
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
File: RzKsKGdyTfzuirIikX9q8r0Ojz8.mft (raw, json)
Hash identifier: rnnJJT8VNhznv5UeiV2MyI2ha/H29b3sjgW28UNk2ns=
Subject key identifier: 5D:ED:28:B5:CC:3B:63:4F:0D:23:55:DF:70:0F:2D:2A:FF:67:D1:CC
Authority key identifier: 47:32:AC:28:67:72:4D:FC:EE:8A:B2:22:91:7F:6A:F2:BD:0E:8F:3F
Certificate issuer: /CN=A9130915/serialNumber=4732AC2867724DFCEE8AB222917F6AF2BD0E8F3F
Certificate serial: C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
Manifest number: C5
Signing time: Sun 11 Oct 2026 07:25:23 +0000
Manifest this update: Sun 11 Oct 2026 07:25:22 +0000
Manifest next update: Sun 18 Oct 2026 07:25:22 +0000
Files and hashes: 1: RzKsKGdyTfzuirIikX9q8r0Ojz8.crl (hash: AuV1L+2bE2XCL2HTL69JL1eI2rFez7O0K1zgeftokGo=)
2: 80981C2A985211F0B8F76E80C4F9AE02.roa (hash: KZeGyK+XEJU2VjuaLIn3E2fbp7OCAvLZENE4Plyufvk=)
3: QKlY2qk3wyq97mdii7HAvqN6ae4.asa (hash: wPAhVkEsZHfP0Gam9zd2C5xJRpIz9eYqo9PqvM2pW2o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.crl
rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 07:11:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130915, serialNumber=4732AC2867724DFCEE8AB222917F6AF2BD0E8F3F
Validity
Not Before: Oct 11 07:25:22 2026 GMT
Not After : Oct 18 07:25:22 2026 GMT
Subject: CN=6acb39e2-0713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f0:a2:ec:5e:e1:8b:61:5b:36:d4:0a:48:31:
26:b5:2c:9a:b9:80:ab:a1:b4:a1:dc:83:4d:51:5b:
71:5e:85:cb:c0:91:f6:b8:46:f6:76:71:4a:63:ce:
66:0d:3f:14:74:68:98:31:93:c1:b7:5e:1c:52:97:
4e:fd:77:83:09:41:4d:6c:67:62:ad:aa:bf:3b:c1:
5d:b3:0a:8d:6d:19:bf:0a:ab:1f:da:b3:97:cb:ff:
87:dc:50:7a:03:2e:79:80:fc:b1:cf:86:f2:ff:49:
39:f9:96:55:18:fd:d3:3e:c9:1b:30:6b:1c:ff:ce:
41:f2:3f:36:e4:99:a8:ce:55:32:b4:3b:98:05:61:
a1:ea:83:39:b4:e5:01:e5:99:21:96:25:20:e9:32:
85:a7:c4:96:46:0d:71:3b:37:81:71:5a:67:93:2b:
3a:53:cb:cb:db:0a:28:03:45:70:f9:a7:ca:2d:6e:
cf:0b:e1:e4:c1:ce:45:72:4b:70:1f:1c:31:29:5b:
97:a4:7d:de:b1:c6:29:0a:27:5d:c0:15:ab:ba:38:
2a:57:b7:11:e1:0d:9c:6d:0e:05:4a:93:ba:ae:e7:
b9:04:c6:37:28:d5:91:0f:51:4c:92:78:41:92:71:
0a:c3:3d:29:37:48:25:cd:a5:a4:7b:56:26:e7:cc:
19:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:ED:28:B5:CC:3B:63:4F:0D:23:55:DF:70:0F:2D:2A:FF:67:D1:CC
X509v3 Authority Key Identifier:
keyid:47:32:AC:28:67:72:4D:FC:EE:8A:B2:22:91:7F:6A:F2:BD:0E:8F:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:7d:9c:1a:60:f0:bd:23:d1:54:7e:60:6d:44:7f:f9:85:37:
62:fc:e0:cf:fc:d5:1c:cf:f1:15:06:ae:3f:00:b6:d3:0d:c9:
70:72:c5:4d:1c:4f:3e:84:6b:7f:0d:21:f7:c3:66:61:82:46:
6e:72:df:6c:5c:4e:54:a3:53:92:10:90:07:f1:9b:89:fb:31:
fb:e6:8b:ed:b5:1c:0d:ed:21:ac:36:6c:58:0a:29:6c:a0:9f:
00:aa:d8:ec:e8:ff:35:dd:4d:8f:1c:0b:9e:64:bb:a5:b8:99:
44:8e:4d:48:98:06:47:32:7d:af:e1:cd:ac:ae:af:c2:1a:e8:
98:9f:44:1f:5b:92:9c:62:7b:ad:f0:5c:2e:c8:cf:8a:e7:75:
26:51:e2:f2:0d:5b:c2:08:10:95:af:89:34:1e:43:77:2f:e7:
00:77:c1:6a:6f:f8:2d:b4:d4:d0:de:00:74:76:f2:98:46:5e:
d4:9a:f8:6c:2c:03:f5:40:cd:6a:d8:75:51:64:75:16:4e:57:
3d:f7:f4:de:03:e5:29:2e:90:45:32:57:c4:fb:3d:ac:b6:a1:
20:63:84:57:28:07:90:7c:47:7e:c5:26:21:d5:07:90:19:4b:
f3:27:27:b1:10:a8:96:7a:15:82:5a:54:1c:8c:40:1c:74:12:
e3:f9:d5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:14:36 2026 by rpki-client