
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft
File: zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft (raw, json)
Hash identifier: z3RI+29u9pOzRwCGBQ6AvIlKSgg4P3zs0Qs9fsQvDmo=
Subject key identifier: B1:41:E6:3A:DA:03:65:7E:78:69:50:D5:23:25:02:4D:02:40:0E:4B
Authority key identifier: CD:B4:21:16:23:3B:42:EF:63:25:75:97:D5:6D:12:AB:FF:D6:DE:29
Certificate issuer: /CN=A9173D5E/serialNumber=CDB42116233B42EF63257597D56D12ABFFD6DE29
Certificate serial: 81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft
Manifest number: 7F
Signing time: Thu 01 Oct 2026 09:07:29 +0000
Manifest this update: Thu 01 Oct 2026 09:07:28 +0000
Manifest next update: Thu 08 Oct 2026 09:07:28 +0000
Files and hashes: 1: zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl (hash: os/w3wa+tjgwYbe1bZC3mb030kY0wQSqITTLI4iVq2M=)
2: F7973D44FE6711F0B3245786536F56BC.roa (hash: /9TND/Fy3tWH0r9sdB0hp5hcFJoR57Y+G7/U1zoHag4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl
rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 09:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173D5E, serialNumber=CDB42116233B42EF63257597D56D12ABFFD6DE29
Validity
Not Before: Oct 1 09:07:28 2026 GMT
Not After : Oct 8 09:07:28 2026 GMT
Subject: CN=6abe22d1-4c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e5:52:16:0f:29:af:b5:80:ec:55:e3:8a:30:
3a:33:f8:8c:4f:cc:98:ff:4c:64:52:44:48:1d:91:
56:1f:f2:7a:21:4c:6b:60:29:b7:bb:c8:97:95:1b:
46:e1:88:c6:5f:b0:75:ba:dd:18:f5:6b:29:ef:b0:
2b:57:40:06:b0:45:1f:2f:4f:84:12:e6:fb:d2:60:
54:6f:8f:6c:f7:e3:80:ef:23:0d:cc:76:f6:29:c9:
08:a0:d9:e1:ba:f8:bd:7a:8b:11:37:01:15:c4:c4:
f7:90:8b:73:b6:76:cb:d7:4e:b3:1f:98:73:10:75:
85:86:d2:5a:2a:24:4c:4f:c1:12:f5:82:06:b9:fa:
56:96:63:6b:f8:9e:49:52:3d:66:ca:d2:ba:b2:b8:
48:e0:ea:a3:f5:60:0a:76:e0:30:7d:13:42:bf:b1:
6c:41:8a:4e:3e:4a:fb:3b:85:1d:0d:04:d5:c6:23:
4b:b0:87:04:81:87:ec:8c:3a:c8:0f:d0:37:22:bb:
85:95:37:e7:63:de:a8:eb:da:1e:d7:f7:bb:9b:79:
9c:80:3a:4e:5d:42:cb:b6:1e:69:92:7f:95:cb:ea:
d1:42:1d:0d:43:0a:2a:7f:86:82:fd:51:e0:31:97:
6f:2d:3a:d8:e2:39:ab:9d:d9:3e:16:11:93:da:94:
07:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:41:E6:3A:DA:03:65:7E:78:69:50:D5:23:25:02:4D:02:40:0E:4B
X509v3 Authority Key Identifier:
keyid:CD:B4:21:16:23:3B:42:EF:63:25:75:97:D5:6D:12:AB:FF:D6:DE:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:43:bd:8e:0d:4b:09:9f:39:8e:2e:63:17:f6:a7:33:97:10:
1b:99:5a:49:bc:fb:ad:66:68:77:ea:31:04:ed:7f:c4:07:b8:
58:9f:ec:f3:d6:0e:b6:85:7d:af:23:3d:8b:17:39:74:a3:c3:
68:8a:3d:c0:99:24:58:c8:7e:7c:45:61:81:5d:6f:09:18:3e:
c5:e9:b3:e2:f0:c0:c0:43:36:d6:83:59:7f:71:78:b4:0a:ad:
3e:6e:79:f6:03:a3:0a:b9:02:3e:ae:bf:84:1c:53:f5:87:f0:
44:66:80:30:01:0a:8c:07:9f:f1:f7:b1:40:3d:fa:f9:18:c7:
12:48:fb:2e:d3:8f:ab:b3:9f:e7:4d:14:97:10:bf:bd:6d:35:
95:ca:38:57:bf:66:93:66:d7:96:fc:f8:cb:ee:a3:51:ab:91:
20:99:15:68:44:23:da:15:f0:d1:62:da:22:2d:83:53:d5:47:
5d:66:db:d4:e5:d4:88:f9:1c:c2:c9:5a:ff:11:cf:fa:5c:95:
6e:78:76:2d:d6:c3:bf:c7:06:b7:21:59:da:34:55:6b:03:5a:
f8:34:10:66:45:00:61:b5:de:3a:9f:7a:05:8f:cd:ee:5b:57:
00:2f:8f:31:08:db:aa:c1:04:34:95:ed:9a:37:29:9d:d6:5c:
47:7d:e3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 10:25:24 2026 by rpki-client