
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft
File: CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft (raw, json)
Hash identifier: m0KBftAJ6m76hMblMXUm9pg9K+aJ7MMDzgKn9iPGG9o=
Subject key identifier: 83:F0:47:58:59:5F:48:7E:96:3C:ED:8D:0B:B6:44:9B:36:CC:00:E4
Authority key identifier: 09:95:06:EC:98:7C:8B:19:40:58:53:B0:8C:71:8B:5B:BE:4A:C6:92
Certificate issuer: /CN=A9143B0A/serialNumber=099506EC987C8B19405853B08C718B5BBE4AC692
Certificate serial: 0193
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft
Manifest number: 018A
Signing time: Wed 23 Sep 2026 04:21:38 +0000
Manifest this update: Wed 23 Sep 2026 04:21:37 +0000
Manifest next update: Wed 30 Sep 2026 04:21:37 +0000
Files and hashes: 1: CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl (hash: zvxWiEC4FanUmknNq2Y6DpzftA6HQDt6FXYaiV8skT8=)
2: 485B32A8607B11EFB27C6C5DC4F9AE02.roa (hash: RVbj01Du1WKFasCmwg1jqLFxFljVV487kT8U/4ZCdZY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl
rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143B0A, serialNumber=099506EC987C8B19405853B08C718B5BBE4AC692
Validity
Not Before: Sep 23 04:21:37 2026 GMT
Not After : Sep 30 04:21:37 2026 GMT
Subject: CN=6ab353d1-5df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:0e:99:c8:19:d8:23:6f:fd:21:d7:93:4f:
0e:7e:d0:6d:b6:0a:cb:e7:03:9d:d2:0e:d9:83:dc:
5a:6b:e1:c3:af:38:ac:40:da:eb:10:f8:66:b0:fa:
b3:fb:8e:6e:a4:7e:d9:a3:b0:9a:c0:54:f0:b0:50:
5f:52:9c:9f:cc:55:0e:66:1d:a9:04:73:71:2c:5b:
c6:ba:8d:8a:7e:7a:b6:5d:2e:d9:c0:c9:0f:7d:57:
0e:a7:2d:58:27:0f:69:a4:5b:c3:0b:a1:54:45:ba:
eb:00:c0:20:bb:03:1e:1b:99:5a:34:09:5a:33:8d:
20:9f:19:dd:de:16:90:62:df:92:4d:e3:2e:cd:5e:
4c:ff:75:40:ea:f7:e1:f0:6e:1d:00:42:86:79:e6:
b7:68:74:7a:81:6a:be:f6:71:dc:f8:02:ab:e5:f0:
d5:65:45:c7:f2:5a:b0:09:30:03:89:23:6d:17:59:
0a:2f:1e:52:b5:2f:5a:50:2b:75:76:f7:46:37:52:
0c:c2:3a:3f:d2:6b:f2:bf:48:75:25:12:42:8c:7f:
05:ee:b1:73:bf:0b:70:66:bb:43:19:11:26:14:c1:
a1:11:a2:8e:51:22:71:30:a1:00:86:6a:16:fa:ef:
b5:24:bd:19:95:35:0d:d2:d0:dd:89:86:3f:d1:b9:
d4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F0:47:58:59:5F:48:7E:96:3C:ED:8D:0B:B6:44:9B:36:CC:00:E4
X509v3 Authority Key Identifier:
keyid:09:95:06:EC:98:7C:8B:19:40:58:53:B0:8C:71:8B:5B:BE:4A:C6:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:23:fe:f9:d7:27:ae:c1:29:0d:aa:21:0c:d1:40:97:7a:9b:
8c:39:90:1c:fd:97:cd:26:f6:d9:31:98:ae:c3:8f:84:44:dc:
95:19:d4:0d:3d:2b:e8:8a:a3:1c:9f:07:47:25:84:92:3d:1a:
82:b4:75:86:72:b2:71:7c:9e:1f:55:3e:d3:61:5e:2f:49:9a:
86:c3:04:dd:21:e8:75:c9:ef:c4:77:17:5e:d0:8d:b5:69:0b:
8c:e5:45:68:41:4a:b6:33:ec:53:b9:da:b3:4d:44:2d:e2:33:
47:fb:3a:26:20:42:d3:77:3c:bd:c4:4d:69:d0:6e:a9:2f:24:
65:19:a3:6b:ea:59:65:36:6b:84:5f:2c:18:37:a7:3d:90:91:
c5:44:f0:30:3e:7e:6f:25:e7:46:65:43:f9:9b:4f:c0:ba:ab:
d9:ff:cd:5d:7e:8e:a1:d3:39:92:91:73:ed:58:21:b7:12:51:
40:1f:80:21:1f:c9:bb:76:0a:67:8a:20:64:8e:2d:5e:98:df:
18:02:f5:7d:c1:a2:52:24:2a:f4:21:3b:6a:1d:36:00:0b:10:
c2:43:3d:9e:7b:8e:7b:3f:5a:d4:a4:6b:b3:05:9a:2c:f5:4c:
13:48:26:be:69:00:0d:9d:02:b7:2d:5c:50:94:99:b8:89:9c:
3a:10:24:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:19:08 2026 by rpki-client