b6:ce:3c:b2:5f:7f:71:95:97:54:4d:85:e2:75:15:3c:b7:
d1:7e:b3:7d:ea:c0:f4:db:b8:e9:c4:fb:d3:a8:47:c5:51:3a:
46:2e:60:f2:da:bd:8e:eb:f6:0d:f6:8b:83:fa:ec:bf:dc:c2:
cb:fb:89:e3:e6:d5:59:13:1f:9d:9e:99:d1:89:af:0f:d7:fb:
9c:97:0e:a7:a6:fa:ac:c1:6c:24:c3:31:1c:08:a5:63:85:af:
2d:65:15:72:3d:5f:66:7e:0f:8f:61:69:cd:4c:fa:34:d9:54:
5f:9f:3a:ac:5a:51:38:1d:94:47:2b:96:62:64:23:9f:55:99:
be:98:77:87:0e:11:90:32:52:2a:e7:cd:c9:ef:06:8f:57:52:
19:49:4b:73:29:b8:0b:33:ce:0a:72:bf:06:70:c5:dc:ad:ed:
89:9e:da:db:27:26:ab:b3:19:93:bc:09:a8:46:c9:11:12:e9:
d7:3a:78:a7:5b:78:fb:91:2e:9a:1b:c0:48:3a:9f:ca:36:e1:
dd:34:7b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:49:10 2026 by rpki-client