
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft
File: zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft (raw, json)
Hash identifier: ZIVJa1+nYvXeF2ijtYSh067tzoIRxqwif8Z8FGAUfBQ=
Subject key identifier: 25:A5:72:5D:0B:CD:35:11:E9:E6:21:B7:C8:51:C9:31:BE:F5:AB:B6
Authority key identifier: CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58
Certificate issuer: /CN=A91FA729/serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758
Certificate serial: 182B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft
Manifest number: 181E
Signing time: Mon 26 Oct 2026 16:31:29 +0000
Manifest this update: Mon 26 Oct 2026 16:31:28 +0000
Manifest next update: Mon 02 Nov 2026 16:31:28 +0000
Files and hashes: 1: zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl (hash: S5Tom+WZn4dYb85ieNQLIvkHvbXf8cWNpAUhepmCRUc=)
2: 4A81F344C34111EB855D7C84C4F9AE02.roa (hash: NTZYpBwfz3MFFsFX93cSlvxKSWnC0xJLfEsB3AUxbQ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl
rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6187 (0x182b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA729, serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758
Validity
Not Before: Oct 26 16:31:28 2026 GMT
Not After : Nov 2 16:31:28 2026 GMT
Subject: CN=6adf8061-9f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:b8:55:e0:6f:f0:41:0a:0f:6f:47:2d:14:
15:80:40:02:1f:e1:04:cd:76:3a:44:60:d0:eb:9a:
63:5d:e6:a2:c5:e5:a0:2f:bd:cd:9e:10:02:44:45:
67:a3:75:b5:92:f4:c3:ec:e2:85:78:d8:16:50:f6:
ad:b5:ae:c6:8f:46:ae:c0:6d:64:30:90:8b:be:59:
e8:d8:f4:cb:55:43:59:78:36:cf:81:e6:e5:da:48:
10:86:0a:a9:52:ee:32:0d:e4:15:85:a4:f2:ae:d4:
75:c0:f6:fb:bc:79:be:70:35:3f:16:86:38:a9:de:
12:26:7c:e4:d3:b7:a8:ce:4a:b4:cd:e8:70:ab:1f:
57:8d:30:d0:ad:36:08:7d:a2:97:7d:ce:e3:57:ca:
c3:34:10:1b:c0:20:35:82:94:c1:44:61:4d:99:9b:
3a:05:a0:82:28:e0:5e:0c:1b:f3:38:b8:c6:02:ec:
e0:a7:84:48:95:72:83:48:3a:a8:42:5d:d1:46:6c:
ab:7a:81:46:af:46:a3:86:e4:0b:fc:cc:ad:a4:6b:
00:e6:17:22:2f:f7:e2:48:18:7a:d8:04:6e:2b:d3:
09:27:0d:4f:19:92:4b:6d:b1:24:ac:4a:c0:ee:c9:
a4:01:f5:37:66:53:ca:43:68:68:3d:4f:26:51:c5:
f7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A5:72:5D:0B:CD:35:11:E9:E6:21:B7:C8:51:C9:31:BE:F5:AB:B6
X509v3 Authority Key Identifier:
keyid:CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:c6:0c:b9:e7:d9:e8:9b:bc:6a:3c:bb:5d:33:1d:01:f9:0b:
36:06:f8:69:15:e6:2c:29:be:ee:01:c9:03:83:eb:f7:8c:75:
28:f1:dd:29:fe:c8:11:de:af:68:2c:ea:6a:b6:a8:ce:f4:4a:
a5:81:fb:a1:37:21:d4:88:27:ef:ed:42:6b:61:0c:90:dd:f9:
2b:21:85:32:aa:a9:b3:1e:c2:86:dd:ee:9b:78:28:ee:e3:28:
d0:95:ae:5b:33:3a:2a:de:ea:96:ac:ea:fd:16:b8:e5:b0:6d:
7a:dd:ab:81:a6:bd:f9:00:b2:af:99:55:17:bd:15:7c:80:cd:
90:10:29:01:df:57:37:7d:f0:64:2a:bb:29:30:56:d8:26:28:
5b:ce:79:a9:d6:54:5d:05:31:ef:f1:e0:da:ff:33:98:48:71:
8f:a3:41:3e:dc:46:e3:d4:59:12:1b:96:3b:50:eb:6f:c7:ea:
e8:26:6a:11:ee:73:f0:26:a6:b9:42:da:20:59:f3:91:0b:b1:
7a:c0:1b:61:e7:60:86:eb:7d:6a:ad:8a:46:5e:76:14:01:f0:
bb:39:d8:8e:d3:b3:78:9c:84:77:08:95:ee:3a:ac:f6:f6:85:
7a:2a:da:59:9b:ce:23:fe:d5:c2:c6:50:f5:80:01:86:46:89:
ae:15:10:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:18:34 2026 by rpki-client