
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C770/3104367610DE11F181719257083D8C67/-z8Zsyb_nMe75aygUzQYb14xAQs.mft
File: -z8Zsyb_nMe75aygUzQYb14xAQs.mft (raw, json)
Hash identifier: n0CHx34kfM5bbPU5CAHx8vyMMZ+xi9ZdiAPcGex1KFo=
Subject key identifier: 15:2D:D2:53:B8:77:5A:9E:22:1D:49:9A:9A:84:3B:2A:E3:DF:AA:CF
Authority key identifier: FB:3F:19:B3:26:FF:9C:C7:BB:E5:AC:A0:53:34:18:6F:5E:31:01:0B
Certificate issuer: /CN=A912C770/serialNumber=FB3F19B326FF9CC7BBE5ACA05334186F5E31010B
Certificate serial: 7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-z8Zsyb_nMe75aygUzQYb14xAQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C770/3104367610DE11F181719257083D8C67/-z8Zsyb_nMe75aygUzQYb14xAQs.mft
Manifest number: 7C
Signing time: Sat 17 Oct 2026 08:30:25 +0000
Manifest this update: Sat 17 Oct 2026 08:30:25 +0000
Manifest next update: Sat 24 Oct 2026 08:30:25 +0000
Files and hashes: 1: -z8Zsyb_nMe75aygUzQYb14xAQs.crl (hash: J75c0L/sTHxJq529omMcGDTIXe9vxgq0eR+qATvPdiQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C770/3104367610DE11F181719257083D8C67/-z8Zsyb_nMe75aygUzQYb14xAQs.crl
rsync://rpki.apnic.net/member_repository/A912C770/3104367610DE11F181719257083D8C67/-z8Zsyb_nMe75aygUzQYb14xAQs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-z8Zsyb_nMe75aygUzQYb14xAQs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 08:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C770, serialNumber=FB3F19B326FF9CC7BBE5ACA05334186F5E31010B
Validity
Not Before: Oct 17 08:30:25 2026 GMT
Not After : Oct 24 08:30:25 2026 GMT
Subject: CN=6ad33221-a85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:82:f5:0c:37:5a:32:75:dd:a8:ab:b0:a5:84:
29:2d:8d:87:13:e5:f7:42:14:38:90:f9:f6:ba:e2:
ae:6c:72:db:9d:09:22:47:a6:23:33:4d:67:92:f0:
eb:2b:30:56:09:70:a7:4b:60:0b:e9:64:9c:7f:65:
9f:a6:f4:e5:89:17:e9:d1:19:8a:63:94:5b:86:e2:
4c:7c:9e:2e:bb:da:f2:93:88:69:e2:19:79:f4:4d:
1d:b4:93:f2:10:ad:c2:77:68:32:be:d3:1e:b1:49:
0e:d4:81:2e:e2:88:77:a2:c5:3c:88:09:43:71:f9:
75:2c:94:19:69:d9:19:02:a2:ae:66:97:c9:41:51:
c8:cb:ad:0d:4c:b6:81:7b:84:15:c9:b0:a8:be:e2:
25:ca:34:2f:1b:af:d8:8b:10:06:29:93:3e:4c:bc:
fc:8b:3d:44:1d:b1:98:7e:ee:59:2a:4c:8b:8f:93:
fd:37:ff:39:7c:f3:06:f6:73:f5:d9:bf:c4:73:09:
af:40:de:28:f4:aa:39:01:ae:f9:46:63:53:a0:d7:
c2:d6:a3:fe:ed:d0:4f:8b:1d:7e:67:70:0f:9d:4d:
fd:3b:42:62:35:3f:2d:f2:51:82:07:73:46:c4:86:
d4:a4:78:eb:ab:38:7d:6a:57:39:ed:64:ca:9e:79:
59:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2D:D2:53:B8:77:5A:9E:22:1D:49:9A:9A:84:3B:2A:E3:DF:AA:CF
X509v3 Authority Key Identifier:
