
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
File: Z0fEVgFDfWEgWyv7QGfO0i6358E.mft (raw, json)
Hash identifier: gXTGEIrWBKb0d6DjAiyrzIukt3FUTSlH/+vLfindFn4=
Subject key identifier: AE:16:92:3F:8B:11:96:EE:C6:E7:3A:4E:F5:ED:E6:79:33:E7:AA:2E
Authority key identifier: 67:47:C4:56:01:43:7D:61:20:5B:2B:FB:40:67:CE:D2:2E:B7:E7:C1
Certificate issuer: /CN=A914AA99/serialNumber=6747C45601437D61205B2BFB4067CED22EB7E7C1
Certificate serial: A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0fEVgFDfWEgWyv7QGfO0i6358E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
Manifest number: A3
Signing time: Wed 23 Sep 2026 06:59:23 +0000
Manifest this update: Wed 23 Sep 2026 06:59:23 +0000
Manifest next update: Wed 30 Sep 2026 06:59:23 +0000
Files and hashes: 1: Z0fEVgFDfWEgWyv7QGfO0i6358E.crl (hash: a/+1TZb7+RuptT/JjuPgou8WO9VFYydvFaF+XDtscio=)
2: 734D9ACCC2D711F09CE49A22C4F9AE02.roa (hash: oYZWWWudX6hmiWeAE8vtLuoPPfGME7k5YKBNL4ygl9s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.crl
rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0fEVgFDfWEgWyv7QGfO0i6358E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914AA99, serialNumber=6747C45601437D61205B2BFB4067CED22EB7E7C1
Validity
Not Before: Sep 23 06:59:23 2026 GMT
Not After : Sep 30 06:59:23 2026 GMT
Subject: CN=6ab378cb-9980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:04:05:33:b7:02:f4:d6:b2:67:9a:43:43:27:
40:6b:17:32:1f:c4:8e:4e:8d:54:98:20:dd:50:f9:
df:92:ec:76:31:29:c0:f7:c7:70:2f:8c:1b:a6:9f:
de:37:b7:a9:23:3f:e8:11:a9:c7:db:99:be:7b:aa:
4a:94:ba:ea:ba:cd:96:c8:79:bc:47:54:06:c1:d3:
62:75:b3:6f:50:5d:6f:ea:7d:62:a6:96:d2:9b:b4:
39:7e:1b:fd:2e:38:da:70:0a:96:02:9d:fd:b1:61:
27:cc:35:a7:83:a3:69:62:1d:11:70:0c:e0:a1:13:
30:c2:3a:41:19:73:44:0b:d9:96:ff:2b:81:25:16:
28:35:18:7f:c6:4f:49:77:48:64:00:18:09:0c:82:
c3:34:4c:56:af:5b:b9:cd:f1:a5:7c:4a:83:e4:9e:
2a:5b:bd:5d:d7:4d:5b:d3:73:ec:c2:5c:0c:b2:38:
c8:a6:22:7b:d0:f4:57:30:c3:4d:85:8a:12:43:12:
81:b3:81:44:ca:0b:27:fe:7d:d1:ca:4b:91:49:5c:
40:db:df:c6:14:34:8a:37:13:3d:55:04:0d:58:bf:
6a:3e:84:bf:74:09:43:33:5c:fa:73:51:d4:9d:de:
fd:78:86:87:aa:96:1b:64:8b:7f:65:38:80:7e:2f:
0f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:16:92:3F:8B:11:96:EE:C6:E7:3A:4E:F5:ED:E6:79:33:E7:AA:2E
X509v3 Authority Key Identifier:
keyid:67:47:C4:56:01:43:7D:61:20:5B:2B:FB:40:67:CE:D2:2E:B7:E7:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0fEVgFDfWEgWyv7QGfO0i6358E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:65:ce:01:8e:39:3f:b5:e1:2b:96:c2:ba:fc:ed:33:d8:20:
58:4f:3b:20:92:53:7c:2a:6e:4c:c9:ce:70:f8:a8:ae:f9:6b:
b4:44:2f:c3:5e:ee:b8:5d:c3:98:f9:7f:c2:2d:e7:3f:e3:3e:
72:ef:b3:5c:20:75:c7:77:d2:f1:9c:91:dc:d5:5e:1e:c4:84:
81:6f:c6:c5:e3:4b:34:28:3b:ee:3f:b7:45:51:02:43:3f:0a:
06:11:ff:49:f7:45:4b:f9:fe:49:ec:02:5d:90:b5:94:14:ea:
bc:fe:40:f9:d9:16:72:01:44:f7:c3:52:51:c7:0a:65:ff:28:
c4:af:c2:e9:f5:46:04:7c:bc:82:50:a8:10:95:cb:0a:cb:26:
36:e7:6f:b1:42:a5:9c:b6:e5:aa:b4:d1:76:63:02:89:67:24:
d8:94:ee:d4:dc:d9:c1:e4:d8:41:a9:db:67:1b:b7:48:95:60:
6a:27:19:fc:b2:08:8c:d1:7b:b3:c8:2e:de:d5:6e:56:fa:d3:
29:f1:f5:21:65:55:bc:86:d5:21:2c:fc:50:88:2e:a2:c1:2a:
4e:f6:8a:19:61:0a:22:4f:e8:55:9b:f4:1b:a7:08:5f:c1:2b:
c9:b9:67:08:91:9a:eb:3d:b5:b0:b3:3a:24:30:4b:1f:d3:87:
3b:e0:2f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:12:18 2026 by rpki-client