
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B546C/07129CC6A4FA11F19C2349247011F970/Z4uMlpbNfoAxmrwSB6onVOobtik.mft
File: Z4uMlpbNfoAxmrwSB6onVOobtik.mft (raw, json)
Hash identifier: wIv9WBSAfaC6XLHwFwFpvT4gaTvZz9lS9FSJx3t+D8M=
Subject key identifier: BB:4D:7A:7F:39:82:FF:66:99:02:67:1C:59:33:7D:8C:B4:46:2E:F2
Authority key identifier: 67:8B:8C:96:96:CD:7E:80:31:9A:BC:12:07:AA:27:54:EA:1B:B6:29
Certificate issuer: /CN=A91B546C/serialNumber=678B8C9696CD7E80319ABC1207AA2754EA1BB629
Certificate serial: 13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z4uMlpbNfoAxmrwSB6onVOobtik.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B546C/07129CC6A4FA11F19C2349247011F970/Z4uMlpbNfoAxmrwSB6onVOobtik.mft
Manifest number: 10
Signing time: Wed 23 Sep 2026 08:53:08 +0000
Manifest this update: Wed 23 Sep 2026 08:53:08 +0000
Manifest next update: Wed 30 Sep 2026 08:53:08 +0000
Files and hashes: 1: Z4uMlpbNfoAxmrwSB6onVOobtik.crl (hash: lCVNV4vZV9PdkHa2Y6Q0JmNG650u59GtXQF/+z0HuH8=)
2: 1E3BD8A8A4FB11F1837756A17011F970.roa (hash: 6ad3MddjpmzPtpQkxpgYMqyDaN47j/Tz+nm6LoY8luc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B546C/07129CC6A4FA11F19C2349247011F970/Z4uMlpbNfoAxmrwSB6onVOobtik.crl
rsync://rpki.apnic.net/member_repository/A91B546C/07129CC6A4FA11F19C2349247011F970/Z4uMlpbNfoAxmrwSB6onVOobtik.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z4uMlpbNfoAxmrwSB6onVOobtik.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:53:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B546C, serialNumber=678B8C9696CD7E80319ABC1207AA2754EA1BB629
Validity
Not Before: Sep 23 08:53:08 2026 GMT
Not After : Sep 30 08:53:08 2026 GMT
Subject: CN=6ab39374-19e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:33:f0:a3:09:4d:75:c4:30:6e:b9:d4:e4:b3:
04:b6:9c:e8:bd:d2:3a:2e:82:60:fe:57:2e:b0:67:
80:23:d4:44:5e:7d:e6:38:d7:f7:a4:60:47:48:25:
bd:9a:57:ba:c7:5b:5b:dc:b5:f7:0a:87:f2:fc:30:
b7:3c:34:3b:81:b1:76:7c:88:d7:a9:43:c1:21:f5:
d4:0a:1d:7f:38:30:46:aa:cb:b8:65:f2:c0:30:26:
bf:55:bd:84:a1:80:68:bc:7a:56:08:2b:45:c0:4c:
26:2d:01:10:1e:ed:ae:f9:9c:4e:b9:b5:80:ca:b0:
79:ca:4f:bf:c2:5d:9c:25:25:00:73:0f:6b:7b:d8:
c0:46:9a:f4:48:cb:70:49:a7:e5:47:5e:32:cb:e3:
5a:95:60:51:09:a1:7d:d7:d5:14:34:b2:13:14:93:
5e:4f:59:29:76:5d:39:73:2d:f8:2a:42:85:72:e6:
5c:3a:fe:af:7f:07:28:de:32:0c:05:62:6d:40:11:
3c:3d:81:16:03:2f:b5:b3:f8:62:f5:64:53:be:c2:
e4:8d:c3:16:33:b6:f0:bd:bb:54:04:90:7e:d0:27:
7d:d6:2f:db:e7:1d:35:ce:d3:48:a8:63:b3:3b:90:
b8:3b:df:39:35:a1:5c:7c:bd:92:6e:77:52:a9:bd:
48:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4D:7A:7F:39:82:FF:66:99:02:67:1C:59:33:7D:8C:B4:46:2E:F2
X509v3 Authority Key Identifier:
keyid:67:8B:8C:96:96:CD:7E:80:31:9A:BC:12:07:AA:27:54:EA:1B:B6:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B546C/07129CC6A4FA11F19C2349247011F970/Z4uMlpbNfoAxmrwSB6onVOobtik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z4uMlpbNfoAxmrwSB6onVOobtik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B546C/07129CC6A4FA11F19C2349247011F970/Z4uMlpbNfoAxmrwSB6onVOobtik.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:86:da:4f:ed:7b:8a:54:87:f3:49:0c:53:c9:d1:a5:54:c6:
28:40:64:17:ba:4c:65:cf:cf:ad:c8:a1:c7:6e:f6:ba:7a:d1:
98:18:c6:09:a5:80:62:3d:4a:4c:71:4b:93:ac:d5:a2:d6:c4:
b4:95:47:8b:91:8b:79:36:cb:31:ed:44:25:43:32:a0:6c:c2:
84:fa:e1:c5:19:4c:4e:13:38:9a:58:ec:b9:79:a1:04:bc:73:
1f:3b:97:52:b8:32:8d:f0:0e:50:9c:4e:eb:b9:9c:fc:31:11:
0d:e8:6b:5d:f3:1d:4e:3d:14:7d:ae:04:17:31:b4:86:3e:4e:
3b:13:44:26:99:1f:74:9c:82:79:6c:9b:c3:01:79:86:50:54:
53:60:b9:17:8b:7d:6e:6f:4f:3e:45:6f:97:34:f9:3b:0f:ee:
7f:1e:3b:2d:e8:39:b6:77:f6:2e:f4:78:34:ab:0c:a0:46:98:
26:2f:05:c4:26:ad:9f:af:53:85:33:7f:50:e8:d0:5a:96:36:
84:50:bd:97:a8:db:28:71:bd:0d:fa:cf:2d:c7:54:03:40:88:
a9:e6:f3:38:86:2a:8e:a2:d3:bf:29:da:80:52:f3:23:2b:a9:
d6:5b:c5:2a:a6:df:ff:8b:46:47:3b:88:16:05:14:bb:ef:4b:
c7:b5:dc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:09:37 2026 by rpki-client