
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft
File: zcBVaYflG5M72WLX70WXHLqnosM.mft (raw, json)
Hash identifier: XFHDTgukgqVpaDm0h1T6XCGYdm/xo2QdTo0qukgbo9Q=
Subject key identifier: 53:8A:C3:2B:90:DE:4E:F9:BB:5F:07:E3:AC:73:52:30:A9:1A:F3:7E
Authority key identifier: CD:C0:55:69:87:E5:1B:93:3B:D9:62:D7:EF:45:97:1C:BA:A7:A2:C3
Certificate issuer: /CN=A917D31E/serialNumber=CDC0556987E51B933BD962D7EF45971CBAA7A2C3
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft
Manifest number: B1
Signing time: Sat 03 Oct 2026 07:45:52 +0000
Manifest this update: Sat 03 Oct 2026 07:45:52 +0000
Manifest next update: Sat 10 Oct 2026 07:45:52 +0000
Files and hashes: 1: zcBVaYflG5M72WLX70WXHLqnosM.crl (hash: hDWMgq5rGA/8i5Iz3ZEIgs6CKebTY8BGTZ3RqMdIbsI=)
2: 53D97C4AB6E011F0AE8E6B74C4F9AE02.roa (hash: TiQZcsUf6hmm4Z9q41HFXcSU+c6S5y0lWjoRYfK9XxA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.crl
rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D31E, serialNumber=CDC0556987E51B933BD962D7EF45971CBAA7A2C3
Validity
Not Before: Oct 3 07:45:52 2026 GMT
Not After : Oct 10 07:45:52 2026 GMT
Subject: CN=6ac0b2b0-7747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:97:57:ae:1f:d6:81:ef:73:88:ff:b5:9c:22:
52:8f:99:a3:ad:79:b1:66:22:b5:dd:61:30:04:c2:
61:4d:50:0f:88:c9:82:63:a9:da:60:19:a7:88:ec:
53:59:13:4d:27:60:64:21:b5:1f:f3:3c:d2:57:8a:
62:db:16:1e:16:e1:4e:b3:0d:a4:2b:96:d8:2d:7e:
7f:2a:02:cb:97:fe:b6:7a:6c:99:c5:5e:a7:c1:a8:
b7:f7:3c:25:6a:7b:60:78:0a:0b:13:46:29:b9:ca:
b8:10:62:34:fe:55:76:cb:98:5f:ee:ff:3e:f8:83:
87:fb:bb:56:33:be:98:79:21:3a:00:ed:6e:11:92:
77:81:11:1c:5d:e7:07:04:6b:3a:4e:4e:be:77:dc:
58:5e:5a:73:75:12:c8:db:4d:e2:d7:a1:7d:6a:22:
00:c6:0e:42:cf:3d:7c:d5:59:f5:c0:39:6a:43:3c:
45:7f:e3:78:c5:d3:75:06:57:f3:6c:42:97:fd:cb:
67:0d:c7:ca:10:5c:d4:c0:c9:71:d4:a8:42:55:7c:
b7:8a:fd:19:d8:3a:3e:1d:46:a1:08:c2:23:58:6d:
8b:da:18:ed:1f:06:b7:3f:b6:23:7f:27:28:f5:33:
4e:ec:f2:2f:4b:f7:11:c8:84:a6:61:d2:86:be:9f:
df:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8A:C3:2B:90:DE:4E:F9:BB:5F:07:E3:AC:73:52:30:A9:1A:F3:7E
X509v3 Authority Key Identifier:
keyid:CD:C0:55:69:87:E5:1B:93:3B:D9:62:D7:EF:45:97:1C:BA:A7:A2:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:5a:19:22:83:cf:69:93:7a:bd:27:d3:c8:59:fc:97:9c:f0:
1f:4d:f1:62:a9:8d:7f:94:ca:48:9a:bd:52:b4:75:65:38:f9:
b4:34:b4:66:0d:c0:28:0b:4f:ef:b8:37:32:db:6b:8d:e2:af:
d6:48:2b:e8:43:43:66:db:58:a9:42:e6:ae:60:ad:82:9e:ed:
7a:d8:0b:8e:58:da:e4:8b:f0:52:4c:25:cf:56:2b:cd:34:04:
91:a2:a2:ad:08:7a:0e:9c:8e:4e:71:12:ca:2b:60:d4:73:47:
62:a3:fe:23:02:9c:87:60:ff:e8:5d:84:58:ff:bf:9c:23:2f:
c3:72:21:7f:08:01:00:c6:a2:7e:15:66:c4:af:eb:0d:c4:8d:
6b:53:d8:98:a7:cc:8b:53:b2:ab:b9:40:b6:dd:bb:ea:84:c4:
15:39:5a:f0:48:92:48:87:98:53:7f:e2:ec:8a:40:59:00:1f:
ec:d6:f1:38:f7:ae:b1:3b:13:60:e7:46:fa:ff:a8:70:6f:f7:
e9:a6:b3:e9:38:b4:b5:e7:d1:2e:8d:55:82:ce:48:7a:bd:87:
20:d0:07:85:3a:1e:62:fd:19:3b:3f:30:a5:9e:05:97:67:3d:
bb:4d:74:61:63:4f:ed:ad:28:18:43:d6:ef:96:c2:83:74:c2:
79:b4:ea:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:10:22 2026 by rpki-client