
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
File: Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft (raw, json)
Hash identifier: ZsAuuUnFTyhfqjeGkL7LuMG7JxYYhzVGwpvcKfmjZ94=
Subject key identifier: 1E:66:AA:C6:A6:7D:45:26:DE:EF:F0:A8:02:D5:49:57:D0:E7:74:AC
Authority key identifier: 66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74
Certificate issuer: /CN=A911C812/serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574
Certificate serial: 0438
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
Manifest number: 0438
Signing time: Sun 26 Jul 2026 21:03:06 +0000
Manifest this update: Sun 26 Jul 2026 21:03:06 +0000
Manifest next update: Sun 02 Aug 2026 21:03:06 +0000
Files and hashes: 1: Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl (hash: fL0BHqPawaeBHIqME4KpqPKm0/zdr4fngEwKeO1r17I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl
rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 21:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1080 (0x438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C812, serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574
Validity
Not Before: Jul 26 21:03:06 2026 GMT
Not After : Aug 2 21:03:06 2026 GMT
Subject: CN=6a66760a-fbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:ce:c9:b7:be:82:fc:c0:5d:0e:b2:e3:29:
df:f4:96:cb:01:f1:d9:be:50:38:b2:22:33:3e:a7:
9b:84:17:c4:ce:c1:54:e0:36:d8:05:55:03:09:b0:
0b:da:66:88:1e:51:f7:01:ad:be:86:c5:38:e8:9b:
7d:f7:ae:cb:90:55:b3:8b:ae:df:63:aa:ec:7d:34:
ff:d4:4d:0c:5e:31:c4:0a:73:3c:a1:fc:e4:69:58:
6f:a0:2a:fd:db:c8:b3:ec:0e:39:27:6d:3d:f6:b9:
b5:a2:3a:54:e7:0e:01:fe:ad:55:9c:7e:af:50:6e:
19:ac:54:c4:f3:b4:97:91:58:8e:28:d8:89:1e:4e:
c7:82:7b:21:82:ce:2f:1d:14:0e:e6:72:2d:d9:9c:
ef:dd:02:b9:f0:ee:60:8e:a0:2f:48:90:8c:e3:09:
ca:f1:f5:75:86:2c:af:cb:41:25:af:20:3a:80:c2:
fe:3a:e6:81:32:27:10:9f:5e:ad:59:63:00:ee:0c:
d1:60:ed:e9:82:0e:df:70:74:16:9b:0e:e7:96:36:
a4:d9:46:80:8b:a0:09:e5:6b:08:14:db:bc:e0:9b:
dd:4b:e4:8d:b7:d4:90:97:c5:45:4f:36:ce:a6:1b:
bb:01:84:4b:2e:ae:5f:da:45:5b:b9:87:cd:33:0c:
f0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:66:AA:C6:A6:7D:45:26:DE:EF:F0:A8:02:D5:49:57:D0:E7:74:AC
X509v3 Authority Key Identifier:
keyid:66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:7c:f4:ff:4e:82:f4:fb:82:48:0b:f0:65:9a:8b:3b:b1:33:
2f:73:11:2b:d1:0d:2f:e2:0b:a1:53:0a:3b:ed:fd:e6:a1:b1:
6f:1b:07:86:41:a6:bc:97:e0:9c:62:2f:e7:3e:5c:1a:6f:96:
4e:8c:e6:00:d8:37:af:42:ed:e3:95:e4:ed:3a:b0:70:70:f1:
f4:e2:2d:ab:3e:02:d4:bd:27:4b:54:ac:22:c0:74:9f:3b:7d:
31:b5:e2:1c:67:88:79:44:fd:30:6e:62:bf:e8:f3:0e:18:cc:
40:31:a4:36:46:e8:21:52:5e:66:25:1c:5f:5b:f2:c9:93:06:
88:39:c2:a4:ce:27:68:dd:6f:2a:cc:5c:06:a8:a0:95:9f:f8:
0b:5f:04:9a:33:f8:b6:64:c4:ed:1f:13:55:b1:5d:f7:3b:9c:
04:b9:a9:5c:93:a6:a0:e0:9d:cf:91:56:8f:a5:69:46:74:65:
20:64:97:91:b7:55:af:0b:db:5d:be:0a:80:ca:b1:f8:9f:0a:
57:8f:98:9c:02:1c:33:78:ef:3e:82:f6:e4:7e:48:24:16:e7:
86:da:cd:48:d0:82:37:69:76:fd:b8:02:11:95:8d:a1:6c:5c:
92:21:95:08:d8:c6:e1:64:32:8c:15:97:1c:2c:f7:7a:5c:be:
5c:69:46:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM4MTIxMTAvBgNVBAUTKDY2OUZCM0E4Q0EyQTIwRUEzQjgxQTYzQTdGNkRCQjE1
OUZCQkQ1NzQwHhcNMjYwNzI2MjEwMzA2WhcNMjYwODAyMjEwMzA2WjAYMRYwFAYD
VQQDEw02YTY2NzYwYS1mYmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsZ/Oybe+gvzAXQ6y4ynf9JbLAfHZvlA4siIzPqebhBfEzsFU4DbYBVUDCbAL
2maIHlH3Aa2+hsU46Jt9967LkFWzi67fY6rsfTT/1E0MXjHECnM8ofzkaVhvoCr9
28iz7A45J2099rm1ojpU5w4B/q1VnH6vUG4ZrFTE87SXkViOKNiJHk7Hgnshgs4v
HRQO5nIt2Zzv3QK58O5gjqAvSJCM4wnK8fV1hiyvy0ElryA6gML+OuaBMicQn16t
WWMA7gzRYO3pgg7fcHQWmw7nljak2UaAi6AJ5WsIFNu84JvdS+SNt9SQl8VFTzbO
phu7AYRLLq5f2kVbuYfNMwzwKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB5mqsam
fUUm3u/wqALVSVfQ53SsMB8GA1UdIwQYMBaAFGafs6jKKiDqO4GmOn9tuxWfu9V0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzgxMi82QUJDNUIzMkIz
RDExMUVDOTFCRjNDMjJDNEY5QUUwMi9acC16cU1vcUlPbzdnYVk2ZjIyN0ZaLTcx
WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1pwLXpxTW9xSU9vN2dhWTZmMjI3RlotNzFYUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzgxMi82QUJDNUIzMkIzRDExMUVDOTFCRjNDMjJDNEY5QUUwMi9acC16cU1vcUlP
bzdnYVk2ZjIyN0ZaLTcxWFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyXz0/06C9PuCSAvwZZqLO7EzL3MRK9ENL+ILoVMKO+395qGxbxsHhkGmvJfg
nGIv5z5cGm+WTozmANg3r0Lt45Xk7TqwcHDx9OItqz4C1L0nS1SsIsB0nzt9MbXi
HGeIeUT9MG5iv+jzDhjMQDGkNkboIVJeZiUcX1vyyZMGiDnCpM4naN1vKsxcBqig
lZ/4C18EmjP4tmTE7R8TVbFd9zucBLmpXJOmoOCdz5FWj6VpRnRlIGSXkbdVrwvb
Xb4KgMqx+J8KV4+YnAIcM3jvPoL25H5IJBbnhtrNSNCCN2l2/bgCEZWNoWxckiGV
CNjG4WQyjBWXHCz3ely+XGlGOA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:35:01 2026 by rpki-client