
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft
File: z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft (raw, json)
Hash identifier: WciRJ8mZoH2TP0pZ2MqCTSrVtMZL/fTmELN4blwPymw=
Subject key identifier: 67:84:C5:5C:CB:A5:6F:68:13:AC:C0:12:4A:25:D9:9F:EA:8B:11:F7
Authority key identifier: CF:BB:03:8F:DB:83:86:54:20:49:62:98:0A:D2:21:C9:41:5D:5C:FF
Certificate issuer: /CN=A91F8F9B/serialNumber=CFBB038FDB838654204962980AD221C9415D5CFF
Certificate serial: 019E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft
Manifest number: 0195
Signing time: Sun 11 Oct 2026 04:57:27 +0000
Manifest this update: Sun 11 Oct 2026 04:57:26 +0000
Manifest next update: Sun 18 Oct 2026 04:57:26 +0000
Files and hashes: 1: z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl (hash: wo+NOB0lwfmnQ1eTCL9nUavESEe7jVPSPjA6sGK4lbM=)
2: 7143C5B85DBF11EFB8714857C4F9AE02.roa (hash: Q8f/qW78UATDJkOYAmyqIeNWlz0nJt0VKruL/5wxjAA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl
rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8F9B, serialNumber=CFBB038FDB838654204962980AD221C9415D5CFF
Validity
Not Before: Oct 11 04:57:26 2026 GMT
Not After : Oct 18 04:57:26 2026 GMT
Subject: CN=6acb1737-53a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:9a:b0:23:30:62:13:67:3d:22:2c:7c:5c:
15:6e:2c:49:89:d1:3a:26:a6:a1:d8:69:a9:89:66:
6b:2f:05:c7:e9:3a:27:fd:99:d3:60:6e:84:6d:bd:
61:c2:74:06:7b:88:a0:5f:09:d1:d4:17:47:e6:18:
0b:d3:d5:8c:87:ab:e7:ca:3c:fb:9a:50:ed:61:d5:
3b:ca:31:1f:61:69:c3:26:37:c0:70:dc:09:db:7a:
2e:bc:09:34:ec:b3:ad:43:36:28:b0:c5:61:41:08:
5e:27:f3:8e:b6:9f:4e:8d:02:e9:8d:0d:27:d1:44:
e9:e2:35:ca:b7:8d:f2:ba:a3:ae:2e:1e:5d:ac:03:
37:dc:14:3c:34:b4:e4:45:f9:73:74:53:72:67:e2:
4d:bc:04:f2:c2:70:a4:04:54:e5:25:d5:8a:1d:b5:
78:3f:9b:af:65:e4:52:c0:01:d8:85:54:b5:ed:df:
40:b9:a0:56:e8:20:56:10:f4:ac:94:84:80:3e:25:
57:5a:18:44:ef:19:35:b0:c8:20:fe:0d:c4:04:13:
3b:45:98:2d:08:a0:ab:f0:9e:eb:0b:b2:c4:73:7f:
14:27:1c:c8:eb:24:17:01:01:09:23:a5:2a:ef:cf:
f1:ec:d9:e4:37:cc:da:0e:38:e9:04:87:8b:7b:3a:
17:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:84:C5:5C:CB:A5:6F:68:13:AC:C0:12:4A:25:D9:9F:EA:8B:11:F7
X509v3 Authority Key Identifier:
keyid:CF:BB:03:8F:DB:83:86:54:20:49:62:98:0A:D2:21:C9:41:5D:5C:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:69:76:b6:16:cb:4c:05:d9:6d:ea:9c:79:2c:80:96:5b:4a:
dd:06:2b:02:f0:ed:e0:6d:35:c2:a6:93:56:c6:4b:0f:b3:31:
c7:98:0e:91:5c:75:08:69:9c:7b:71:e7:58:31:d9:8a:df:59:
39:95:af:af:1f:c5:01:a1:b2:a7:09:19:0e:c0:fa:74:8c:cd:
70:f4:58:2c:33:33:94:b9:63:4b:92:86:1f:aa:9f:43:88:e6:
db:aa:af:da:f7:0c:c2:e1:b1:41:a4:8e:5e:47:31:44:d4:5a:
c6:cf:94:6a:4f:f8:4a:bc:53:24:18:31:89:65:b0:f6:63:b7:
c3:ae:14:8d:62:2d:ac:06:95:3a:2c:51:3b:9e:2e:55:92:3d:
ef:77:84:a2:af:7a:39:22:ca:6b:68:ab:75:61:f9:a8:59:8a:
30:c2:43:8f:b2:b6:b9:15:c6:52:b7:cc:1d:4e:9e:62:82:ff:
0b:f3:2f:bf:ef:60:4c:f4:e5:ad:9f:09:d7:47:9c:f2:0b:fb:
61:ca:e0:98:7f:a6:52:1a:3c:58:f4:53:98:7c:7d:80:b3:d2:
9d:b0:23:dd:a3:76:43:97:ed:70:8a:5b:50:ad:f3:1f:1e:65:
ef:7f:66:81:06:20:5c:d7:1d:18:67:56:bc:e3:0f:24:c8:2b:
0c:fc:1b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:10:51 2026 by rpki-client