
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft
File: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft (raw, json)
Hash identifier: z9fXXpFq/qkBkt4RgNwyUZyp2w/plFg5L+/pWh63N9E=
Subject key identifier: C3:7C:82:91:30:5E:52:A8:38:E9:7E:D7:69:B9:FA:05:87:12:64:C6
Authority key identifier: CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4
Certificate issuer: /CN=A91A4B1A/serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4
Certificate serial: 1F39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft
Manifest number: 1F05
Signing time: Mon 28 Sep 2026 16:03:42 +0000
Manifest this update: Mon 28 Sep 2026 16:03:42 +0000
Manifest next update: Mon 05 Oct 2026 16:03:42 +0000
Files and hashes: 1: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl (hash: odmP0OqyMW5Ahj1zrso7XTDnGVspnV3BxHC4tP6cJl4=)
2: 4A6679EC14DF11EEAB46A86DC4F9AE02.roa (hash: ZF+S9Eq6dimNzHWGXtdSSL8R6tb42i721A8ipARJHDg=)
3: 4CE75372B9DE11EEBC5B0D21C4F9AE02.roa (hash: fuTljzKvBea7sJt2VNckungbhAnkDIYji3I6D462WJ8=)
4: 1DBC9D405DB411EEA017251AC4F9AE02.roa (hash: MORsfRo625k6Z6J+RgEowsAvarYUIEu/pPax0H0xX08=)
5: 4999305414DF11EEAB46A86DC4F9AE02.roa (hash: SP9KLqagmi8apHAQ/A1PSM4jrXC2JUZTS6enHcX0VwU=)
6: 4B52A44814DF11EEAB46A86DC4F9AE02.roa (hash: TptByVGgUQdWR0MavGH9OYmCsbH/nXydqU06KChwsXI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl
rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7993 (0x1f39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B1A, serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4
Validity
Not Before: Sep 28 16:03:42 2026 GMT
Not After : Oct 5 16:03:42 2026 GMT
Subject: CN=6aba8fde-0c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:26:ae:3b:6d:b1:f4:1c:2e:86:ff:2f:b1:
6b:57:9f:d5:19:46:61:6e:a4:2f:ba:6a:30:ec:cc:
a5:30:49:a5:0f:8a:af:24:cd:fb:fb:1b:97:0b:0d:
45:20:a4:46:6b:f1:46:24:3d:44:d7:fa:ed:67:17:
91:b1:c3:f1:3a:f4:4c:0c:f4:5f:86:fa:97:86:37:
1a:62:11:ec:9c:ed:4d:ef:87:da:4a:2f:f5:c2:23:
cf:4f:e6:af:f0:ed:d4:61:c9:cb:84:6d:43:80:dd:
ac:ee:83:ce:a3:3f:fd:89:2a:5d:3a:62:e9:50:db:
4b:20:56:35:41:e5:15:3a:2f:d9:e2:41:1c:29:11:
b7:26:06:e5:57:0c:00:63:d3:5d:cc:9b:f0:ed:d4:
fd:0b:93:99:f0:bb:16:6a:59:77:27:7f:19:77:1c:
10:da:a9:c0:18:06:7f:5c:7a:1e:e1:09:db:7e:f7:
1a:16:db:2a:61:33:9e:af:de:a5:c8:67:56:95:96:
62:b7:b4:6c:68:60:b1:27:cd:43:b3:7f:5a:11:5c:
ec:a8:c9:28:73:fc:2c:20:4c:49:e0:1f:2e:3b:ba:
9e:e8:32:92:85:54:c7:d9:dd:59:67:ec:f7:f6:e1:
e6:a6:8a:81:8c:2a:8e:ca:b7:21:b6:ff:79:0f:2e:
5e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7C:82:91:30:5E:52:A8:38:E9:7E:D7:69:B9:FA:05:87:12:64:C6
X509v3 Authority Key Identifier:
keyid:CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:d6:b7:25:4f:0b:04:66:c0:77:fd:84:c7:4d:5f:bd:83:57:
17:6a:ad:8a:84:96:31:f7:29:24:53:7e:fe:cf:71:dd:54:e4:
8e:ad:f7:95:96:35:1c:a3:5f:09:5c:2a:a0:5c:5c:4d:8f:68:
73:7f:42:b8:37:69:7c:88:b7:c2:7a:f8:24:3c:aa:bb:e3:45:
07:a2:25:69:c2:64:4c:46:db:fe:7b:50:8c:ea:0c:d2:11:0a:
15:d1:9a:4d:97:55:ed:5f:ba:f0:06:62:21:1d:68:69:2d:36:
a9:9f:3f:e7:db:02:ac:21:43:14:26:30:8d:39:2d:3c:75:dd:
58:61:3c:0d:28:a8:e3:7c:f9:14:9b:7b:d4:55:00:56:ea:8c:
1e:c3:7e:2e:31:45:08:9f:69:f5:92:2e:dd:eb:76:2f:35:4e:
f7:2d:9b:3d:97:91:fc:24:86:39:e4:5f:5a:e0:4b:fe:05:7c:
55:4d:eb:92:49:a5:cf:d9:eb:c8:3d:b7:6b:90:b2:59:cb:cb:
6c:ad:8d:44:fc:7b:cf:5a:ec:8f:36:75:86:f0:55:df:16:d8:
b2:1e:a6:8b:a0:b7:35:b6:ea:a7:5f:43:ae:54:ed:74:49:58:
b2:c3:2d:72:44:d6:32:fe:bb:23:ed:3d:de:07:3c:90:8c:ec:
a7:de:4e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:59:30 2026 by rpki-client