
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
File: z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft (raw, json)
Hash identifier: vHqWNRooxmo80rGStb/i57avGhaoIhk+k6TfQBRJFzo=
Subject key identifier: 93:B2:C9:AD:17:BC:54:67:7E:7B:29:CB:D2:D4:08:6C:F1:C2:7D:E7
Authority key identifier: CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97
Certificate issuer: /CN=A913CE18/serialNumber=CF9A3F316483A2A794411D59146F9FC564091997
Certificate serial: A1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
Manifest number: 9F
Signing time: Sun 27 Sep 2026 07:48:25 +0000
Manifest this update: Sun 27 Sep 2026 07:48:24 +0000
Manifest next update: Sun 04 Oct 2026 07:48:24 +0000
Files and hashes: 1: z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl (hash: Ujfto+Y469XhOc5iRlO3O5IPQYkrpPWOFlM1344gnzg=)
2: 66FA3E10C68311F0A13F9748C4F9AE02.roa (hash: qhmDYrXSka0BnnAzbzb+vh6r8WiWcCMdpJjXHDEOqUE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl
rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CE18, serialNumber=CF9A3F316483A2A794411D59146F9FC564091997
Validity
Not Before: Sep 27 07:48:24 2026 GMT
Not After : Oct 4 07:48:24 2026 GMT
Subject: CN=6ab8ca49-4d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:ab:e9:e7:6e:e9:f6:5d:5b:47:55:dc:66:
5d:7c:53:c6:24:c5:aa:68:68:a1:66:04:54:02:43:
68:d9:f0:fb:3b:e7:e3:d4:49:ff:c0:00:cf:e0:8b:
9f:a5:55:fc:e4:dd:ee:4b:18:9f:b1:51:e8:5e:44:
43:77:89:e2:6b:25:21:7e:23:da:9f:9c:59:cb:c7:
ae:33:fe:50:b3:d9:92:de:b9:5b:f3:28:0d:da:99:
7f:59:04:cd:c9:67:5d:e6:3c:e6:30:3c:0f:f6:31:
87:ad:7c:4a:43:e8:79:8a:4f:df:4a:31:61:56:76:
5e:dd:73:9b:15:72:7e:79:2a:41:64:64:76:22:58:
c5:16:29:01:44:b9:de:9d:de:48:34:0d:79:24:0e:
e9:87:5a:50:6c:27:39:47:ab:e0:95:38:7c:e7:d0:
9d:c9:97:f1:5f:d0:fe:59:8e:5c:1f:ee:d5:84:50:
f7:9d:ad:91:be:fe:ad:62:da:ab:f7:1c:52:16:72:
bd:43:99:b2:46:d1:40:5e:50:9f:d5:2f:55:e2:6d:
31:36:4c:83:8a:3f:11:76:23:d6:53:d6:8e:0e:ba:
82:55:ae:42:bf:d6:14:20:41:f4:8c:47:fd:05:aa:
65:dd:49:70:b9:16:7f:8b:61:ed:e9:c6:d3:7a:6a:
c8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B2:C9:AD:17:BC:54:67:7E:7B:29:CB:D2:D4:08:6C:F1:C2:7D:E7
X509v3 Authority Key Identifier:
keyid:CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9c:fc:3f:9d:a6:5f:99:43:a1:5a:cd:c5:a7:7f:d4:d9:50:
4d:52:ac:56:22:03:30:9e:64:cf:22:29:3d:74:7b:47:ae:c3:
11:98:b2:12:30:f9:f6:2b:35:57:5f:80:7c:27:e1:e9:68:0f:
ac:e4:03:0b:01:4e:57:bf:d0:68:4b:45:94:48:ae:5d:b7:f0:
bf:37:3a:09:e3:4b:af:86:5a:93:1d:4c:e1:16:d1:c9:b4:96:
fd:d8:12:2c:71:6e:8c:69:a5:4b:22:05:f6:74:ce:15:b6:6a:
60:1c:11:e2:b4:04:c5:c5:40:5e:48:70:88:a0:74:ab:58:c2:
98:15:bf:70:cc:8e:2a:54:16:3e:9b:ee:2b:88:00:95:75:3b:
b6:0a:dc:c0:94:16:17:c8:68:20:b4:83:66:0f:1e:f1:11:93:
b3:8f:2b:a4:ec:fa:57:9c:a3:84:2f:70:fb:07:4e:61:5f:0d:
b7:c3:30:13:dd:ab:74:a8:71:81:eb:81:85:f5:f7:49:61:aa:
30:e2:50:50:71:02:6e:6b:20:c4:02:64:94:2e:a6:f8:ed:fa:
ee:d3:98:13:d4:7f:5a:1c:c4:d0:34:17:78:9a:2e:6e:aa:83:
15:21:1a:55:cd:63:e9:6f:f6:0c:7e:c8:30:35:a0:77:53:d0:
9f:99:86:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 13:08:59 2026 by rpki-client