
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft
File: zI7F8Y4keEmlxwbphTthhkju8qY.mft (raw, json)
Hash identifier: w43DUfc5sfqYBC3X/WpesAcwVDRKLdHjmpmwuZvIKv4=
Subject key identifier: C8:86:B2:DB:56:B6:7C:5B:47:E9:91:AA:11:86:1F:BB:61:10:5C:FF
Authority key identifier: CC:8E:C5:F1:8E:24:78:49:A5:C7:06:E9:85:3B:61:86:48:EE:F2:A6
Certificate issuer: /CN=A91B8C12/serialNumber=CC8EC5F18E247849A5C706E9853B618648EEF2A6
Certificate serial: 02BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft
Manifest number: 02B4
Signing time: Wed 23 Sep 2026 01:18:16 +0000
Manifest this update: Wed 23 Sep 2026 01:18:15 +0000
Manifest next update: Wed 30 Sep 2026 01:18:15 +0000
Files and hashes: 1: zI7F8Y4keEmlxwbphTthhkju8qY.crl (hash: rY9C13a4rkioWzkwkG9SYLbemZ8mFI4B/+bnu0QLUqw=)
2: F9141F4891AA11EDBEE1242EC4F9AE02.roa (hash: LRMRyi0qfmTYKdZdAepsqYbHljuHFX08sxSWDEzvATE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.crl
rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:18:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 698 (0x2ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8C12, serialNumber=CC8EC5F18E247849A5C706E9853B618648EEF2A6
Validity
Not Before: Sep 23 01:18:15 2026 GMT
Not After : Sep 30 01:18:15 2026 GMT
Subject: CN=6ab328d8-e292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:93:3e:45:c5:33:a3:90:ea:4a:cf:64:3b:
f9:37:a0:9a:b1:0e:ff:18:60:dd:1e:f2:57:e1:7a:
cd:c9:2c:b7:7e:13:36:18:be:bf:44:1f:67:d1:a3:
40:81:fb:ea:55:2b:d6:e1:cd:ee:98:8b:7d:80:4d:
0a:a2:21:da:43:04:96:f6:f7:1d:59:f0:9b:60:f3:
9f:a6:96:a1:5d:35:d9:24:84:fc:bc:55:5f:f0:64:
3f:74:a7:52:2c:56:56:dc:96:58:9f:d3:91:b1:13:
9d:36:e4:85:48:1e:e5:53:fe:a0:35:f7:d3:5f:a8:
00:f8:cc:3a:8c:16:a6:1a:77:b5:53:73:ea:61:e4:
cd:ea:85:20:a7:cf:c0:e8:5d:3a:cc:e5:89:67:0f:
94:da:9f:f2:25:98:75:64:c4:8d:3b:eb:82:3c:cc:
4a:cf:e5:81:f9:04:8f:e4:df:42:1b:36:45:45:d6:
f6:fa:71:30:a1:5d:95:0b:88:57:fa:6f:fb:81:f1:
fa:34:e9:5c:c9:17:50:1d:62:ad:cf:07:c9:a6:fc:
53:48:a7:43:a1:87:a1:2e:67:db:62:f3:2a:2d:1b:
6e:f7:ca:81:6f:24:3a:df:cd:13:a0:08:38:af:2b:
39:21:0c:b7:10:4e:2d:fb:35:1f:dd:54:88:a4:0a:
a0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:86:B2:DB:56:B6:7C:5B:47:E9:91:AA:11:86:1F:BB:61:10:5C:FF
X509v3 Authority Key Identifier:
keyid:CC:8E:C5:F1:8E:24:78:49:A5:C7:06:E9:85:3B:61:86:48:EE:F2:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:02:9b:0a:fa:1f:10:af:8e:d9:f7:29:1e:4d:dd:08:15:0f:
c2:0f:6c:09:13:17:fd:f1:17:06:d9:b3:0b:5b:c9:2b:84:9d:
8f:85:41:14:24:48:54:91:14:dc:27:f6:59:fa:57:84:54:9e:
10:5a:eb:b5:7d:3a:6a:fb:c0:04:0b:40:f6:4f:7d:ca:1e:cb:
47:5a:5d:78:fe:32:75:ec:f9:e8:28:81:d1:33:d6:8e:06:1e:
bd:35:f2:a9:bc:ed:f0:e7:94:6f:70:82:ec:7e:dc:bf:7b:89:
84:18:b2:12:04:4a:e2:3e:58:77:bb:46:ad:16:ee:e4:cf:d4:
79:b3:f4:88:6e:e3:7e:60:36:ac:b8:a2:7f:e8:95:f0:23:b6:
44:aa:ae:b1:f3:84:64:b6:82:8c:0d:7c:f4:79:8b:ca:ac:6e:
09:17:53:00:c8:15:f4:9e:3b:a4:52:e2:e8:85:1f:35:a2:aa:
42:bd:64:46:67:82:61:6a:1b:60:8e:b2:91:b3:c7:b8:c9:1c:
4b:13:8a:53:e5:b2:2d:5c:33:69:a6:cb:88:61:7c:d3:4a:d5:
9c:41:29:db:31:59:ed:c3:f2:fe:31:ab:c4:81:b2:9e:85:86:
e2:4d:ff:f6:c6:d6:26:03:71:f1:6d:05:72:71:9a:3e:b8:a8:
95:0d:bb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:40:41 2026 by rpki-client