
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.mft
File: z8OBRZAZiWAcekIm8uBfuM-SloM.mft (raw, json)
Hash identifier: F4H85+i6erYYM4E3S8B1U4OeoKlOukFrDnfoYUNy544=
Subject key identifier: 86:FF:29:03:40:1B:D6:F3:D5:D6:D3:21:A7:88:37:D7:E5:8A:72:5C
Authority key identifier: CF:C3:81:45:90:19:89:60:1C:7A:42:26:F2:E0:5F:B8:CF:92:96:83
Certificate issuer: /CN=A91629D4/serialNumber=CFC38145901989601C7A4226F2E05FB8CF929683
Certificate serial: 27
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8OBRZAZiWAcekIm8uBfuM-SloM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.mft
Manifest number: 26
Signing time: Wed 23 Sep 2026 08:34:02 +0000
Manifest this update: Wed 23 Sep 2026 08:34:02 +0000
Manifest next update: Wed 30 Sep 2026 08:34:02 +0000
Files and hashes: 1: z8OBRZAZiWAcekIm8uBfuM-SloM.crl (hash: gW1QBvZeoMicVysd38+++edIpa35mchDaVrn1zSG4wg=)
2: C12E80FC84AC11F188069C008EA30FBC.roa (hash: WPKl0RmubRsg2zOYR5o/LCEZKLKwHEqKhd2tRJMYw50=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.crl
rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8OBRZAZiWAcekIm8uBfuM-SloM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:34:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91629D4, serialNumber=CFC38145901989601C7A4226F2E05FB8CF929683
Validity
Not Before: Sep 23 08:34:02 2026 GMT
Not After : Sep 30 08:34:02 2026 GMT
Subject: CN=6ab38efa-959f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ba:ea:77:40:12:1c:24:5d:af:4b:4e:85:11:
57:4a:a2:28:e7:1c:46:0f:1d:f6:e8:ff:31:ef:c5:
dc:8b:a8:c3:25:1d:fd:7c:af:5d:9d:a0:77:b7:49:
16:3a:4a:1d:a3:d0:11:56:da:04:88:83:63:70:fa:
44:e3:7b:60:c0:4b:fd:4f:ac:9f:e8:0c:7c:a7:8c:
da:82:48:b8:8c:d4:a4:1d:ad:16:8d:35:ba:1f:96:
79:18:16:4d:fd:a4:20:7b:92:a6:a5:d0:11:b4:54:
48:08:5d:50:47:1c:ea:cf:7b:24:67:14:fc:58:9d:
c7:87:30:b6:83:7b:16:6a:1b:ed:ea:76:f4:d5:ea:
3a:26:48:4f:d7:ab:81:91:2d:b5:86:d2:f3:98:00:
a4:66:e7:d7:cc:df:8f:88:57:52:55:18:e0:40:4a:
4f:b2:b2:09:f8:19:0d:10:df:a8:2c:cd:00:28:5c:
38:9b:66:94:5f:e2:d4:0d:3c:4b:a1:4e:b1:e9:72:
07:3f:00:b4:4d:80:c3:25:72:41:19:b3:4e:4c:43:
c9:04:63:64:00:8e:5f:32:f9:cb:fa:94:3e:5f:77:
f0:ed:9c:79:83:b9:8b:de:89:b7:26:43:4e:5b:6b:
e6:ee:31:5a:a2:83:68:7e:bd:5e:80:93:a0:ed:b8:
e0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FF:29:03:40:1B:D6:F3:D5:D6:D3:21:A7:88:37:D7:E5:8A:72:5C
X509v3 Authority Key Identifier:
keyid:CF:C3:81:45:90:19:89:60:1C:7A:42:26:F2:E0:5F:B8:CF:92:96:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8OBRZAZiWAcekIm8uBfuM-SloM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:d1:22:db:59:1d:fe:fd:13:1a:ef:cc:4d:3d:3b:86:bb:cf:
76:87:04:57:83:2f:b2:cb:97:23:0a:99:4e:9a:24:82:b1:fc:
c8:00:0d:ed:c4:eb:e6:14:3d:5b:63:0f:02:9e:79:d3:ff:7c:
78:33:a3:72:3e:84:74:aa:1f:00:84:05:66:40:b5:7b:a2:59:
42:9f:75:c2:cc:2c:e4:95:1a:76:b3:6e:90:b3:ae:4a:4f:10:
0a:a4:ba:83:9b:79:38:13:a0:b7:8d:a8:f0:67:d1:8f:dd:ab:
5d:b9:57:9a:a5:e6:4c:32:56:68:b7:91:98:c6:47:ab:56:e3:
6c:89:83:dc:5f:fb:b0:88:c8:ae:f5:cb:67:dd:b6:9b:b6:9c:
85:ff:79:5e:2d:14:da:84:da:2a:fc:42:0a:05:eb:f8:b6:24:
53:51:12:9e:9c:71:8a:2e:eb:08:9b:22:18:1f:81:22:79:ab:
87:02:63:7f:4d:1b:72:57:c4:81:c4:51:a4:d9:f7:58:c7:d8:
86:ea:df:fd:11:01:72:41:b5:6d:be:87:73:d2:34:88:b9:c7:
a8:33:0e:ad:80:7d:73:17:36:77:12:f2:06:dc:cd:f4:0d:a0:
6c:b2:b7:f7:3c:d5:88:e5:6c:aa:40:54:6c:3d:ee:90:fe:3d:
f6:4d:c4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:10:42 2026 by rpki-client