
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft
File: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft (raw, json)
Hash identifier: dXtIuK3/OowtFqZ6c+stV511m5o4gA1CI+dwTIx39uk=
Subject key identifier: 21:AB:A1:F4:98:9F:3D:CD:62:4A:98:16:23:C3:8F:B7:E5:DA:71:07
Authority key identifier: 64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3
Certificate issuer: /CN=A91EBC61/serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3
Certificate serial: 0164
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft
Manifest number: 015C
Signing time: Sat 17 Oct 2026 05:47:11 +0000
Manifest this update: Sat 17 Oct 2026 05:47:10 +0000
Manifest next update: Sat 24 Oct 2026 05:47:10 +0000
Files and hashes: 1: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl (hash: zFKHTIIMPTOsBVJKoscoV09pAzHazrTCor0l0rM9h/M=)
2: 8D26DADCB6C411EF99C3B758C4F9AE02.roa (hash: svfCZY/4ijPFg+GD8JzFGuMZM/fHEdmUD+EacNaNCNg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl
rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 05:47:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356 (0x164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBC61, serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3
Validity
Not Before: Oct 17 05:47:10 2026 GMT
Not After : Oct 24 05:47:10 2026 GMT
Subject: CN=6ad30bdf-e785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:74:0c:35:eb:b6:a8:59:89:65:bb:fc:e2:72:
b4:0b:36:d2:8e:a4:a6:de:2f:28:74:65:87:7c:2b:
75:fb:a1:ed:41:da:76:12:b9:93:60:04:fd:a0:9d:
3d:dc:fd:13:98:21:22:96:ce:f9:cc:e8:0a:6b:dd:
bc:b0:45:dc:8d:3b:31:74:2c:59:6b:1e:31:d0:31:
b7:b3:f5:60:6c:e9:dc:c1:21:e7:80:ab:1e:b6:dd:
de:02:e0:a3:b4:ef:4c:b8:79:4b:ee:ab:c8:fa:22:
e0:8d:8e:e1:fd:c7:6a:c5:12:60:51:7c:bc:a7:87:
68:07:71:80:40:25:b4:cf:d8:8e:71:a1:ed:12:82:
d6:73:ff:96:da:98:a0:6b:6a:5b:e9:be:3f:bd:6d:
ac:eb:14:ff:c6:c4:6a:95:80:1a:33:77:fa:bd:27:
47:47:a8:5b:11:20:40:7e:52:d3:80:7f:44:cd:2b:
28:0a:98:59:37:09:e3:74:73:60:de:bc:2c:a4:72:
0f:a2:c2:88:f5:2e:5f:4d:54:e8:f8:de:39:e3:6e:
12:aa:e1:e3:f5:6d:c0:49:80:f5:a9:3f:2b:8f:c4:
f1:08:5e:91:17:1c:a2:35:d6:1f:3f:90:6d:1b:c3:
f7:78:4b:af:c5:9c:3d:f1:f7:50:4a:d3:05:b7:f3:
fb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AB:A1:F4:98:9F:3D:CD:62:4A:98:16:23:C3:8F:B7:E5:DA:71:07
X509v3 Authority Key Identifier:
keyid:64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:2a:6b:20:24:a2:c0:8e:b5:ef:2a:2e:ad:db:c1:e2:1e:6c:
96:e0:47:6f:61:2c:d4:a5:2b:4f:ef:b6:37:4e:18:5c:26:6c:
26:6f:34:07:8f:6a:4d:5e:40:92:af:ae:30:ca:63:77:70:42:
1b:86:97:c4:99:f4:81:c6:1e:58:43:53:05:b0:1b:c5:89:3e:
18:99:a0:31:b6:f6:93:72:46:07:9c:97:db:d1:df:b4:05:8b:
be:b4:81:bc:94:91:47:51:e0:8f:94:d0:54:19:43:4f:eb:f9:
78:20:9f:a5:40:91:56:d8:97:26:ae:64:62:93:f0:95:d5:22:
b8:6c:b8:e3:73:2d:17:b0:13:9f:8e:10:17:73:53:b5:60:8f:
0f:fd:d0:35:84:b9:f4:be:a3:68:4b:fe:58:28:cb:9a:93:4a:
8a:1a:ee:79:40:90:76:54:15:b6:91:5c:bc:f7:60:57:38:b0:
ae:7b:53:d9:a5:66:9b:21:81:2e:f4:2c:87:e3:86:e6:34:05:
49:31:28:ca:94:19:1a:92:ae:56:79:27:b0:c6:ec:a6:19:ce:
d4:b0:30:72:d5:d7:0d:1b:97:6e:b8:e5:29:e1:50:fa:d5:49:
4f:78:4f:6a:dd:c4:f9:3b:80:de:51:72:90:be:0d:21:ae:e7:
4f:28:16:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:33:28 2026 by rpki-client