
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft
File: zOSbmUXwSWKmmgra2q5KQumgMSc.mft (raw, json)
Hash identifier: GuIUYqUfdBweHtQqtMNMVKmrryY7sOjUrL1xLQeAUOg=
Subject key identifier: 7D:9E:A1:DA:9C:27:85:3B:99:0A:53:AF:2B:B1:7E:D4:3C:5A:B9:21
Authority key identifier: CC:E4:9B:99:45:F0:49:62:A6:9A:0A:DA:DA:AE:4A:42:E9:A0:31:27
Certificate issuer: /CN=A919F893/serialNumber=CCE49B9945F04962A69A0ADADAAE4A42E9A03127
Certificate serial: 02E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft
Manifest number: 02DB
Signing time: Wed 23 Sep 2026 00:54:57 +0000
Manifest this update: Wed 23 Sep 2026 00:54:56 +0000
Manifest next update: Wed 30 Sep 2026 00:54:56 +0000
Files and hashes: 1: zOSbmUXwSWKmmgra2q5KQumgMSc.crl (hash: lkWmHTULUJC9dLzu8e7GDd47gvgvUOc5g95cxX3ud3E=)
2: cFoKUf-OO1L3vErxalG36BKQ_yk.asa (hash: 2RnFp4E1jY7peJxVlhY6oTzUK8l34sdFomXOSS5auc0=)
3: 7126DC005AC911ED8E764545C4F9AE02.roa (hash: 3aiLyzUUZX+G9arlbKmPRJwslFy0TWYcLe4pJnBYkCc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.crl
rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:54:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 739 (0x2e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F893, serialNumber=CCE49B9945F04962A69A0ADADAAE4A42E9A03127
Validity
Not Before: Sep 23 00:54:56 2026 GMT
Not After : Sep 30 00:54:56 2026 GMT
Subject: CN=6ab32361-32e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5c:1e:4e:96:3d:68:3a:13:18:b7:5d:47:fd:
47:eb:b2:3d:29:a0:2b:68:00:83:7e:a3:d9:40:01:
1c:c3:6b:bf:7f:71:2b:51:e2:7a:68:6b:e6:5a:5c:
63:c8:18:37:78:42:ea:b9:40:89:95:c4:b8:57:91:
69:4e:41:92:31:2c:82:84:74:21:8f:1e:88:e6:f8:
ef:f7:6e:5a:1a:92:43:f3:c1:5a:db:59:5f:12:f4:
40:97:28:55:a1:20:ff:b8:21:5c:f1:35:12:29:90:
00:05:8e:e7:0e:8a:a1:c0:07:e1:92:8c:eb:6e:01:
f7:b0:09:86:c2:6a:74:cd:8e:94:e8:96:44:f1:f2:
94:4a:6a:ab:60:9b:c7:b6:ae:fa:cd:07:92:9c:e3:
31:56:f4:e1:67:8c:fb:3c:1e:97:1c:e6:5b:3e:4a:
65:cc:3a:3f:2d:00:80:08:2a:ac:ea:42:5f:7b:46:
f5:51:8a:81:35:43:53:5f:cc:55:7e:cc:06:1d:f5:
51:45:2d:23:60:98:2c:3a:0f:d5:2c:78:df:b1:f7:
56:4d:cc:db:20:6d:63:24:bc:91:d5:62:16:35:c0:
e1:91:88:43:60:0e:47:9e:f1:d1:c0:13:07:9b:ad:
88:63:08:fd:44:f6:61:e1:0c:7a:e8:ce:11:27:c5:
98:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9E:A1:DA:9C:27:85:3B:99:0A:53:AF:2B:B1:7E:D4:3C:5A:B9:21
X509v3 Authority Key Identifier:
keyid:CC:E4:9B:99:45:F0:49:62:A6:9A:0A:DA:DA:AE:4A:42:E9:A0:31:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a5:57:35:64:62:74:f1:0e:98:55:9f:c9:c8:5e:be:5b:41:
b9:90:6a:d0:ce:d9:d4:9d:fa:0a:41:ea:69:57:7f:d5:e7:19:
e9:f9:b3:e5:a6:9b:72:67:50:0d:70:41:4f:00:b9:e5:69:b5:
ec:b9:35:74:4e:02:24:c5:5e:75:cd:38:78:b1:b8:d5:36:4b:
ee:41:85:22:23:82:bb:ca:c5:bf:e2:2e:22:59:a2:2e:f7:95:
e7:41:b2:57:93:d6:6d:38:76:8c:16:d9:52:05:d1:f7:db:62:
b4:b7:ed:3b:a4:3a:d6:da:ba:b0:ff:be:55:9c:c7:6c:28:86:
8f:8c:16:85:30:f4:f6:87:5b:9f:fd:8f:78:69:c5:2b:a0:c2:
f3:13:cb:fd:46:c2:b9:3c:59:a3:be:e9:5b:60:2c:aa:d5:a1:
e5:f3:e3:05:9d:ef:38:31:98:5d:b7:b0:fd:07:74:1c:71:cf:
92:0b:25:a2:b9:f5:46:52:c0:51:47:89:bf:5f:9e:12:54:e5:
54:b5:e5:96:0e:0f:aa:06:61:be:72:d6:72:1f:29:76:d0:12:
f8:89:2d:bf:71:74:80:9d:68:36:4a:6d:6d:f1:53:c4:db:4e:
d6:06:e5:36:07:63:5f:a6:da:d5:51:a8:28:f3:0b:86:b1:7c:
73:a8:40:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:36:19 2026 by rpki-client