
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
File: MZfydASVOdoqReLMBqpcyHTmJ28.mft (raw, json)
Hash identifier: sUeGv6ESpE7Ut2/aXnuQTNC5seFOXjtUp030Y2Ps3dc=
Subject key identifier: 2D:9B:0E:27:D3:B2:98:35:96:A5:64:70:31:56:9C:13:16:46:5E:BE
Authority key identifier: 31:97:F2:74:04:95:39:DA:2A:45:E2:CC:06:AA:5C:C8:74:E6:27:6F
Certificate issuer: /CN=A919BF94/serialNumber=3197F274049539DA2A45E2CC06AA5CC874E6276F
Certificate serial: 36
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZfydASVOdoqReLMBqpcyHTmJ28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
Manifest number: 36
Signing time: Wed 23 Sep 2026 08:20:15 +0000
Manifest this update: Wed 23 Sep 2026 08:20:15 +0000
Manifest next update: Wed 30 Sep 2026 08:20:15 +0000
Files and hashes: 1: MZfydASVOdoqReLMBqpcyHTmJ28.crl (hash: 7yIbI9MyEudQnFa4xvM7DQgbu5wYXF9Kv0LntPf0oVE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.crl
rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZfydASVOdoqReLMBqpcyHTmJ28.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:20:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BF94, serialNumber=3197F274049539DA2A45E2CC06AA5CC874E6276F
Validity
Not Before: Sep 23 08:20:15 2026 GMT
Not After : Sep 30 08:20:15 2026 GMT
Subject: CN=6ab38bbf-2095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:46:82:2a:33:06:b6:ce:dd:22:0c:57:1c:6b:
0f:f6:8e:ba:ae:c4:f8:ce:ee:53:58:3c:ec:35:ed:
ba:3b:a1:b1:6f:22:97:76:e2:ec:88:69:19:ab:86:
4c:88:94:d8:d9:4c:a5:64:93:d1:03:1f:b0:85:9d:
14:c3:da:2f:fc:b8:5a:8e:2e:41:9d:ce:13:ce:56:
37:6f:98:46:32:66:27:24:78:d6:dd:dd:b7:13:e7:
9c:39:b7:a8:23:6d:d7:c9:f1:24:6f:0d:52:d0:9f:
8c:af:63:4a:d2:74:af:6a:0c:ac:8b:70:0f:1e:07:
43:7c:38:a0:67:73:90:98:0c:a3:3c:06:fa:29:89:
d9:02:b3:60:1f:75:88:40:25:b7:b2:4b:eb:08:05:
9e:d3:4e:d2:2c:65:f2:23:ac:36:2b:03:a8:ec:88:
41:29:21:4c:ff:4f:bc:e6:c6:1f:61:02:da:de:6d:
a6:15:d4:33:3b:19:d3:94:54:50:73:06:bb:3d:b2:
97:8e:82:c0:ef:41:a6:74:ea:c1:4a:ff:8a:ab:4b:
28:92:df:ac:e0:e7:05:40:62:a4:6d:1f:26:fa:e7:
9f:9d:32:de:18:8d:1d:4d:0e:93:d7:d4:d4:91:d8:
96:12:57:a6:10:fe:ce:17:a9:7b:d4:17:ee:f6:69:
9e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9B:0E:27:D3:B2:98:35:96:A5:64:70:31:56:9C:13:16:46:5E:BE
X509v3 Authority Key Identifier:
keyid:31:97:F2:74:04:95:39:DA:2A:45:E2:CC:06:AA:5C:C8:74:E6:27:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZfydASVOdoqReLMBqpcyHTmJ28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7f:94:10:93:f8:95:7e:8e:ee:70:1c:ff:c2:33:b4:d1:0c:
a5:0f:5c:9b:49:45:df:dd:3d:53:9d:a0:60:b4:6f:96:34:dc:
ed:ba:fa:5d:f5:de:5a:e8:10:45:03:f0:76:dc:b1:1a:96:49:
cc:71:3a:c9:ff:c6:b9:c3:04:dd:16:72:e8:2c:4f:8a:26:21:
4a:a4:3b:10:03:cc:c7:fc:84:a0:a7:67:99:5a:b4:24:01:22:
11:e8:09:61:df:fb:f6:ad:b8:81:51:a8:43:23:b4:31:8c:83:
7e:db:9c:b7:12:1f:2c:24:4b:e0:af:3a:7b:b9:ee:dd:2f:dc:
95:49:17:4b:36:14:8f:06:67:b2:ac:b3:76:48:33:91:29:10:
98:f8:69:1e:b6:e3:3d:f3:c0:18:bb:98:fa:59:59:ca:b1:e9:
58:ca:0c:44:b7:28:ad:2f:8b:93:84:b6:e8:9e:10:a1:f0:7d:
74:9c:8d:e9:b0:a5:de:21:b7:f1:1f:6d:7e:7a:15:83:26:7e:
5a:a9:df:90:74:2a:16:03:2c:aa:2a:17:ef:f9:05:14:67:e8:
62:81:85:9f:29:e7:29:09:80:e0:07:5b:0d:61:88:07:ef:cb:
a5:9c:4c:95:70:31:ac:dc:51:58:70:50:4b:36:95:cf:b8:dd:
6c:dd:32:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:57:27 2026 by rpki-client