
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft
File: Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft (raw, json)
Hash identifier: olK74HUDJemy0iDKlyxt/hFaOLarCDM5TnhGnwbJnIY=
Subject key identifier: C0:28:1D:C0:71:55:FF:8F:77:A1:E7:FD:44:2D:5C:37:55:27:9B:44
Authority key identifier: 67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0
Certificate issuer: /CN=A91DA13E/serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0
Certificate serial: 08AB
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft
Manifest number: 089F
Signing time: Tue 22 Sep 2026 20:28:06 +0000
Manifest this update: Tue 22 Sep 2026 20:28:05 +0000
Manifest next update: Tue 29 Sep 2026 20:28:05 +0000
Files and hashes: 1: Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl (hash: kVmmqiWItiLA1DoXkXlF8VaaU4kODK49SQgRIIYPVIs=)
2: 28D471BA06B611EBBBFD6B2CC4F9AE02.roa (hash: 6D7ij53r9ioYBrQpTrEg7bEtxQIHnICUtJjGzqeUXdY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl
rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:28:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2219 (0x8ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA13E, serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0
Validity
Not Before: Sep 22 20:28:05 2026 GMT
Not After : Sep 29 20:28:05 2026 GMT
Subject: CN=6ab2e4d6-f935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:5a:e8:3c:a1:12:c0:f6:2b:07:e3:a2:52:
31:f7:85:36:c4:57:67:2a:cc:be:89:ad:44:d1:c7:
a5:0c:85:6a:d9:0e:cd:0d:13:0b:79:62:c8:33:65:
1f:93:fa:8b:1a:ea:1b:b6:e3:66:42:91:a7:31:ac:
62:3f:2b:6f:e3:9f:73:38:c3:92:51:c2:df:13:37:
59:6a:72:2d:29:59:40:e2:d4:42:bd:93:3e:c0:b0:
16:fc:9b:88:43:af:d3:bc:64:d6:78:16:75:17:08:
7c:2c:c9:bf:4d:15:69:8d:08:57:94:68:48:32:86:
2e:a5:a1:67:92:9e:3b:0b:ff:47:ff:a2:d4:97:11:
ea:18:3c:32:bf:01:e0:d7:aa:32:6c:80:40:17:fe:
7c:73:06:c4:4d:1f:66:c2:86:fd:88:93:bd:e7:a9:
f0:db:a2:53:f0:70:30:30:c1:85:bb:a1:be:e8:a3:
f5:33:92:8e:4f:7c:4b:20:2b:44:53:6e:c0:11:62:
0c:fd:1b:fd:91:d3:10:74:56:1d:15:2c:36:9c:99:
74:dd:10:52:e0:fa:b8:2e:73:36:6f:cd:c7:54:4e:
14:35:df:b6:2a:3b:93:c3:49:78:b8:7a:f6:76:2f:
68:fd:78:9e:8c:77:c0:d2:b2:c1:ef:37:f7:a0:82:
4f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:28:1D:C0:71:55:FF:8F:77:A1:E7:FD:44:2D:5C:37:55:27:9B:44
X509v3 Authority Key Identifier:
keyid:67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:77:91:34:a6:97:2c:ac:2f:70:e7:0e:1c:11:f0:0f:87:e6:
dc:32:b5:2b:67:9e:d1:01:b9:dc:1d:70:17:40:09:73:8b:0f:
b7:6b:77:d6:eb:70:e2:0e:e9:15:ef:1e:cd:fb:d1:ae:40:d5:
51:cd:df:48:5c:d7:3d:25:14:af:f3:52:1c:19:33:1f:6d:6e:
40:cb:9f:7b:f9:89:15:cb:5b:02:fe:e7:8d:82:f9:36:fc:d6:
70:ce:87:d6:12:68:a7:de:00:0f:17:d9:c6:bd:cb:33:9c:5b:
1f:22:b8:f6:3a:a2:2e:dc:3e:04:c0:e4:cd:bd:7c:f9:c8:66:
3c:c2:ff:71:1d:ca:f3:d9:44:2d:af:43:e5:3f:74:8f:75:3d:
e6:a9:62:38:c3:b1:38:50:fe:29:dc:15:be:ab:c5:71:9c:50:
91:24:08:f1:ef:8f:6d:86:04:9a:78:7e:88:2a:22:b2:06:19:
0c:61:31:49:a0:97:57:b2:33:26:00:d5:2e:70:4e:ca:8e:bf:
69:8e:ab:a3:63:93:80:65:6e:19:24:8d:13:91:b7:16:e4:93:
ff:93:39:ad:3e:ad:97:96:cd:f0:0a:23:88:8c:00:57:5d:9a:
64:03:94:7a:66:26:df:aa:db:dd:ae:0b:43:1b:5f:ee:23:b7:
b3:24:c0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:29:48 2026 by rpki-client