
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
File: zNz_ISpraZpXC0qdF18WI3GDLKU.mft (raw, json)
Hash identifier: QP2fykYvHo+YCNLrk/lA7VOjMZSJGACkeQHHEutGIgI=
Subject key identifier: C5:75:FF:2E:38:F8:07:B8:55:20:51:AF:A7:FC:09:42:1E:65:93:B6
Authority key identifier: CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5
Certificate issuer: /CN=A91BF23F/serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5
Certificate serial: 01A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
Manifest number: 019E
Signing time: Wed 07 Oct 2026 04:44:36 +0000
Manifest this update: Wed 07 Oct 2026 04:44:36 +0000
Manifest next update: Wed 14 Oct 2026 04:44:36 +0000
Files and hashes: 1: zNz_ISpraZpXC0qdF18WI3GDLKU.crl (hash: 9+49fkOChiybpAUZ663QxNDv4KF7f1Vdlh6gTrYferI=)
2: 00606C184A3011EFBC542C18C4F9AE02.roa (hash: 5VZ6JaxYHvz/jnyWG4tULUFalKqQD2n3eSx0z0cU+H8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl
rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 04:44:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423 (0x1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF23F, serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5
Validity
Not Before: Oct 7 04:44:36 2026 GMT
Not After : Oct 14 04:44:36 2026 GMT
Subject: CN=6ac5ce34-bf17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:d8:21:07:ef:cb:e2:9b:58:a3:79:a3:fc:
be:a3:8e:bc:8b:48:05:c6:3c:5e:47:ea:30:19:e3:
ac:63:1d:ba:a5:6b:71:10:5b:a9:ac:8f:75:28:bc:
e2:6a:68:75:ed:ab:e3:78:f2:6d:6f:2f:dc:8b:39:
b3:d2:5c:13:c0:44:b1:92:07:00:33:31:b6:25:be:
4c:41:29:c5:5c:ef:b1:2e:a4:70:6f:6c:6d:b9:70:
10:27:a4:99:51:2a:50:44:62:98:91:aa:a8:42:f5:
3d:4d:5c:28:8a:7c:7f:2c:f3:53:a4:d9:61:b6:fd:
b5:4b:f6:74:50:ab:19:82:64:52:68:8d:7d:0c:5c:
75:23:4a:87:7b:01:7a:ba:13:16:55:d6:9a:81:f1:
fe:6b:0d:8a:86:03:1b:35:2c:10:41:bc:eb:ba:47:
bb:9d:47:56:03:80:6e:f1:b2:7d:9d:75:2f:cc:c4:
64:a6:39:d7:75:92:77:7c:b3:58:4d:f9:a7:8c:09:
11:6b:0d:48:64:36:61:4d:ff:8f:18:3a:b8:e2:63:
59:f2:46:1b:48:74:9c:37:b1:5f:91:e2:b3:64:5a:
d0:b7:c8:2b:1c:64:14:94:ee:7b:91:47:d2:d9:80:
8e:46:fc:58:6b:84:7a:2b:34:64:99:c0:ed:f9:ad:
0e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:75:FF:2E:38:F8:07:B8:55:20:51:AF:A7:FC:09:42:1E:65:93:B6
X509v3 Authority Key Identifier:
keyid:CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:fd:32:44:6b:e5:ae:d0:a2:37:36:31:62:f4:cf:c2:d1:c5:
97:00:eb:ea:ec:03:03:c7:1e:49:c2:7d:86:ca:8b:eb:56:f6:
24:cf:e7:31:6e:c9:fa:2b:7e:64:4f:64:62:d1:9a:26:87:95:
92:0c:30:83:25:a2:14:4a:c0:c9:ce:23:84:a6:82:8a:c0:1e:
ae:83:78:b1:49:e2:b0:0e:15:e1:57:2d:5b:c9:dc:f5:11:97:
fc:67:82:f6:52:ff:d7:9b:82:ba:fc:d9:7a:82:b6:f7:e7:ab:
1d:94:d9:af:56:f3:5d:14:ca:5a:8f:78:da:63:8a:28:cc:a8:
c2:c2:81:b9:24:c3:44:3a:02:44:26:2e:15:66:4d:64:b8:ee:
0c:9d:d6:62:6c:02:07:88:a7:7b:20:1a:65:3b:d0:bd:78:d5:
30:03:8b:40:70:16:95:e1:37:d6:fc:79:3d:5f:59:f1:c7:68:
ec:b3:33:f2:a6:7d:31:54:e3:da:64:33:32:ab:13:c6:04:27:
9b:21:bf:56:77:dd:0e:e1:bc:46:cf:ce:60:d7:7d:7b:4f:11:
42:f1:cc:b8:23:53:ad:4e:b6:a1:42:20:fe:a8:5e:f7:8d:96:
58:5b:4f:05:6e:9c:f7:1f:84:6a:59:10:11:9b:42:a3:57:2b:
f0:22:49:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:49:48 2026 by rpki-client