
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
File: Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft (raw, json)
Hash identifier: m4ddiiY0UfXbBCMXb4+cNESmtZ84sNxu63PJt5p+oVI=
Subject key identifier: F9:75:24:E9:8C:BB:5A:18:6C:F0:99:6A:F7:26:4D:8F:27:01:58:0B
Authority key identifier: 66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74
Certificate issuer: /CN=A911C812/serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574
Certificate serial: 0471
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
Manifest number: 0471
Signing time: Sat 14 Nov 2026 20:12:40 +0000
Manifest this update: Sat 14 Nov 2026 20:12:40 +0000
Manifest next update: Sat 21 Nov 2026 20:12:40 +0000
Files and hashes: 1: Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl (hash: dcD7EbScDha+bShGDGyut/MLOtS5dX8OBPHMCRh6Xak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl
rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1137 (0x471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C812, serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574
Validity
Not Before: Nov 14 20:12:40 2026 GMT
Not After : Nov 21 20:12:40 2026 GMT
Subject: CN=6af8c0b8-a4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a5:25:63:03:71:a4:70:1d:31:b7:8e:da:7e:
c2:9f:62:98:89:af:29:4f:51:5e:33:ce:bf:58:6a:
56:d3:00:68:43:5b:46:d1:fd:dd:e0:fb:8a:7d:03:
87:28:78:8f:43:f4:eb:81:b5:a5:6d:1b:ca:9a:1c:
2b:6e:35:93:2d:7d:cc:f8:1b:ee:3d:d8:f6:2c:ae:
78:01:7f:f6:8a:b0:c8:c9:59:9d:36:c4:2e:f0:45:
c4:4c:04:56:31:f7:1d:49:06:e3:fa:8e:4a:20:c2:
95:50:c4:57:6e:39:8e:15:5e:0a:ad:6f:53:f8:c5:
ac:fa:d2:61:7b:d4:ba:3c:12:05:71:7d:38:36:7b:
9b:f0:55:22:df:db:bd:a8:d8:54:a2:5d:49:43:5e:
f7:b7:f9:4c:0b:25:42:7c:5c:c1:59:92:a7:f0:6f:
a9:32:23:c8:7b:5f:1f:79:f4:04:f8:f9:68:46:da:
47:33:92:7a:5b:af:7b:44:2d:73:4b:8f:22:d8:73:
8b:56:5b:48:08:68:f5:51:d7:6d:a8:74:1f:fe:38:
75:bf:2f:7a:be:cf:2f:d7:39:34:80:f7:5f:81:d8:
06:4d:07:67:dd:6c:a1:ba:be:80:72:49:34:ae:e9:
69:a6:b6:d2:7b:c6:ef:14:e7:e9:d2:75:2f:b5:97:
36:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:75:24:E9:8C:BB:5A:18:6C:F0:99:6A:F7:26:4D:8F:27:01:58:0B
X509v3 Authority Key Identifier:
keyid:66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:a9:67:c5:ee:9c:8a:7a:25:a3:8a:e2:c2:c7:6e:a0:81:35:
ec:70:33:27:65:9b:fc:8b:b1:45:71:8a:94:3c:32:9f:91:cb:
19:06:8c:23:a7:69:36:de:5a:cd:2c:6e:65:23:b2:4a:9d:67:
4d:52:17:5a:e1:11:50:41:02:2d:8e:22:50:9c:f3:4a:bd:2d:
23:2d:ec:aa:3b:e9:4c:cf:43:8e:54:eb:b8:e8:a3:2d:16:6f:
91:42:e1:3d:57:d4:23:c1:84:a3:a5:60:a0:26:cb:82:48:18:
cf:b4:2b:38:d4:54:39:5b:12:6f:1c:69:83:ae:cd:3c:d6:6f:
a4:61:a2:b1:e2:7d:48:01:49:26:fe:f0:a2:d9:f0:6d:1e:f2:
97:64:96:b9:b9:dc:d7:c1:99:99:5d:bc:01:6f:09:1c:ba:de:
98:88:3a:0f:80:35:03:2b:fb:d8:76:f8:65:e6:0f:f3:9b:8b:
ad:7c:30:6f:71:8b:97:28:f9:6c:5f:97:f8:12:f2:53:18:d5:
4e:15:83:f7:4e:b9:a5:95:3c:20:09:22:a7:07:51:be:5b:34:
84:e8:59:53:a2:fa:31:63:70:44:11:04:ae:97:a3:7e:f6:b1:
c2:59:6a:1e:00:a6:76:04:96:aa:a1:fc:c4:99:30:50:bb:4b:
c4:4b:57:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:26:17 2026 by rpki-client