
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft
File: ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft (raw, json)
Hash identifier: Q5YKLg7c22WCC1l6LQsSCrIQJJXCGHZiqQmHj/xKLgI=
Subject key identifier: E0:7D:90:77:30:A8:6F:82:71:3C:B5:51:89:C2:DC:33:7A:29:F7:CB
Authority key identifier: 64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA
Certificate issuer: /CN=A91BF759/serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA
Certificate serial: 0184
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft
Manifest number: 017B
Signing time: Wed 23 Sep 2026 04:31:49 +0000
Manifest this update: Wed 23 Sep 2026 04:31:49 +0000
Manifest next update: Wed 30 Sep 2026 04:31:49 +0000
Files and hashes: 1: ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl (hash: CbLLO64vXCLXY45dAZ0J+kmko3H6vIYchpb6DgmDf9s=)
2: C6EAD83876DA11EFAE91CD1BC4F9AE02.roa (hash: 6akD+UwDKfueaYXdEXgrZmwXHWiP1QAnkJC9vykKrWQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl
rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF759, serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA
Validity
Not Before: Sep 23 04:31:49 2026 GMT
Not After : Sep 30 04:31:49 2026 GMT
Subject: CN=6ab35635-dca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:82:8b:5d:c1:d0:dd:3f:a1:39:ff:00:9e:20:
aa:ef:fd:ce:fd:3a:19:d8:14:60:1e:dc:bc:5b:4e:
e2:c0:3f:0f:fa:93:d6:52:71:1f:23:95:27:f9:b8:
5c:c0:0d:29:12:a7:b0:f6:48:de:b3:83:35:40:e3:
97:46:c9:aa:c9:f3:79:01:a5:c8:ce:d4:82:4b:3c:
c5:b7:2b:d9:6b:2d:df:a0:2b:ba:cd:f5:6d:d0:2d:
48:aa:0d:43:8a:64:c3:2b:21:3d:0d:9c:58:64:03:
08:dd:dc:d4:f2:79:36:8b:1e:58:e0:6c:be:8c:29:
c4:25:f2:db:49:74:75:0a:87:2b:be:77:e2:d3:0e:
e0:4c:48:a8:d4:c0:04:85:2c:3e:7a:5f:93:23:9f:
ed:88:d5:30:8c:c0:8a:56:6d:1a:46:89:7d:5a:73:
8a:d0:7e:77:94:0c:87:70:0d:dd:36:1d:94:1c:35:
99:31:19:85:98:56:05:8d:d4:8b:bb:ac:9d:70:0b:
14:ea:e3:e0:1a:81:b0:16:73:37:fe:73:45:01:16:
06:bb:e8:ab:48:10:64:f3:75:b6:59:f6:13:f6:0a:
ed:dd:fd:2f:fb:cf:2e:78:30:9c:6a:57:e3:bb:71:
87:5c:62:78:1b:68:f7:4f:e1:93:03:de:10:ae:91:
85:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7D:90:77:30:A8:6F:82:71:3C:B5:51:89:C2:DC:33:7A:29:F7:CB
X509v3 Authority Key Identifier:
keyid:64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:48:cb:fe:4f:e6:4d:18:74:9f:ae:c3:cd:92:d0:29:43:63:
2c:49:59:f8:16:b3:1a:66:97:c0:aa:51:bf:0c:62:37:4b:44:
11:e4:c8:79:72:80:91:1b:8c:bb:84:a4:b5:95:8e:73:7f:90:
5e:97:38:16:13:c2:46:16:17:a6:c0:80:dd:aa:b4:b3:28:2f:
d0:f8:7a:ba:f4:df:ef:ed:fb:40:63:a2:fc:d2:98:8b:f1:5e:
b9:6b:6c:67:c9:d6:03:ba:6a:03:ac:36:2f:fd:e5:21:0b:d2:
99:0b:33:cc:f5:fc:2c:e8:18:8f:9e:0f:66:48:47:98:f4:75:
cc:4a:50:9e:8c:65:dd:7a:3f:51:18:20:0d:04:d0:2b:2e:fd:
b0:86:35:a3:45:41:47:36:14:b4:73:a4:c4:98:c1:2e:ad:3f:
63:23:50:eb:e8:35:e2:f4:49:33:85:a6:d4:62:06:20:4c:19:
d4:d4:42:3d:72:56:b6:63:53:ba:92:86:53:4e:f3:06:68:31:
eb:ba:dd:5a:4a:71:26:9d:e2:5e:3b:d8:57:1a:d2:2b:e2:69:
f5:2a:15:a1:28:6c:fc:03:39:42:26:06:3a:cd:16:cf:e3:3b:
12:23:b8:d4:31:24:93:95:84:d7:2f:da:b7:a5:27:0b:7e:7d:
34:77:60:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:55:19 2026 by rpki-client