
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
File: ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft (raw, json)
Hash identifier: k/wI4LLdAABFF8yNHFCZAE17RfHbl1XMjfya0rC3i8Y=
Subject key identifier: A0:22:75:A4:DD:11:BC:05:90:87:57:53:81:9B:AB:D3:C0:9A:41:AB
Authority key identifier: 64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44
Certificate issuer: /CN=A914E3F8/serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444
Certificate serial: 09FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
Manifest number: 09F9
Signing time: Tue 22 Sep 2026 19:36:21 +0000
Manifest this update: Tue 22 Sep 2026 19:36:21 +0000
Manifest next update: Tue 29 Sep 2026 19:36:21 +0000
Files and hashes: 1: ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl (hash: TDfyDEXA5HDzKv3bwfmW8GC5ryO3kAT9triOqx4UX7E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl
rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:36:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2554 (0x9fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E3F8, serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444
Validity
Not Before: Sep 22 19:36:21 2026 GMT
Not After : Sep 29 19:36:21 2026 GMT
Subject: CN=6ab2d8b5-380f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c2:3e:32:2f:fa:18:c1:7a:97:5f:2f:93:28:
27:24:69:4e:c0:f1:39:84:c0:51:2c:e9:9e:21:a9:
dc:e6:64:4f:a9:9e:3b:17:40:6d:20:c4:74:6d:bc:
32:53:7f:5d:c5:69:47:82:1d:0b:6f:3a:3a:88:ec:
72:6e:82:45:23:ed:f9:0b:17:71:89:02:ee:58:0f:
73:10:fa:1b:3b:02:47:fe:66:9d:8f:1a:ed:bd:27:
1c:ae:3a:4f:51:76:79:fd:c4:36:34:06:4e:06:ea:
50:25:57:fd:a1:a9:37:08:3b:15:c6:22:0f:39:d2:
55:b0:f3:f5:48:37:ef:60:bb:61:55:ad:7d:de:e5:
c5:e9:e3:ed:4f:0d:b5:3a:bc:44:fc:58:8b:c9:7f:
3b:46:58:b5:c9:15:18:f6:a6:0d:6f:0a:8b:55:d9:
31:f2:04:89:4a:9b:79:35:80:48:53:8c:a6:1d:a1:
c6:63:55:1a:98:f8:b1:04:c2:3a:14:6b:9b:a7:2b:
1d:2e:c0:42:a5:c8:18:f2:9e:ad:b3:c6:cb:f2:ab:
bf:48:4e:17:74:8a:4b:ad:54:c8:a3:e3:9c:15:4e:
12:01:e6:d6:09:e7:b7:17:13:a0:bc:12:0a:54:db:
ca:4a:2c:fe:31:e3:39:5a:77:c9:6c:4a:d4:da:e8:
d8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:22:75:A4:DD:11:BC:05:90:87:57:53:81:9B:AB:D3:C0:9A:41:AB
X509v3 Authority Key Identifier:
keyid:64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:14:88:8b:06:10:fc:58:47:be:97:47:75:25:36:3b:0d:a9:
9d:1a:97:42:35:d1:a1:cd:3a:2f:b0:07:55:84:51:ba:d3:64:
f9:e7:aa:2a:a9:16:29:d2:df:68:3a:5a:68:b9:08:3b:23:7d:
02:cb:4a:e9:cc:d9:6b:e1:53:7e:c6:1a:55:a2:f0:d6:e8:81:
4d:18:8b:a8:e0:a2:f8:3f:57:15:77:dd:21:c4:ee:66:bf:e6:
7e:9e:0e:d3:09:1e:e4:71:95:ed:7a:b5:57:76:83:3d:ed:03:
4f:41:5d:52:a4:38:61:b2:6f:e7:be:37:73:d5:6a:14:14:95:
1d:04:a9:9e:34:cd:93:c9:ce:40:0d:0e:a7:fc:52:39:32:3f:
04:bb:cf:5a:ed:4b:ef:5f:21:3e:aa:cb:80:ec:68:3f:91:08:
ec:e2:e5:4f:1d:7d:fd:fb:76:d3:f0:2a:9d:1a:ca:66:38:80:
6d:c6:69:e5:09:f3:41:ec:24:76:13:86:ed:4a:04:fc:d9:e2:
fe:ab:4f:9e:a2:88:8c:30:54:5c:b9:39:ee:7b:2b:aa:b5:06:
fd:ef:28:34:83:15:08:20:7f:27:af:e1:49:0d:0c:42:62:66:
0f:00:50:97:39:20:77:a6:a1:2d:c4:45:68:ca:e9:f3:3f:ee:
6e:85:89:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:59:46 2026 by rpki-client