
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft
File: pZmI7E1t1bpqMPhmUatWLBimo04.mft (raw, json)
Hash identifier: qxt2FuJ3v384L777nDVPZSxFEp3JaH6lsfUIYHxkrVU=
Subject key identifier: E4:39:1E:20:B5:F7:47:80:63:8F:1D:F8:26:6A:71:3D:4E:81:F9:57
Authority key identifier: A5:99:88:EC:4D:6D:D5:BA:6A:30:F8:66:51:AB:56:2C:18:A6:A3:4E
Certificate issuer: /CN=A9143FF5/serialNumber=A59988EC4D6DD5BA6A30F86651AB562C18A6A34E
Certificate serial: 05D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZmI7E1t1bpqMPhmUatWLBimo04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft
Manifest number: 05CD
Signing time: Thu 24 Sep 2026 22:54:02 +0000
Manifest this update: Thu 24 Sep 2026 22:54:02 +0000
Manifest next update: Thu 01 Oct 2026 22:54:02 +0000
Files and hashes: 1: pZmI7E1t1bpqMPhmUatWLBimo04.crl (hash: lHY4GKaxNH/4ngTDdPQ4KtRYZQ606VbHLG74cmrVVDM=)
2: A027E062300911ECAE581534C4F9AE02.roa (hash: XCRNe+IjMfdiRFsViU2603VxuIrA3a9k3c/heY8WZhA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.crl
rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZmI7E1t1bpqMPhmUatWLBimo04.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 22:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1493 (0x5d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143FF5, serialNumber=A59988EC4D6DD5BA6A30F86651AB562C18A6A34E
Validity
Not Before: Sep 24 22:54:02 2026 GMT
Not After : Oct 1 22:54:02 2026 GMT
Subject: CN=6ab5aa0a-c788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3a:a3:ee:1c:e3:3c:b2:32:9f:70:26:f8:10:
76:d3:37:cf:ae:94:9b:7a:b8:e4:57:2b:70:1e:18:
17:4b:c6:05:d4:e5:12:d3:48:00:e8:5c:03:55:06:
5c:11:1e:41:be:81:cb:80:18:cd:64:ba:a8:68:16:
9c:8a:e0:7a:34:c9:72:f7:c8:3e:03:bb:da:29:cb:
4a:fe:89:e7:20:fb:ff:a5:b8:19:3c:ea:c8:9c:fa:
d6:6d:f1:0c:8e:1f:9e:a7:50:a2:53:1c:7f:85:74:
74:a3:31:16:ce:7b:7d:ab:46:d4:0e:f9:1c:ba:0e:
9b:37:75:eb:1a:7a:63:43:4f:1f:c9:4a:f2:e2:62:
e5:73:23:67:10:da:a8:16:42:7e:c5:be:64:26:60:
63:8e:09:4d:ec:db:99:71:74:e9:b9:fb:20:cc:92:
58:af:35:11:4d:ed:9f:30:bb:a5:16:df:fa:e1:97:
d0:4f:93:55:e3:91:9a:da:b4:73:f5:28:7b:80:55:
46:74:6c:96:70:84:bb:fe:76:ad:16:b5:53:9f:91:
9e:5d:b0:88:81:7b:18:c6:5c:9e:9b:e6:f5:ae:69:
b8:05:ba:7d:79:e6:6e:5f:44:0a:1d:eb:93:34:ca:
16:d7:71:4a:8e:8f:26:ee:a5:a1:4e:54:ff:40:bf:
a0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:39:1E:20:B5:F7:47:80:63:8F:1D:F8:26:6A:71:3D:4E:81:F9:57
X509v3 Authority Key Identifier:
keyid:A5:99:88:EC:4D:6D:D5:BA:6A:30:F8:66:51:AB:56:2C:18:A6:A3:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZmI7E1t1bpqMPhmUatWLBimo04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:4d:82:54:49:5d:bb:15:0f:25:99:f0:3a:44:eb:63:18:56:
52:88:bc:bc:2a:07:d2:39:f1:6e:d4:98:ea:c5:09:42:fe:6b:
28:db:d9:0c:4c:8a:a6:f7:2f:38:da:b1:e5:dd:f6:62:54:67:
2f:20:cc:2f:68:a9:ef:3e:4d:25:19:08:20:d2:80:d4:68:c3:
02:43:eb:fd:9d:58:bb:f1:b0:d7:27:65:6c:4a:93:3b:13:99:
58:fd:8c:13:8e:cc:10:c7:6e:b0:bb:e3:ae:15:de:e8:e7:e0:
f6:5a:8d:dc:83:ab:f6:50:2c:7f:d4:e1:a2:e9:2d:26:12:fd:
84:d2:ad:0c:5b:24:67:95:60:90:90:e1:01:4f:93:cc:39:7d:
2e:2a:93:f7:aa:77:e2:39:c8:54:aa:a1:23:1a:61:7e:2c:6f:
74:b2:6e:ba:81:d5:f0:57:d4:ac:fc:86:ba:e7:c0:56:ae:4a:
05:cf:8e:2e:b5:a5:79:29:af:8b:50:e0:c3:fc:be:b3:4d:08:
e3:11:f5:98:b1:67:2a:15:dc:72:d6:5a:08:4a:8a:16:28:57:
e2:f8:09:9d:43:2e:12:f3:16:26:a5:90:d0:f5:cd:7a:a0:d9:
98:cc:f8:b2:e7:bf:26:9c:67:50:3b:17:1e:e6:95:69:c2:13:
15:66:3c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:14:19 2026 by rpki-client