
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
File: ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft (raw, json)
Hash identifier: P1ngcFfNJvy6YMGqt4DgioaEeLQRddIJHimhGasadyE=
Subject key identifier: 45:31:20:D4:4D:F6:79:17:0E:B5:45:D9:AE:A2:80:22:36:82:54:13
Authority key identifier: 64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD
Certificate issuer: /CN=A91FF14D/serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD
Certificate serial: C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
Manifest number: BD
Signing time: Sat 19 Sep 2026 06:58:50 +0000
Manifest this update: Sat 19 Sep 2026 06:58:50 +0000
Manifest next update: Sat 26 Sep 2026 06:58:50 +0000
Files and hashes: 1: ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl (hash: C/8EkipRj5Ga8oYdl6hv+sABwfYiAdFyPteI9j8a1P0=)
2: 18F61C18939B11F0820C0E13C4F9AE02.roa (hash: 4erGdBnjkoQaip/prXBFbazFGlYREkwzQKijTls7llo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl
rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF14D, serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD
Validity
Not Before: Sep 19 06:58:50 2026 GMT
Not After : Sep 26 06:58:50 2026 GMT
Subject: CN=6aae32aa-c829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0a:43:24:6d:0d:05:bc:91:ea:e2:4f:9d:e9:
9a:6f:ae:75:ca:cb:f6:f9:c3:bc:ce:e9:f1:83:b6:
41:1c:86:e5:b4:31:b0:d8:3e:3b:09:c3:56:85:d8:
56:ec:96:fc:bc:cc:80:ab:79:d9:66:c6:b8:39:fe:
64:42:e8:20:ca:5f:6f:bb:3b:c4:b8:f8:ef:35:26:
92:f9:1c:9e:f2:ac:24:c6:00:5f:61:a3:75:c1:27:
1e:ee:19:c8:7a:71:2e:51:64:d2:47:70:b3:0f:53:
24:2d:3e:42:4a:bc:c5:5b:95:45:33:e3:29:7a:33:
3c:bb:5b:c8:50:3e:06:7c:da:38:54:8e:c4:fd:9a:
b3:d1:f2:e0:62:f0:62:05:19:ac:c4:32:96:ac:47:
3e:f6:20:aa:b6:54:f6:35:47:12:5a:f7:66:e9:2d:
87:2c:2f:b4:66:c4:9a:3d:d1:1b:c6:77:4c:84:73:
74:86:95:c0:f7:31:4a:67:0b:cf:f5:b6:f2:5b:c9:
04:f3:6b:c7:66:54:dd:b1:a2:da:4b:9b:ac:aa:69:
46:65:b9:b9:43:df:f7:26:63:37:15:11:f6:06:c4:
1c:e1:15:ac:4f:ae:db:59:16:06:3c:26:9b:97:4c:
b0:e7:36:fb:a6:45:19:69:e6:8c:bd:01:b7:c0:f4:
13:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:31:20:D4:4D:F6:79:17:0E:B5:45:D9:AE:A2:80:22:36:82:54:13
X509v3 Authority Key Identifier:
keyid:64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:f9:e0:45:14:e8:0f:00:7a:77:ab:da:1d:e7:61:95:5b:c6:
22:3b:8f:3f:ab:43:44:17:be:47:7b:2d:a1:41:09:9b:4a:e6:
58:fd:65:d0:f0:de:03:4e:61:67:62:5f:d2:a7:ae:c5:b9:7c:
b8:33:8a:b7:f9:26:76:d4:27:b5:91:45:24:35:6d:70:5e:5d:
96:71:ce:68:49:80:4d:7b:24:24:2f:b4:1d:45:b6:05:09:fd:
1e:bf:cd:35:83:7b:e7:c0:c1:5f:97:43:61:5e:b7:c7:7f:3e:
86:94:16:b9:a4:a2:47:cf:e0:bb:6c:bd:7a:64:8e:8e:63:c6:
0f:31:ea:e7:38:ec:25:23:05:48:f5:c7:cb:25:6d:7e:79:3d:
a7:f5:61:46:54:57:c9:4b:05:5f:38:2e:df:7c:b4:8d:e1:46:
7e:89:c7:2b:fe:3a:f1:8a:95:c9:99:ff:b5:d3:8d:51:b6:ba:
27:57:8f:f0:50:fa:54:56:3c:53:69:64:5b:0e:72:53:fe:e4:
ce:11:23:9d:8c:b1:7f:4e:f4:93:0e:fd:0b:ae:d5:39:c2:e4:
1c:1e:63:dc:46:f2:64:cf:54:00:66:b2:6c:13:51:41:bb:68:
f6:20:d5:af:3d:d4:80:e4:b9:2c:4f:8b:d7:6c:72:51:77:1c:
74:bd:57:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 04:16:26 2026 by rpki-client