
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.mft
File: ZLiL9faqm7HpEXZsjfla6A-IBnc.mft (raw, json)
Hash identifier: iC8gQkDyOOdIfW3Fqy7WIKDDPOU0xSfd+3dU17NjdUA=
Subject key identifier: 2F:64:D8:4F:41:5C:5F:1B:D9:63:36:30:6A:40:D6:D3:CA:7F:0F:2A
Authority key identifier: 64:B8:8B:F5:F6:AA:9B:B1:E9:11:76:6C:8D:F9:5A:E8:0F:88:06:77
Certificate issuer: /CN=A91FC19D/serialNumber=64B88BF5F6AA9BB1E911766C8DF95AE80F880677
Certificate serial: 23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLiL9faqm7HpEXZsjfla6A-IBnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.mft
Manifest number: 22
Signing time: Wed 23 Sep 2026 08:36:28 +0000
Manifest this update: Wed 23 Sep 2026 08:36:27 +0000
Manifest next update: Wed 30 Sep 2026 08:36:27 +0000
Files and hashes: 1: ZLiL9faqm7HpEXZsjfla6A-IBnc.crl (hash: CX56S2mJRw0CSmg8rBXifRkOct1YwseS/FZzkCEiBQk=)
2: 2851C57C88FF11F1BFED971F4A11F970.roa (hash: eSRwvGiAt/3oDdwVqUKijtcqc/uEjbLSCEwTPyQp47s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.crl
rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLiL9faqm7HpEXZsjfla6A-IBnc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:36:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC19D, serialNumber=64B88BF5F6AA9BB1E911766C8DF95AE80F880677
Validity
Not Before: Sep 23 08:36:27 2026 GMT
Not After : Sep 30 08:36:27 2026 GMT
Subject: CN=6ab38f8b-4f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:9a:bd:c6:44:2f:cd:58:1b:d5:46:89:76:a6:
b1:db:4a:3f:92:43:7a:40:32:40:18:17:0b:d4:6a:
f8:ec:1c:47:99:95:1e:a7:14:e4:6b:93:f3:fa:7e:
05:a3:56:70:dc:58:66:f0:c8:0c:64:c9:9a:cf:f9:
9c:2c:4a:67:fb:3d:14:ee:a4:83:47:87:18:af:2b:
64:42:93:14:92:56:e6:ad:a3:ba:be:97:82:78:0c:
65:48:2e:56:2c:89:6c:c9:36:70:4c:6b:2f:8c:27:
6c:1d:75:20:99:a9:48:7d:e9:60:04:ca:ef:2d:5e:
5a:4f:0c:13:28:cb:39:29:59:af:c1:1f:81:5a:6d:
91:b9:a5:d9:35:d9:99:95:77:ba:e2:90:43:c3:69:
3a:3c:3f:bb:8f:4b:85:eb:9f:18:3d:ec:38:ac:e7:
ee:55:35:bb:59:67:87:1f:87:06:eb:34:ee:8d:fd:
76:11:03:58:43:4d:db:9c:15:90:3d:a1:2f:67:33:
3b:ca:b5:34:63:ca:b1:c3:e0:86:ea:fd:9a:33:c4:
0e:7e:75:c0:c7:a7:9c:38:b7:8c:99:7f:7f:10:15:
55:bd:3c:2b:75:63:9c:a6:45:e2:21:b3:a8:26:c1:
91:8b:27:62:bd:8a:fa:69:31:29:29:d7:76:81:68:
7c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:64:D8:4F:41:5C:5F:1B:D9:63:36:30:6A:40:D6:D3:CA:7F:0F:2A
X509v3 Authority Key Identifier:
keyid:64:B8:8B:F5:F6:AA:9B:B1:E9:11:76:6C:8D:F9:5A:E8:0F:88:06:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLiL9faqm7HpEXZsjfla6A-IBnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6b:18:fc:0e:7e:ea:57:f8:7f:23:d6:c9:80:73:71:ff:fd:
3f:23:00:7e:39:26:c7:08:9b:e4:c8:97:73:ec:8b:9f:e6:54:
c2:2c:89:fb:70:61:9c:21:85:4d:ca:bd:4a:12:3c:e2:f4:f0:
49:8d:a9:b1:34:c3:71:44:54:49:34:28:0e:47:69:e1:4a:9a:
88:7d:29:69:34:33:65:ba:b6:4a:01:43:ed:df:8f:08:58:77:
b8:f5:5b:26:b9:4c:fd:b2:51:6a:f7:05:44:f4:fc:0b:1a:be:
c6:51:6b:eb:b1:4e:08:13:aa:49:1b:62:b7:55:d9:6d:d3:98:
20:57:f4:c7:59:5a:e9:39:b3:cb:7e:a2:81:90:9a:2b:29:45:
87:21:e3:0e:cb:3c:4e:c0:06:6e:25:58:55:58:e2:c1:79:90:
13:63:f6:0e:cc:46:04:e4:ba:29:ea:ac:78:40:c9:67:5b:66:
17:39:b8:41:8f:4e:b3:ee:fc:e6:66:a6:b6:e5:45:07:db:45:
ce:69:73:4a:b6:aa:7f:2a:85:88:d6:1a:c0:8c:69:e0:87:01:
29:08:c9:2c:3b:7a:d8:bf:a1:70:63:fa:2c:ef:92:f5:e2:04:
5e:65:36:56:e8:d8:27:0b:fa:00:2d:7b:a2:e9:21:d7:06:e4:
e3:b9:46:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:09:40 2026 by rpki-client