
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
File: Z0wMnS3vgzoswljrseBHBsBztgo.mft (raw, json)
Hash identifier: 9XDbmro911iOr3pWKGXXmJSu6VYmsMPrCe/IYaDF3ys=
Subject key identifier: F3:40:DA:65:37:20:30:C2:AB:32:F0:B7:3C:49:E3:45:C8:09:05:82
Authority key identifier: 67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A
Certificate issuer: /CN=A915CBF6/serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
Certificate serial: 0A1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
Manifest number: 0A11
Signing time: Fri 02 Oct 2026 20:00:04 +0000
Manifest this update: Fri 02 Oct 2026 20:00:03 +0000
Manifest next update: Fri 09 Oct 2026 20:00:03 +0000
Files and hashes: 1: Z0wMnS3vgzoswljrseBHBsBztgo.crl (hash: bxoYPO7JuqLTSJ0O++NNfWwxlMOxxlUSpe8kPPnyQ2U=)
2: 026E7E4EA4BE11EA873A5A41C4F9AE02.roa (hash: YWuawBdfKtu6PotchTxSSERmqgfLjDc702+I3DYwK90=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl
rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 20:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2586 (0xa1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CBF6, serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
Validity
Not Before: Oct 2 20:00:03 2026 GMT
Not After : Oct 9 20:00:03 2026 GMT
Subject: CN=6ac00d43-f307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:eb:07:ee:4b:41:32:e8:22:1c:40:9a:86:52:
39:65:ae:14:e6:2d:97:06:3d:4b:42:51:66:a5:27:
49:8f:f4:e9:4a:9b:4c:5b:02:15:86:bf:a6:f8:68:
28:a4:c0:8d:6a:ae:3c:96:32:f5:53:d4:7b:f6:8c:
f4:93:9f:ea:98:0b:f8:ec:80:05:5e:aa:3e:56:bb:
d2:c9:51:50:d0:0a:dc:74:61:a7:60:b9:88:2e:30:
da:de:9f:6a:f5:b8:9c:f0:ed:3d:46:50:f3:a9:db:
d9:46:d0:5a:b5:53:19:d2:be:35:b4:09:dd:45:7c:
0b:40:c8:7a:fc:0c:50:7f:be:12:c0:54:b7:13:ef:
4d:6d:6c:7a:22:48:38:3d:b5:b6:94:c2:ad:7e:c9:
d5:0a:5b:b7:18:e8:84:41:69:20:f5:51:db:31:bf:
65:44:99:bb:a0:e6:72:90:22:9a:1a:ab:74:a2:de:
76:71:bb:91:f0:29:e4:df:3b:2b:5f:de:93:bc:13:
23:bc:79:25:33:ce:59:c4:ce:68:3a:df:86:08:0d:
44:d4:59:06:85:fd:f5:83:d9:e2:20:14:f5:e0:91:
52:14:99:0f:9e:81:72:6b:11:fd:69:b3:8f:87:da:
62:73:26:83:62:6c:9c:ff:93:72:a2:42:09:84:22:
31:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:40:DA:65:37:20:30:C2:AB:32:F0:B7:3C:49:E3:45:C8:09:05:82
X509v3 Authority Key Identifier:
keyid:67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b7:5b:e2:ed:12:10:d8:84:c0:1c:b0:c6:1f:f6:29:3a:0d:
76:c0:0b:bf:96:bb:f9:4c:8e:dd:49:71:8d:d3:4f:08:1d:1b:
8e:6b:65:d6:3e:d9:4d:90:2e:db:4a:c6:23:35:79:e7:d0:a0:
cf:3e:c9:82:50:d6:6e:36:77:0f:ac:2b:d9:aa:96:c8:8a:5d:
83:5c:71:10:3d:61:38:50:b9:07:c6:31:f2:1c:77:bd:e3:a1:
1e:43:48:5f:ba:ae:6d:34:20:ab:1b:31:d8:8f:9d:9e:35:f5:
c9:70:83:83:8f:52:1e:ba:d1:ef:49:97:f4:1b:32:bf:d9:cc:
40:1f:81:a4:68:42:69:fa:4e:5e:88:6d:fa:28:47:70:75:d5:
15:bc:48:49:70:71:50:3f:49:b2:6e:40:da:14:65:60:1e:dd:
08:bb:4b:d9:d3:af:2b:b2:73:6c:17:12:15:22:09:32:c5:6d:
3b:00:5b:9c:60:ac:58:a5:86:60:d0:d7:f1:74:8d:7a:ce:cf:
7a:12:14:32:10:67:e8:9a:98:95:8a:64:28:0a:58:c5:6f:f8:
cb:ce:b1:f2:d1:03:75:46:0f:d7:07:de:8c:ec:58:93:50:1e:
90:a6:e5:c0:7d:ec:88:f7:b7:1a:8d:e1:52:64:09:c4:32:79:
be:8d:7a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:33:11 2026 by rpki-client