
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
File: zl8rQ5utW-vicqch6qzDj6rdSbQ.mft (raw, json)
Hash identifier: skY87R3Q8XPW/+3l727+iW91lflEucCSPrVi1m1SyQI=
Subject key identifier: B9:41:A7:39:47:B9:6C:99:02:A4:C6:C5:01:B8:62:9A:90:55:F4:B5
Authority key identifier: CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4
Certificate issuer: /CN=A91AB9A1/serialNumber=CE5F2B439BAD5BEBE272A721EAACC38FAADD49B4
Certificate serial: 0751
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
Manifest number: 0751
Signing time: Sat 10 Oct 2026 14:39:53 +0000
Manifest this update: Sat 10 Oct 2026 14:39:52 +0000
Manifest next update: Sat 17 Oct 2026 14:39:52 +0000
Files and hashes: 1: zl8rQ5utW-vicqch6qzDj6rdSbQ.crl (hash: P/A9pD1wu2mHtRxa0M3+xUae5Qz17FnUpkCs3+JIwcc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.crl
rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 14:39:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1873 (0x751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB9A1, serialNumber=CE5F2B439BAD5BEBE272A721EAACC38FAADD49B4
Validity
Not Before: Oct 10 14:39:52 2026 GMT
Not After : Oct 17 14:39:52 2026 GMT
Subject: CN=6aca4e38-5c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:43:e9:bd:98:0d:cc:55:6e:9d:21:f5:b1:44:
4f:cf:58:a9:81:f9:c6:8e:ae:77:fd:7b:12:ac:24:
a0:1a:22:db:25:ab:42:6a:3d:e7:e1:ac:69:19:c1:
99:e4:07:da:2d:11:60:37:59:cb:06:79:f9:57:c1:
80:94:5a:ff:21:1f:55:cc:86:b7:3f:48:5e:61:1a:
76:65:6d:b7:09:c7:e9:86:bb:e3:ca:8e:36:57:54:
d1:36:67:e3:a4:88:e4:f7:77:23:9b:b3:6e:b3:ea:
23:40:8b:88:67:d6:03:da:c1:9e:21:f8:54:b0:b1:
ae:59:85:81:dc:0b:6c:13:26:79:37:9a:f8:35:57:
b2:83:1e:e5:64:94:b8:46:a5:d0:9e:8d:8e:b1:a1:
82:5f:8f:df:5d:9d:5a:e8:de:1d:73:1d:1d:2b:4d:
53:6d:6e:3c:64:a0:2a:ed:9f:05:3c:45:72:05:df:
dc:f3:67:0d:2b:b9:56:8d:4e:c0:87:21:0e:c3:32:
e4:67:24:3c:45:2c:be:31:51:8f:63:34:07:65:20:
3a:4d:08:1b:33:52:ee:ec:be:ac:51:d5:a7:72:0c:
04:62:d8:2f:b7:f4:4c:b1:50:b0:b1:87:e9:7c:b8:
d0:6e:66:e8:2e:00:3a:5a:90:f1:9c:72:a4:10:17:
75:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:41:A7:39:47:B9:6C:99:02:A4:C6:C5:01:B8:62:9A:90:55:F4:B5
X509v3 Authority Key Identifier:
keyid:CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:9c:ea:49:af:1a:49:ee:75:4e:a2:ce:4d:0d:d3:a1:4f:9d:
cf:01:4c:56:3c:50:3b:3d:06:ce:d1:53:70:ac:af:93:90:90:
e6:71:3a:29:6b:21:90:fe:3c:fb:c1:e1:e7:37:55:8d:6e:ac:
6a:78:47:d1:f7:d2:b0:72:6f:d1:48:f2:fe:cd:62:d2:30:31:
6f:4a:55:10:62:d7:81:2e:d1:97:da:1a:dd:ed:ad:b0:46:8e:
51:a8:ce:29:5e:2a:66:b1:e1:9d:a3:e0:cc:ee:6d:bd:35:36:
89:11:0a:68:e9:a3:84:b3:a3:68:05:b3:8e:98:e7:ab:d4:ac:
a5:84:b7:33:94:5e:af:14:95:cd:25:9b:1d:fb:09:9a:60:1e:
87:e6:03:f0:2a:30:5b:53:0c:96:49:a4:59:74:c0:24:44:0d:
76:7a:a9:a4:1a:4d:e0:d6:19:e3:23:21:7c:f0:58:8a:27:64:
91:30:bc:d1:be:14:09:2b:bb:11:b9:a4:f9:56:28:d2:21:e9:
74:5a:51:0c:25:24:27:6b:f7:ef:6c:4b:42:4e:21:e9:e9:b1:
c8:f0:c4:9c:2a:8d:91:87:f0:5f:91:b3:e5:55:36:c3:96:1f:
0e:56:9e:af:64:be:78:6f:4c:8f:52:72:69:ce:1e:4d:28:eb:
19:05:88:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 07:07:59 2026 by rpki-client