keyid:FB:3F:19:B3:26:FF:9C:C7:BB:E5:AC:A0:53:34:18:6F:5E:31:01:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C770/3104367610DE11F181719257083D8C67/-z8Zsyb_nMe75aygUzQYb14xAQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-z8Zsyb_nMe75aygUzQYb14xAQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C770/3104367610DE11F181719257083D8C67/-z8Zsyb_nMe75aygUzQYb14xAQs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:e7:39:3f:cd:d1:b5:4b:4f:09:74:60:e3:e2:4e:70:47:29:
3c:6e:42:a3:fc:d7:17:bf:aa:55:51:f6:60:81:d1:60:8b:74:
40:25:39:dd:14:39:70:49:ce:7b:ee:3a:c9:91:1f:2d:64:58:
47:46:e0:2d:39:80:4c:0a:50:28:93:93:e9:34:53:de:61:d2:
d0:05:0f:34:91:88:bf:ab:3a:92:90:d0:29:91:b6:55:59:bd:
f7:07:07:2a:a0:a4:e7:8e:22:41:41:9e:6c:b8:4c:ff:71:92:
23:df:28:20:54:f6:1e:f5:e9:36:05:a6:67:b0:9e:2d:53:20:
0e:92:49:11:8b:43:38:29:15:f5:ea:9f:f7:12:9d:86:95:98:
9d:9a:30:57:ab:a0:a9:99:09:49:d9:27:fd:82:1f:1d:28:24:
a0:7e:4f:6b:16:d7:24:70:8d:a5:f3:87:27:1f:03:0c:20:9f:
94:21:1f:ef:99:4d:86:ef:82:a6:f2:0f:4f:42:99:6a:55:02:
64:bb:18:cf:11:c1:63:61:a5:ab:ee:c6:6d:bb:9f:df:ea:0f:
4e:b4:a7:95:46:03:c8:99:ae:14:06:e8:38:2f:2f:3a:c2:03:
6b:66:df:83:28:bb:38:b7:af:74:61:c2:91:a1:3a:be:8c:dd:
c0:8e:f3:d2
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
Qzc3MDExMC8GA1UEBRMoRkIzRjE5QjMyNkZGOUNDN0JCRTVBQ0EwNTMzNDE4NkY1
RTMxMDEwQjAeFw0yNjEwMTcwODMwMjVaFw0yNjEwMjQwODMwMjVaMBgxFjAUBgNV
BAMTDTZhZDMzMjIxLWE4NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCLgvUMN1oydd2oq7ClhCktjYcT5fdCFDiQ+fa64q5sctudCSJHpiMzTWeS8Osr
MFYJcKdLYAvpZJx/ZZ+m9OWJF+nRGYpjlFuG4kx8ni672vKTiGniGXn0TR20k/IQ
rcJ3aDK+0x6xSQ7UgS7iiHeixTyICUNx+XUslBlp2RkCoq5ml8lBUcjLrQ1MtoF7
hBXJsKi+4iXKNC8br9iLEAYpkz5MvPyLPUQdsZh+7lkqTIuPk/03/zl88wb2c/XZ
v8RzCa9A3ij0qjkBrvlGY1Og18LWo/7t0E+LHX5ncA+dTf07QmI1Py3yUYIHc0bE
htSkeOurOH1qVzntZMqeeVklAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFS3SU7h3
Wp4iHUmamoQ7KuPfqs8wHwYDVR0jBBgwFoAU+z8Zsyb/nMe75aygUzQYb14xAQsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDNzcwLzMxMDQzNjc2MTBE
RTExRjE4MTcxOTI1NzA4M0Q4QzY3Ly16OFpzeWJfbk1lNzVheWdVelFZYjE0eEFR
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvLXo4WnN5Yl9uTWU3NWF5Z1V6UVliMTR4QVFzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD
NzcwLzMxMDQzNjc2MTBERTExRjE4MTcxOTI1NzA4M0Q4QzY3Ly16OFpzeWJfbk1l
NzVheWdVelFZYjE0eEFRcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCE5zk/zdG1S08JdGDj4k5wRyk8bkKj/NcXv6pVUfZggdFgi3RAJTndFDlwSc57
7jrJkR8tZFhHRuAtOYBMClAok5PpNFPeYdLQBQ80kYi/qzqSkNApkbZVWb33Bwcq
oKTnjiJBQZ5suEz/cZIj3yggVPYe9ek2BaZnsJ4tUyAOkkkRi0M4KRX16p/3Ep2G
lZidmjBXq6CpmQlJ2Sf9gh8dKCSgfk9rFtckcI2l84cnHwMMIJ+UIR/vmU2G74Km
8g9PQplqVQJkuxjPEcFjYaWr7sZtu5/f6g9OtKeVRgPIma4UBug4Ly86wgNrZt+D
KLs4t690YcKRoTq+jN3AjvPS
-----END CERTIFICATE-----
Generated at Sun Oct 18 06:54:05 2026 by rpki-client