
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
File: zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft (raw, json)
Hash identifier: 7+GTW0Ats5fSUsQdTTyzQ+z7HWOmk0EEqvPtky2RDk8=
Subject key identifier: 1D:6A:F4:89:AA:AB:E5:88:20:09:B0:54:4A:DB:5F:80:3C:AE:18:68
Authority key identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5
Certificate issuer: /CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5
Certificate serial: 015D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
Manifest number: 0159
Signing time: Wed 07 Oct 2026 05:38:30 +0000
Manifest this update: Wed 07 Oct 2026 05:38:29 +0000
Manifest next update: Wed 14 Oct 2026 05:38:29 +0000
Files and hashes: 1: zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl (hash: LyHJEw3/3Jgdgnai7+k8URldOr/00mv+5cB+1lkaYSo=)
2: F6935C8EB35911EF96C43242C4F9AE02.roa (hash: S9t/+J52VQt2ne9SbBBHigAP25wl7hoUywJOVYVw1Ik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl
rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 05:38:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349 (0x15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD39E, serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5
Validity
Not Before: Oct 7 05:38:29 2026 GMT
Not After : Oct 14 05:38:29 2026 GMT
Subject: CN=6ac5dad6-0790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:cc:7e:ab:3e:c2:61:76:90:d3:cc:42:28:
67:f6:ec:31:b6:79:70:da:f8:a0:3f:cc:51:2b:26:
97:e3:fa:5f:be:c6:76:f2:17:63:5c:ed:df:95:3a:
94:51:27:0e:3e:f7:52:82:39:c5:47:b4:21:72:8b:
a4:0f:c1:41:f4:04:d3:61:58:4b:da:e9:26:b0:c5:
c6:6e:e8:74:13:7f:81:a7:d7:32:45:ba:e0:49:31:
64:18:6d:62:8c:73:dc:77:15:b7:2c:b1:5f:0a:38:
b1:a7:43:08:91:de:72:f2:79:41:2e:15:81:63:c3:
32:43:01:57:69:12:b2:6d:31:09:a4:48:89:5c:1e:
67:3e:d0:e0:66:fa:1d:17:99:89:29:d8:70:60:4a:
8b:b2:6a:7f:6b:c9:c6:cd:57:17:4f:ce:67:47:3d:
f4:85:9f:42:95:42:43:6e:67:48:0d:04:1d:50:25:
b3:6b:8d:6a:2e:20:2a:58:70:1a:ab:31:31:b6:71:
76:3b:02:a5:0a:5d:72:e3:fe:b1:c1:97:33:e6:a6:
4b:5c:e5:af:48:62:81:6b:04:62:2e:f6:89:fa:6c:
d5:10:fb:95:e1:dc:cf:d9:44:b2:3b:cb:3a:31:10:
2f:41:5d:a8:79:13:ba:d3:46:80:f0:1c:60:f8:64:
ef:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6A:F4:89:AA:AB:E5:88:20:09:B0:54:4A:DB:5F:80:3C:AE:18:68
X509v3 Authority Key Identifier:
keyid:CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:b2:a0:7c:01:e4:8c:3c:29:e1:fe:54:6f:54:f4:50:c5:08:
86:03:60:db:34:d5:78:57:ff:b5:cf:5e:14:64:7c:e8:a6:02:
cd:b9:a3:14:d4:2c:6e:07:11:5a:58:44:d4:ed:2e:70:2a:3a:
c6:11:9b:09:ad:3a:74:ad:f9:bb:9b:bc:d2:c3:90:d0:bc:4c:
e2:c7:d4:10:f8:92:c8:b8:e9:cb:47:6a:25:58:cc:60:84:ee:
3b:a3:88:85:45:87:e8:a1:21:34:2c:31:ab:5e:60:3b:88:9b:
35:73:6c:72:fc:81:95:07:82:a9:40:82:34:b3:f8:69:03:62:
5e:c6:37:97:9d:b5:7b:8d:94:b5:3b:20:f3:6d:71:36:1b:68:
4c:e0:ee:c2:ae:45:e7:d4:a2:40:34:bd:b3:7c:dd:8d:b2:77:
04:bf:41:7e:d8:00:12:eb:31:78:98:aa:b2:32:92:33:d9:fb:
1c:f4:e8:f7:e0:42:fd:a5:ad:6f:32:79:cf:7d:87:11:32:8c:
38:40:ba:d2:1c:76:09:8b:53:ea:87:60:e8:70:a2:8e:6b:2d:
dd:3f:e3:5d:e4:79:e7:d0:57:db:18:c5:ce:3f:82:f4:1f:f1:
d8:55:c1:33:52:b2:24:fa:14:20:99:30:ec:c1:2d:d8:4a:7f:
b2:25:d8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:58:37 2026 by rpki-client