
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft
File: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft (raw, json)
Hash identifier: 3RjCdbwNtoS2PZ5KRjds+3Mubn8Tat00cLa/CARK/d8=
Subject key identifier: FE:A7:74:81:42:48:B7:F7:FF:D9:BA:4A:8B:40:35:93:28:5C:B7:9A
Authority key identifier: 64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8
Certificate issuer: /CN=A91F5756/serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft
Manifest number: E4
Signing time: Sun 27 Sep 2026 07:03:54 +0000
Manifest this update: Sun 27 Sep 2026 07:03:54 +0000
Manifest next update: Sun 04 Oct 2026 07:03:54 +0000
Files and hashes: 1: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl (hash: gMKCTd3M2Y6sq30St3oCIJpKq+Ux1dHD5d7YoB5cJhU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl
rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 07:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5756, serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8
Validity
Not Before: Sep 27 07:03:54 2026 GMT
Not After : Oct 4 07:03:54 2026 GMT
Subject: CN=6ab8bfda-91f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:29:1d:96:a0:92:69:16:ad:fb:4d:61:79:6e:
1e:41:86:f7:16:25:c6:bd:3e:f2:ad:7d:30:28:52:
1b:ae:3c:86:97:02:ea:95:d1:23:95:ec:80:ad:42:
11:8d:62:da:cb:2f:1a:7f:09:85:b4:24:0e:b6:77:
84:71:8d:a4:4f:90:c0:0e:14:c3:d1:cc:54:b1:69:
4f:06:93:92:db:d3:1f:cd:fa:22:d8:05:22:9d:0a:
3f:ad:00:f2:45:15:1e:d3:fc:32:f9:a0:25:78:10:
c3:ec:fa:ac:18:ea:7d:1a:d7:bb:80:cc:cd:43:d0:
63:9b:08:b7:33:fe:3b:e4:4e:32:93:22:90:94:d7:
ea:bd:27:30:81:b1:1b:9d:08:61:fb:b3:64:30:99:
01:a8:56:ba:49:09:3b:c6:5c:08:87:2c:63:d3:cc:
3e:77:d5:50:31:18:44:43:0b:2b:c5:6d:52:02:95:
f5:56:4b:9e:68:f1:2c:0a:0f:ce:d7:36:9c:4e:16:
20:67:b9:84:b6:af:27:5f:8b:e2:e8:66:bd:6d:6e:
30:f8:4b:90:19:6c:73:39:b2:48:3d:69:d5:04:35:
16:ef:bf:7f:b6:1c:c3:4f:54:ca:65:1a:28:90:05:
55:c8:08:c3:43:c7:9b:d6:df:08:45:5e:69:aa:08:
94:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A7:74:81:42:48:B7:F7:FF:D9:BA:4A:8B:40:35:93:28:5C:B7:9A
X509v3 Authority Key Identifier:
keyid:64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:c1:e9:eb:4e:10:3e:aa:4b:09:a0:38:53:92:0d:fe:f4:68:
8d:a8:7a:ba:90:14:d7:94:a2:a7:6c:6d:5f:74:28:55:4c:d8:
7c:0f:62:70:65:16:13:a1:e1:3c:7f:1f:65:87:ec:30:cf:08:
ff:64:a8:d6:ec:94:33:07:50:8a:0f:20:3a:2b:e4:3f:34:1f:
24:a1:69:38:f1:e7:54:4b:d2:67:1f:88:7b:e8:58:80:28:8a:
3d:c1:a7:de:5b:92:03:1b:32:40:bc:4a:2f:29:dc:1e:25:37:
a4:f2:cc:a7:70:4b:7d:78:6b:d3:3e:ef:40:fc:99:00:88:63:
3b:f5:5a:8b:bb:3b:90:46:c3:e5:dc:43:23:76:23:a3:b5:c4:
4c:82:61:86:40:e6:60:90:bd:35:a1:d0:0b:de:1e:34:41:cd:
69:2e:31:7a:64:74:9a:e7:34:f5:ac:15:8d:0f:e2:7e:61:f0:
d1:27:d2:96:b2:68:41:8b:c0:9c:e6:ea:9b:14:2a:5f:9f:83:
b1:7e:9f:f1:ee:51:e0:24:b3:23:55:7e:ad:24:57:c9:54:44:
56:af:6c:6d:85:09:7a:81:5a:90:16:55:1d:6d:f7:34:41:95:
e2:c1:50:e3:cf:88:ca:f2:4c:2f:a3:c3:56:6f:cd:05:96:b2:
28:7d:cd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:05:20 2026 by rpki-client