
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
File: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft (raw, json)
Hash identifier: OmE8Ysr7dj4TGghDekM+b4i6UySwjbpDC6Vuo8fC4TE=
Subject key identifier: 21:9E:0B:4D:DA:0E:B5:A7:68:F1:B3:37:ED:6C:C2:C4:F5:DC:4C:FB
Authority key identifier: CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01
Certificate issuer: /CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801
Certificate serial: 031C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
Manifest number: 0314
Signing time: Fri 25 Sep 2026 00:54:35 +0000
Manifest this update: Fri 25 Sep 2026 00:54:34 +0000
Manifest next update: Fri 02 Oct 2026 00:54:34 +0000
Files and hashes: 1: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl (hash: 1Ii0yk5+vaOxIcPW73p5S/DR1k93OUbdVSfIMY7dXGM=)
2: 71CE3962337511EDAE4C4121C4F9AE02.roa (hash: SrZFCYfwkgEZN+fxU55BuSix1/7qyq8HmlWELE9+odk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl
rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 796 (0x31c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912672E, serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801
Validity
Not Before: Sep 25 00:54:34 2026 GMT
Not After : Oct 2 00:54:34 2026 GMT
Subject: CN=6ab5c64b-4ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3f:5e:0c:46:eb:00:ea:22:76:ee:9f:70:b0:
61:69:53:15:01:bf:b0:e3:ab:8b:88:b8:d4:1f:f1:
4f:c3:71:d7:7f:83:13:cd:d7:30:7a:d9:d8:f4:c0:
01:31:af:2f:c3:74:cf:dc:2d:39:79:5a:8b:2e:4d:
34:11:b6:0a:b4:63:6a:37:b5:e3:6a:75:08:b3:9a:
60:3e:5e:fa:9d:89:e1:db:86:c4:33:e7:00:5f:23:
b7:75:a0:eb:3d:9e:5e:f0:be:91:31:c4:7a:d8:85:
76:f5:34:61:4c:3f:21:5f:2b:82:ad:99:e8:81:b0:
d9:5a:64:89:6b:ad:41:20:34:bf:f4:fd:fd:e9:67:
cf:37:c4:48:13:26:e9:40:45:b5:64:62:e7:4a:16:
bf:71:1e:80:17:71:30:fb:c2:97:48:97:fe:3d:ff:
16:aa:58:33:70:8c:65:51:6c:6d:74:94:ac:6f:77:
77:37:eb:71:a4:19:99:f0:52:a9:c6:fe:70:6d:38:
06:db:2a:4a:42:5e:bf:cd:4f:10:84:3c:ee:ad:0c:
4b:6a:9c:f6:b7:e2:45:bb:2c:d4:bc:a3:6d:00:be:
8a:12:6f:40:e7:46:e6:bd:fa:88:70:28:d8:69:bd:
e4:6a:f2:de:0e:47:14:90:37:2f:f4:74:6b:49:ee:
6c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9E:0B:4D:DA:0E:B5:A7:68:F1:B3:37:ED:6C:C2:C4:F5:DC:4C:FB
X509v3 Authority Key Identifier:
keyid:CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:19:35:96:0c:d4:2f:8d:4a:1e:14:7d:7e:72:88:13:f7:71:
46:1d:71:34:9f:d7:64:8c:08:f2:31:f9:e2:f2:70:b4:a1:47:
69:6c:24:ce:61:28:50:da:ef:de:64:22:78:14:7f:08:1e:da:
ab:4b:d2:cd:bb:a9:99:f4:cc:ee:a0:3a:d8:82:ef:d3:67:65:
93:99:52:d4:3d:23:e6:29:d5:e6:65:4a:04:2e:d6:67:6c:3d:
22:a4:61:8a:be:4b:1d:5c:c5:c5:ba:f7:d5:1d:b1:5c:81:ea:
f0:b8:1d:eb:1b:04:2f:04:df:1d:90:3c:f8:5c:29:d5:0b:15:
28:c3:bf:b4:cb:35:d9:db:4b:6f:8d:39:c8:8d:50:30:19:78:
dd:2e:80:b2:f5:e6:2c:18:04:3e:7b:d0:d7:0d:96:70:1b:2e:
4a:2a:81:38:93:8f:a6:13:d7:3f:90:a5:dc:d3:fb:25:59:d7:
da:1a:12:2c:fc:c4:1d:c7:1a:34:b7:01:f5:cf:f2:ac:d1:cb:
9c:16:ce:c9:5f:a3:26:a4:9c:7d:82:54:94:18:35:03:2f:92:
d4:42:92:3f:a5:29:39:d2:41:2e:fb:fd:56:32:e0:68:6a:01:
64:d3:96:ee:73:30:73:c9:9e:28:54:fc:48:e3:2f:c7:d2:13:
37:30:df:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjY3MkUxMTAvBgNVBAUTKENEQzE4N0E2NDJCNEQ3RUM1MERDQUU1OUEwMDY2RjE0
OEQ1MTA4MDEwHhcNMjYwOTI1MDA1NDM0WhcNMjYxMDAyMDA1NDM0WjAYMRYwFAYD
VQQDEw02YWI1YzY0Yi00ZWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzz9eDEbrAOoidu6fcLBhaVMVAb+w46uLiLjUH/FPw3HXf4MTzdcwetnY9MAB
Ma8vw3TP3C05eVqLLk00EbYKtGNqN7XjanUIs5pgPl76nYnh24bEM+cAXyO3daDr
PZ5e8L6RMcR62IV29TRhTD8hXyuCrZnogbDZWmSJa61BIDS/9P396WfPN8RIEybp
QEW1ZGLnSha/cR6AF3Ew+8KXSJf+Pf8WqlgzcIxlUWxtdJSsb3d3N+txpBmZ8FKp
xv5wbTgG2ypKQl6/zU8QhDzurQxLapz2t+JFuyzUvKNtAL6KEm9A50bmvfqIcCjY
ab3kavLeDkcUkDcv9HRrSe5sBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCGeC03a
DrWnaPGzN+1swsT13Ez7MB8GA1UdIwQYMBaAFM3Bh6ZCtNfsUNyuWaAGbxSNUQgB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjcyRS9BRjQ2NjU3NDMz
NzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEteFEzSzVab0FadkZJMVJD
QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pjR0hwa0swMS14UTNLNVpvQVp2RkkxUkNBRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NjcyRS9BRjQ2NjU3NDMzNzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEt
eFEzSzVab0FadkZJMVJDQUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQBk1lgzUL41KHhR9fnKIE/dxRh1xNJ/XZIwI8jH54vJwtKFHaWwkzmEoUNrv
3mQieBR/CB7aq0vSzbupmfTM7qA62ILv02dlk5lS1D0j5inV5mVKBC7WZ2w9IqRh
ir5LHVzFxbr31R2xXIHq8Lgd6xsELwTfHZA8+Fwp1QsVKMO/tMs12dtLb405yI1Q
MBl43S6AsvXmLBgEPnvQ1w2WcBsuSiqBOJOPphPXP5Cl3NP7JVnX2hoSLPzEHcca
NLcB9c/yrNHLnBbOyV+jJqScfYJUlBg1Ay+S1EKSP6UpOdJBLvv9VjLgaGoBZNOW
7nMwc8meKFT8SOMvx9ITNzDfUg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:38:24 2026 by rpki-client