
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
File: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft (raw, json)
Hash identifier: DzCe2EZlUlOTpuK4YOeBYqgweLpCnT05VOGVrEvMIO8=
Subject key identifier: 52:4B:08:D9:E6:0C:62:11:B4:EC:B7:93:46:C4:20:AB:EB:84:34:31
Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
Certificate issuer: /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Certificate serial: 029B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
Manifest number: 027D
Signing time: Wed 23 Sep 2026 01:54:48 +0000
Manifest this update: Wed 23 Sep 2026 01:54:48 +0000
Manifest next update: Wed 30 Sep 2026 01:54:48 +0000
Files and hashes: 1: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl (hash: s106/esCxXZGehxRpSVpfU1t2ksvrLnTGf4BZKU1Nzg=)
2: A90DA1C0C71611EE9465BF5EC4F9AE02.roa (hash: SFEP7Eqv5F0cO8qs2JVVwhMOYY0EYGol0tddMhyiU5s=)
3: C2C37E56153A11EF9E378A14C4F9AE02.roa (hash: dhXNyunI39nD/DT1e9lDchzlVmyAT8bbuHRUT42ciqQ=)
4: 282CA82C023F11EEB716134FC4F9AE02.roa (hash: au5ReoWDIsycs2B6WsFnd/TKCzlPPWNf7r6kfYZw9MY=)
5: 309A0AEC073D11EE94A9410CC4F9AE02.roa (hash: pFDSBEaXQzskq04841VPkdgOexvbY84+Oq7ogG0dvvc=)
6: 9EF724BE2A4911EE81BCF50FC4F9AE02.roa (hash: 0pPo8g6m9fkgC10m1JkoC4zbRTfWIqGtQiM16LFE718=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:54:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667 (0x29b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911710E, serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Validity
Not Before: Sep 23 01:54:48 2026 GMT
Not After : Sep 30 01:54:48 2026 GMT
Subject: CN=6ab33168-3743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ff:6d:57:e4:21:38:a3:2c:28:fd:c3:39:db:
16:e8:0c:f5:ed:f2:b8:67:20:54:9c:0b:8a:11:39:
ff:5e:e8:a2:f3:f6:6c:97:bd:bd:62:24:e7:a8:84:
60:e9:4c:41:03:20:b5:5f:9d:b6:05:da:99:5d:39:
39:0a:ed:b6:44:5a:a8:e4:0e:27:50:57:62:b3:29:
37:0c:45:55:13:73:79:cc:12:7c:84:f6:9f:e9:90:
3f:2b:55:22:00:b4:09:fa:38:9a:28:01:65:37:94:
37:de:eb:6b:5e:b8:33:68:bf:c1:dd:c9:ff:72:ed:
33:67:a5:57:aa:19:41:fa:e9:7f:b8:fc:58:a4:00:
85:ac:30:05:3e:84:50:45:e9:c6:41:14:0a:3a:cc:
5b:e5:0b:db:7b:cf:aa:db:d3:3e:00:9d:79:27:02:
c5:be:b3:9b:95:d6:89:84:a7:b9:09:93:88:83:39:
d7:b6:f7:24:24:cd:78:5d:d3:a8:9f:9e:cb:77:38:
0d:71:ff:76:63:74:13:11:e6:a2:c3:77:09:ad:c2:
9d:b5:9f:af:ed:6b:57:4a:e2:e9:ae:31:ed:7a:47:
ba:aa:84:8f:81:17:34:0c:91:8c:86:22:f3:e2:1d:
cf:e8:00:b1:80:26:bf:c0:7b:53:a3:26:b6:93:85:
2f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4B:08:D9:E6:0C:62:11:B4:EC:B7:93:46:C4:20:AB:EB:84:34:31
X509v3 Authority Key Identifier:
keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:46:22:cc:96:9c:b3:cb:d1:73:e4:17:cc:ec:61:38:9f:b1:
eb:7e:35:7c:2f:e5:a8:e1:a9:ac:84:08:b9:fb:76:06:b7:54:
f7:28:5b:a3:84:a3:f0:f3:cd:00:a6:8b:73:d1:ed:bd:1b:d9:
64:09:21:c2:3a:cc:f6:ab:bb:c0:58:53:a9:1c:64:b0:aa:d3:
ab:07:8d:21:f5:60:14:12:ee:15:8e:e7:1f:dc:a8:bd:ec:69:
9c:97:f7:6a:23:0e:1c:24:5d:20:73:a8:17:3f:82:7d:81:94:
1a:7a:a3:a4:e0:79:cc:d3:80:fb:04:96:6c:d8:69:a3:2f:39:
59:1f:16:98:c4:67:0c:d3:53:f5:b9:30:24:f7:e4:57:80:03:
da:d2:c9:fe:f9:3d:76:89:ed:54:03:e6:f6:c9:bf:bb:a0:34:
5c:0c:4c:10:f9:9c:fc:5f:cd:23:91:a8:d7:23:b8:bc:6a:df:
53:db:fd:15:b5:10:f4:09:6d:05:61:e0:d7:d0:8b:d4:2e:14:
34:03:44:47:85:9a:d8:c5:2f:1e:5f:28:ca:86:36:b0:8d:d4:
3d:77:3f:89:d9:45:e8:b6:d1:b1:b0:ad:76:45:13:fb:55:cf:
51:80:eb:ae:10:1a:2e:ac:6c:af:4d:ab:08:51:87:70:ed:05:
52:84:10:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:07:39 2026 by rpki-client