
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft
File: ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft (raw, json)
Hash identifier: rzZ4oxkwfwhR9Z3kdPqL0PDa+XalpKL5gBx/HWPNwD8=
Subject key identifier: 59:27:45:B0:B7:3B:58:93:A9:93:24:2D:C5:77:3E:95:49:C3:36:94
Authority key identifier: 64:3B:95:F5:39:D6:69:5B:50:67:9C:BF:B5:73:44:D4:48:1E:9C:0C
Certificate issuer: /CN=A91263DF/serialNumber=643B95F539D6695B50679CBFB57344D4481E9C0C
Certificate serial: 0AC2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft
Manifest number: 0AB9
Signing time: Sat 26 Sep 2026 19:32:27 +0000
Manifest this update: Sat 26 Sep 2026 19:32:26 +0000
Manifest next update: Sat 03 Oct 2026 19:32:26 +0000
Files and hashes: 1: ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl (hash: 5gikJONrGzhastuzAXGLHJC+l6s3XZ5CwzyGJl2MJ0U=)
2: 0D3A9110829911EABD93A72DC4F9AE02.roa (hash: PxOmvDmrB3CEdW6KhDSMOQWoDMH93at+hpnwpbEaqbk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl
rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 19:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2754 (0xac2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91263DF, serialNumber=643B95F539D6695B50679CBFB57344D4481E9C0C
Validity
Not Before: Sep 26 19:32:26 2026 GMT
Not After : Oct 3 19:32:26 2026 GMT
Subject: CN=6ab81dcb-aeff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b7:cd:5d:70:2e:5b:30:16:55:d5:99:76:87:
c5:e3:7f:42:a4:65:93:ac:b6:65:d2:bb:4a:92:f7:
f6:5b:90:83:81:1b:5d:9f:98:65:8b:fd:e8:3b:4d:
e2:46:7d:87:f4:6c:8e:b3:9a:76:71:e3:9f:c0:51:
22:f5:75:f9:c5:c4:68:0b:3d:39:8b:33:7d:7c:85:
71:3b:56:60:f9:71:84:71:e5:66:57:1c:f5:a3:5e:
85:bb:e3:03:e0:89:91:e5:b5:fe:d6:50:82:d4:05:
2e:bd:e7:b1:76:b0:26:6a:1c:6e:35:97:24:65:0e:
91:b7:e3:6a:20:dc:89:e1:ed:0f:0d:49:e8:5f:f6:
59:38:e5:70:43:88:c5:79:f8:1c:25:1c:13:40:1e:
d7:81:43:73:41:f2:54:64:7c:bd:21:57:e7:b4:ce:
c6:1a:81:bb:74:53:b9:90:cc:dc:c5:a1:1d:e8:93:
ac:40:ed:a8:9a:64:5e:34:64:af:c4:4f:29:75:66:
ba:5a:12:6f:01:68:60:33:b7:20:74:d4:e5:9b:33:
0e:ec:ff:fd:d3:be:b6:37:3f:a3:6b:72:93:52:1e:
aa:f1:89:02:9c:61:48:c3:c1:e3:0d:b8:f9:d7:55:
15:e0:ba:4f:9e:9d:63:43:d1:13:94:a8:d0:d1:20:
55:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:27:45:B0:B7:3B:58:93:A9:93:24:2D:C5:77:3E:95:49:C3:36:94
X509v3 Authority Key Identifier:
keyid:64:3B:95:F5:39:D6:69:5B:50:67:9C:BF:B5:73:44:D4:48:1E:9C:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:4f:3f:af:7b:0a:e7:a0:cc:32:12:df:a6:9c:21:46:ba:2f:
