
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
File: zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft (raw, json)
Hash identifier: fEqWsFIMkPXZMM0UsfvfrQdbrSxupyg/X+ZdI7oJ5G4=
Subject key identifier: F3:33:F3:C4:C1:2A:78:A6:10:60:76:8A:4F:54:01:D3:79:5F:8A:81
Authority key identifier: CC:9F:2F:BB:FA:ED:C4:4C:76:32:B1:8C:2B:D3:BC:58:EC:ED:7B:F5
Certificate issuer: /CN=A91E8FFF/serialNumber=CC9F2FBBFAEDC44C7632B18C2BD3BC58ECED7BF5
Certificate serial: 94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
Manifest number: 92
Signing time: Mon 19 Oct 2026 08:10:42 +0000
Manifest this update: Mon 19 Oct 2026 08:10:41 +0000
Manifest next update: Mon 26 Oct 2026 08:10:41 +0000
Files and hashes: 1: zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl (hash: YIJyZKu/ypYd72kmMcclpRCmnIDTlvLj7Uv0M2ugSxA=)
2: DBA60106EED111F0AB3DEEA1736F56BC.roa (hash: Zm5NVQiX1B1lMh6YYC6ofTBSfpDnYcLSn7pw+rOzSFc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl
rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 08:10:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8FFF, serialNumber=CC9F2FBBFAEDC44C7632B18C2BD3BC58ECED7BF5
Validity
Not Before: Oct 19 08:10:41 2026 GMT
Not After : Oct 26 08:10:41 2026 GMT
Subject: CN=6ad5d081-935d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:90:cb:bb:bf:58:9e:0a:20:16:60:7c:80:93:
bc:4b:85:86:5b:87:04:0f:e1:ac:28:d5:a3:49:21:
24:5f:c9:b1:fe:7e:53:f4:42:0f:47:ce:06:62:5d:
0b:9e:18:44:51:c4:15:a6:28:35:45:be:0c:16:30:
1f:af:30:47:84:f1:61:90:e0:7d:34:91:0e:2b:b5:
fa:6a:99:8f:0e:2e:09:93:9d:05:b6:52:16:f6:8e:
f2:03:ce:db:19:32:7e:f2:96:9f:86:d3:56:e0:23:
dd:9a:40:76:04:09:df:35:c8:1d:a3:bb:8d:e8:90:
05:ef:0a:be:1c:72:80:06:2c:3a:34:89:ad:dc:15:
87:ed:de:c6:35:7f:7e:fe:22:13:fd:80:39:17:5d:
be:70:ef:29:69:b3:be:a9:8c:db:ac:a6:b3:94:70:
ed:c7:58:13:ef:c5:01:42:e4:f1:bd:ad:9a:9f:34:
e4:37:dd:f2:a4:c5:72:aa:2d:c9:2b:c9:74:69:70:
11:8a:69:37:c1:1d:f9:bb:4b:c6:fa:69:a3:14:25:
6a:f5:1e:bc:47:d7:31:f1:e4:c9:1c:39:c6:22:0a:
0d:ba:ac:f5:29:f4:6f:44:dc:fc:1c:75:09:5b:65:
b8:80:af:93:80:00:58:36:6f:c2:d1:0e:72:eb:a8:
58:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:33:F3:C4:C1:2A:78:A6:10:60:76:8A:4F:54:01:D3:79:5F:8A:81
X509v3 Authority Key Identifier:
keyid:CC:9F:2F:BB:FA:ED:C4:4C:76:32:B1:8C:2B:D3:BC:58:EC:ED:7B:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:55:98:51:b1:da:50:8f:2f:b0:b6:08:30:23:69:05:37:1e:
a4:e2:ca:c7:9c:7b:68:dd:d3:ff:db:cc:33:a7:c5:2b:2b:14:
bf:fd:45:2d:f8:c5:cc:e9:78:38:be:39:69:8f:3a:e4:92:12:
08:9c:39:f1:9d:bf:ae:4d:7d:81:f8:69:46:39:43:33:81:48:
52:fd:bc:09:ab:c7:ed:12:41:8e:08:1c:9e:d7:93:cc:09:12:
d0:75:29:a2:25:cb:94:d4:bc:4a:df:bf:95:1b:45:6b:bc:bd:
b8:6b:53:6a:bb:46:30:77:33:2c:49:e9:9e:d3:f8:72:7d:bf:
f3:ef:6c:f9:f9:a2:bc:5e:9e:7d:85:6a:11:a8:83:e3:83:a3:
b8:c3:fa:64:39:9b:72:97:3f:ce:66:01:3c:3d:80:be:9f:1f:
07:e1:ce:4c:c9:20:68:aa:91:e6:16:38:0d:3f:f1:81:f2:a5:
68:87:8c:ac:1d:f8:59:e8:9c:d0:1d:f8:22:ff:3a:d1:2b:88:
9b:58:7b:d0:14:0e:a3:86:04:45:bb:25:ee:55:30:51:59:bb:
62:97:57:d0:b7:e3:2f:86:cc:6b:a8:72:93:8f:91:f9:f8:dd:
98:e9:18:a1:af:e3:94:e8:34:1d:fd:e1:39:ab:c0:d3:93:bd:
d4:96:c3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:24:14 2026 by rpki-client