
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
File: Z913R6nbiwGl58yhRsSJZaIwgJE.mft (raw, json)
Hash identifier: afM4aAuVcumLRPvJo4QZ9VO+hhQ4CGgMER9+OMlYam4=
Subject key identifier: FC:38:A5:87:B5:9E:E7:CC:3C:AC:9E:D9:1E:15:F0:06:DC:47:0C:E5
Authority key identifier: 67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91
Certificate issuer: /CN=A91E6194/serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091
Certificate serial: 066C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
Manifest number: 065D
Signing time: Sat 10 Oct 2026 22:43:17 +0000
Manifest this update: Sat 10 Oct 2026 22:43:17 +0000
Manifest next update: Sat 17 Oct 2026 22:43:17 +0000
Files and hashes: 1: Z913R6nbiwGl58yhRsSJZaIwgJE.crl (hash: A+Quk1QnZ2kSLmJxBx4jdbGIp+4XR2VpZ7Uq9a9ArZQ=)
2: 0FAA7244A7D211F0BEE84D58C4F9AE02.roa (hash: MlIegAxmiZi8feLlk0p4rXujBJW9bxtTttiOOMZiwZ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl
rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 22:43:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1644 (0x66c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6194, serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091
Validity
Not Before: Oct 10 22:43:17 2026 GMT
Not After : Oct 17 22:43:17 2026 GMT
Subject: CN=6acabf85-bf11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:21:6e:5e:8f:a9:53:f3:d6:22:0f:85:41:e6:
75:12:68:f8:42:bb:a9:2b:07:92:31:ed:9c:66:f5:
97:cf:0c:7b:52:58:38:ef:89:c2:c9:a2:a0:93:48:
6e:c9:c7:31:ad:74:87:9f:14:3a:97:0a:c1:b8:36:
4f:ca:89:1c:4f:60:17:52:59:6c:38:62:e3:30:2f:
1b:93:66:73:9e:79:cb:33:00:fd:f4:30:2b:7d:ba:
1a:43:a9:27:38:5d:2a:18:65:e0:d9:e2:79:8d:6f:
9a:d6:9f:b5:c9:62:75:ee:7a:4c:63:86:c6:8c:5b:
ee:eb:68:5b:8b:9c:c7:9e:d4:29:7f:5f:0f:db:f2:
b3:c1:0a:8d:11:7c:07:c5:37:ce:8b:79:1c:6f:6b:
25:d7:b2:f1:79:9b:e5:9c:8e:46:4f:06:78:41:69:
6c:0d:73:8a:a9:57:0f:84:d4:87:66:69:2b:86:93:
28:6e:53:c5:42:3a:ed:f8:b2:b4:39:21:23:4d:2c:
d8:8f:d4:26:d9:20:da:8d:56:e8:b8:b9:0d:67:d8:
ee:86:9b:52:56:df:e6:91:23:61:84:94:b4:26:e6:
8b:66:f5:0a:b4:43:34:a2:96:e3:63:fc:e4:45:20:
64:de:44:27:73:ee:61:9e:b1:b1:40:ce:ee:30:5e:
a5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:38:A5:87:B5:9E:E7:CC:3C:AC:9E:D9:1E:15:F0:06:DC:47:0C:E5
X509v3 Authority Key Identifier:
keyid:67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ac:a3:86:00:c1:19:86:7e:c9:39:fa:45:18:cc:78:d2:a5:
69:c2:2c:1f:e4:5e:01:a8:72:4a:c3:ee:a0:e5:ed:ea:ef:b2:
51:37:f0:c4:22:37:f5:be:cd:7c:ca:ef:10:34:28:ce:d8:69:
cd:55:59:c1:8c:42:f5:58:f0:ef:47:89:ff:c5:78:a3:65:6c:
6e:59:51:11:cf:03:87:d8:2c:ec:d5:de:c3:69:13:44:49:30:
e0:dd:71:96:2f:dc:f8:35:ae:90:19:89:77:0c:c3:9e:10:fa:
60:3f:be:76:7d:d6:b9:bb:6c:ad:b2:b6:2f:ea:b9:42:68:13:
d2:bd:97:df:78:38:24:ee:e4:04:87:2f:71:af:06:35:b6:86:
94:0b:43:fd:7b:d9:08:6f:6e:45:41:7f:73:7c:8a:ff:5e:69:
e0:a3:7f:b1:65:13:77:2f:11:b5:b6:31:d1:29:fc:62:16:02:
a3:9b:a7:c8:64:32:16:23:9d:1f:e4:e2:20:04:56:c1:a3:e9:
e8:fe:ea:a4:08:58:d6:93:41:04:cd:f7:f2:43:05:b1:60:dc:
86:ab:9f:bb:01:6f:b8:1b:27:73:e8:ba:22:1d:e4:c4:ba:08:
4e:60:9a:ec:26:d7:6e:cd:1a:d3:3e:24:4a:8c:f9:99:66:1a:
79:4e:f7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:41:45 2026 by rpki-client