76:90:8e:96:22:e3:6e:c9:bb:3d:f4:43:02:f2:9e:20:27:ce:
a7:6a:1a:61:0b:ab:66:f8:f1:0b:93:7f:9e:f7:4d:6a:6f:07:
e5:4e:21:eb:c4:77:ba:a2:f9:e4:a5:45:db:10:b2:02:cc:a2:
e5:18:43:66:bb:ab:25:76:9c:67:10:7e:9c:cc:2f:d8:90:35:
f5:ae:d8:10:b4:fa:fd:dc:7f:5b:1c:2e:ef:cc:73:d4:96:f0:
f4:93:d2:da:55:7f:31:2e:f6:2b:92:07:e9:30:b2:d0:70:30:
6a:2b:ce:24:21:c3:0b:e7:fc:15:28:2f:eb:e6:a6:e6:f7:ab:
30:4d:d5:5b:48:3d:2a:c8:04:49:ff:6b:8c:59:5a:01:26:b4:
f3:ed:d0:c2:44:b6:a4:00:73:63:f9:d6:8a:07:76:9d:ea:5c:
95:60:4b:c2:c9:91:ed:1a:29:2d:d3:f8:7d:46:b7:fc:0d:80:
14:92:63:7a:30:33:51:a5:e6:f5:dd:04:05:93:ac:e0:c0:54:
31:e3:5a:79:73:7b:16:b4:21:4a:f7:22:21:f7:14:aa:d6:72:
5a:6f:26:9f:e5:ba:fc:dd:de:17:43:11:30:01:4e:99:f2:9b:
68:89:fe:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYzREYxMTAvBgNVBAUTKDY0M0I5NUY1MzlENjY5NUI1MDY3OUNCRkI1NzM0NEQ0
NDgxRTlDMEMwHhcNMjYwOTI2MTkzMjI2WhcNMjYxMDAzMTkzMjI2WjAYMRYwFAYD
VQQDEw02YWI4MWRjYi1hZWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnbfNXXAuWzAWVdWZdofF439CpGWTrLZl0rtKkvf2W5CDgRtdn5hli/3oO03i
Rn2H9GyOs5p2ceOfwFEi9XX5xcRoCz05izN9fIVxO1Zg+XGEceVmVxz1o16Fu+MD
4ImR5bX+1lCC1AUuveexdrAmahxuNZckZQ6Rt+NqINyJ4e0PDUnoX/ZZOOVwQ4jF
efgcJRwTQB7XgUNzQfJUZHy9IVfntM7GGoG7dFO5kMzcxaEd6JOsQO2ommReNGSv
xE8pdWa6WhJvAWhgM7cgdNTlmzMO7P/90762Nz+ja3KTUh6q8YkCnGFIw8HjDbj5
11UV4LpPnp1jQ9ETlKjQ0SBVmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFknRbC3
O1iTqZMkLcV3PpVJwzaUMB8GA1UdIwQYMBaAFGQ7lfU51mlbUGecv7VzRNRIHpwM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjNERi8zOTlFRjYwQzgy
OTgxMUVBQjE1MjAwMkRDNEY5QUUwMi9aRHVWOVRuV2FWdFFaNXlfdFhORTFFZ2Vu
QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pEdVY5VG5XYVZ0UVo1eV90WE5FMUVnZW5Bdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NjNERi8zOTlFRjYwQzgyOTgxMUVBQjE1MjAwMkRDNEY5QUUwMi9aRHVWOVRuV2FW
dFFaNXlfdFhORTFFZ2VuQXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcU8/r3sK56DMMhLfppwhRrovdpCOliLjbsm7PfRDAvKeICfOp2oaYQurZvjx
C5N/nvdNam8H5U4h68R3uqL55KVF2xCyAsyi5RhDZrurJXacZxB+nMwv2JA19a7Y
ELT6/dx/Wxwu78xz1Jbw9JPS2lV/MS72K5IH6TCy0HAwaivOJCHDC+f8FSgv6+am
5verME3VW0g9KsgESf9rjFlaASa08+3QwkS2pABzY/nWigd2nepclWBLwsmR7Rop
LdP4fUa3/A2AFJJjejAzUaXm9d0EBZOs4MBUMeNaeXN7FrQhSvciIfcUqtZyWm8m
n+W6/N3eF0MRMAFOmfKbaIn+1g==
-----END CERTIFICATE-----
Generated at Mon Sep 28 16:29:43 2026 by rpki-client