
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
File: Zw46BnIWhKtHO7vlzCLPBdAkv20.mft (raw, json)
Hash identifier: 1fcKgZWwXHOzwYVCYx9mHW2PvBH6U1znDB3SwH9wf9Y=
Subject key identifier: B3:76:43:AF:5A:DF:F6:BC:25:19:E9:BF:5D:82:3F:94:C2:FC:BE:4B
Authority key identifier: 67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D
Certificate issuer: /CN=A91EAE0A/serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
Certificate serial: 016F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
Manifest number: 0165
Signing time: Tue 27 Oct 2026 05:20:43 +0000
Manifest this update: Tue 27 Oct 2026 05:20:43 +0000
Manifest next update: Tue 03 Nov 2026 05:20:43 +0000
Files and hashes: 1: Zw46BnIWhKtHO7vlzCLPBdAkv20.crl (hash: IeCs/xDaqB8o5Op7/RznE4tsMkH9Q7HoaP7GcKlxJQk=)
2: C491ED725A7A11F083B3F885C4F9AE02.roa (hash: 7WBAHsig/Kovz/pUrk3p+Cxc7oQA5m4kNqg7vSnWYU8=)
3: 2018750A5FC411F0ACE3A087C4F9AE02.roa (hash: R8o39adrmBVnGQ0//ScQ4qDFf9KvWQlMZLY/6u7Uyoo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl
rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 05:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE0A, serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
Validity
Not Before: Oct 27 05:20:43 2026 GMT
Not After : Nov 3 05:20:43 2026 GMT
Subject: CN=6ae034ab-97a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:70:48:06:80:46:ba:d9:59:09:a9:f6:3f:60:
1d:59:fc:7d:aa:e6:eb:cb:98:09:40:48:fb:43:31:
bc:16:fd:c9:2c:1d:34:63:e0:4e:6e:a5:2d:77:65:
61:d9:fd:96:97:8f:3b:54:4f:95:90:5c:b0:79:06:
5f:c1:11:8e:d1:14:39:4e:12:b9:4a:1b:d5:ab:80:
e0:4e:f3:42:0c:00:d1:27:d6:f7:38:fb:94:a6:1d:
94:66:c8:b3:ad:c7:b3:b7:72:83:c5:eb:92:e4:cf:
75:ba:87:75:75:27:43:0d:c5:89:e0:4e:84:42:c1:
37:e7:e2:5a:87:6e:e1:66:0a:e9:91:46:b6:74:27:
36:07:0d:c2:44:75:ac:d6:31:3b:3b:56:7e:0a:c7:
2f:6a:af:fc:85:da:0c:ad:70:15:c3:59:f3:66:89:
bf:fd:0b:66:ea:b6:e7:bf:51:63:c1:65:e1:d2:84:
2a:22:1c:f6:a9:19:04:4c:a4:97:82:2c:a0:18:9f:
6c:74:64:bd:02:9b:56:25:09:37:9d:dc:76:94:62:
84:54:4b:d8:f6:64:b2:8a:38:c3:e0:4b:88:89:5d:
8d:90:92:65:36:da:66:5b:46:b5:90:ad:cd:c4:5d:
ba:02:36:cb:4e:28:16:38:1c:30:da:f4:a4:68:b1:
ac:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:76:43:AF:5A:DF:F6:BC:25:19:E9:BF:5D:82:3F:94:C2:FC:BE:4B
X509v3 Authority Key Identifier:
keyid:67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:87:04:ad:b6:ed:e4:c9:d1:44:45:a9:66:0b:c5:ab:fc:20:
2f:95:9d:94:79:76:46:53:b0:a9:29:50:5d:51:35:18:5a:f8:
82:5b:9a:9f:a5:17:5c:25:c6:fe:2a:22:66:88:40:28:d7:a6:
22:74:93:d1:e7:93:c9:02:6e:f4:b3:4b:04:1a:3a:fb:07:7f:
59:c0:1e:5c:37:58:01:19:b3:0d:e2:75:69:95:6b:6c:c6:e9:
7f:74:29:de:05:cb:c9:0f:fb:d0:1a:33:8f:78:9a:4e:69:16:
7b:09:f4:42:75:9d:65:7e:5c:2e:7c:1d:ce:73:0e:71:89:7e:
c7:1b:02:1b:ef:7a:23:67:ae:90:2d:ab:89:d0:06:62:93:d5:
62:24:30:d2:91:46:9c:0d:89:ca:8e:50:80:09:10:4f:f8:bc:
ba:f1:d6:f0:3e:6e:8f:7c:40:75:78:5f:6b:36:25:4e:a2:e8:
21:43:d1:53:c0:46:78:e3:8a:65:5e:6f:e8:d4:29:0e:03:98:
0c:19:c1:fe:59:64:1c:db:d1:59:c6:ca:5b:da:23:00:9f:3f:
2e:74:0a:45:4d:5a:42:99:38:a6:a2:0d:e7:91:9e:ff:fc:5a:
53:0e:19:8f:26:22:2a:bb:18:a4:d7:b6:6b:0b:17:c9:8d:ac:
3c:70:a4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:21:44 2026 by rpki-client