
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft
File: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft (raw, json)
Hash identifier: eGSqTB15fO4QCy1SalzvgeABqPfjwVAbSM3hrmR8GOY=
Subject key identifier: 82:4D:2C:C5:59:A5:DC:21:13:E4:44:7E:7D:7D:47:EF:B1:72:49:AF
Authority key identifier: 64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5
Certificate issuer: /CN=A91B1E55/serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5
Certificate serial: 0176
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft
Manifest number: 0176
Signing time: Wed 23 Sep 2026 04:32:26 +0000
Manifest this update: Wed 23 Sep 2026 04:32:25 +0000
Manifest next update: Wed 30 Sep 2026 04:32:25 +0000
Files and hashes: 1: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl (hash: ytdhtDytb6nQavC4rHtjfFmNscMuWkPXBSfsKgpn5Zo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl
rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374 (0x176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1E55, serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5
Validity
Not Before: Sep 23 04:32:25 2026 GMT
Not After : Sep 30 04:32:25 2026 GMT
Subject: CN=6ab3565a-e704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:74:42:58:57:53:d9:19:b6:3e:1b:65:b4:df:
2b:f8:8a:1c:31:c3:78:92:5c:cd:4d:2b:5a:d7:0e:
dd:c9:72:ac:80:83:90:11:71:f4:9e:75:c2:99:df:
38:c1:3b:b9:0d:4c:42:70:dd:c9:88:88:9c:17:e0:
af:4a:a3:5b:97:e8:a2:22:d0:78:68:9a:2f:f5:f5:
07:cf:e6:3f:ea:ee:e0:7a:4c:74:d8:45:08:7f:12:
72:6a:51:97:fc:bc:53:07:60:ae:72:cd:f0:f3:53:
ab:b6:37:78:08:d0:3a:88:9c:65:d5:bb:4b:86:63:
92:61:83:71:75:d9:45:8f:d3:18:be:d7:06:2f:38:
8f:17:92:3b:6c:cd:5e:9f:6a:f1:b7:8f:b7:d8:c2:
83:6b:7b:b9:c0:17:66:b6:c8:41:22:99:df:8c:ee:
2a:c1:45:59:1a:99:97:ef:52:02:9e:24:66:3e:38:
dc:70:c5:a8:a4:ef:06:6a:1a:08:67:d7:15:09:1b:
2f:e9:1e:a7:fd:b5:46:0c:14:90:e4:87:29:a1:6e:
86:0b:35:db:a2:49:aa:b4:fe:47:a4:6c:57:2c:ee:
c8:d3:93:94:fa:e7:11:b3:d9:21:50:94:de:bb:f2:
6c:ee:c1:5c:72:6c:6f:17:21:35:80:9b:5b:e6:21:
5e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4D:2C:C5:59:A5:DC:21:13:E4:44:7E:7D:7D:47:EF:B1:72:49:AF
X509v3 Authority Key Identifier:
keyid:64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:01:42:45:45:aa:df:86:6f:4c:a2:10:21:4b:df:b9:b8:5a:
26:11:72:26:02:70:f6:c8:59:1e:48:02:6b:c4:34:e3:07:8d:
d3:27:c9:4b:87:46:93:f0:17:7d:02:7c:39:c0:47:26:34:cc:
bb:9a:e8:d3:e8:99:da:bf:f5:05:c9:a7:a8:d8:c3:13:13:32:
bc:c7:ec:98:b5:5a:e6:8c:e7:bd:cc:aa:3d:92:6d:c9:da:46:
95:f6:63:84:44:81:a6:b5:4a:b1:e9:55:c0:6b:98:63:ad:a1:
d9:c3:a0:c4:48:53:9d:b8:0d:10:2f:44:64:93:40:6c:82:15:
28:01:3d:5f:9e:f5:33:08:85:60:6a:36:18:c5:d7:52:e6:73:
1f:d0:02:01:41:eb:10:c7:8a:90:44:eb:22:51:47:c7:b2:8b:
b4:16:c4:bf:97:8e:fe:a0:95:45:bf:4d:3c:0e:ec:5d:53:91:
31:2c:26:9f:17:df:f1:f9:c0:68:7a:96:e8:24:84:f8:f5:0a:
95:e9:bd:03:ce:02:10:89:0c:cc:6b:d0:3f:41:fd:0e:89:c7:
11:74:c0:0d:05:2d:a9:92:b1:de:bd:9a:a5:5d:3b:17:09:3b:
c7:56:a3:bf:ea:d6:0d:ff:65:1b:3d:49:03:60:e1:d7:1e:0b:
e5:3c:af:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:29:54 2026 by rpki-client