
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
File: ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft (raw, json)
Hash identifier: cnemrJt0su23GOIAWAEN3rPDBMEj3uckrAzv+uc1Azg=
Subject key identifier: 2D:A7:76:7E:EB:0D:2F:2B:DE:CA:7C:80:B9:A1:44:72:38:C2:EB:22
Authority key identifier: 66:C2:DB:0D:8B:69:0C:95:36:B0:6A:B7:CE:C6:5C:08:D5:76:3F:4F
Certificate issuer: /CN=A9131194/serialNumber=66C2DB0D8B690C9536B06AB7CEC65C08D5763F4F
Certificate serial: 95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
Manifest number: 91
Signing time: Mon 27 Jul 2026 09:40:21 +0000
Manifest this update: Mon 27 Jul 2026 09:40:21 +0000
Manifest next update: Mon 03 Aug 2026 09:40:21 +0000
Files and hashes: 1: ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl (hash: LN56PoTkBNxJj1w2guczixRwAouY3OMaz3axTt62Jtg=)
2: BCD0C756B3D111F09D2C6B5BC4F9AE02.roa (hash: eDWjFpNbWk+XbLw3lWSx0s46c4JyzqQLsP9ZRkskaaA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl
rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:40:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131194, serialNumber=66C2DB0D8B690C9536B06AB7CEC65C08D5763F4F
Validity
Not Before: Jul 27 09:40:21 2026 GMT
Not After : Aug 3 09:40:21 2026 GMT
Subject: CN=6a672785-e8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fc:ac:7f:4d:20:f6:1d:b5:05:6f:5b:cc:97:
6d:eb:f4:59:44:6f:14:c9:dd:01:b4:2f:7b:ce:65:
50:c0:f2:78:58:49:d3:7c:02:e2:b2:ab:04:a4:67:
7e:eb:af:62:8e:5d:52:c4:1c:d1:13:f6:1c:d8:11:
56:7c:49:c2:81:fb:91:2a:cf:3b:ce:03:21:7e:40:
ab:83:4d:e8:cc:c8:e5:17:a4:21:34:e6:e5:bd:53:
49:d5:8a:9f:78:3d:d5:5d:97:3a:ce:43:40:9a:74:
68:dc:ec:2f:f4:17:2e:f3:89:a4:43:dd:4b:a4:2c:
43:92:97:ac:ec:f6:ae:35:26:97:ba:1f:54:44:e5:
ba:cd:95:0b:b8:cc:34:1e:fa:66:7b:dd:78:e6:ad:
94:be:ac:16:73:24:41:8e:35:fc:5c:d1:f0:37:19:
b8:25:d7:bc:b9:31:7e:d4:72:ea:86:4c:a7:7c:d1:
97:ec:e9:3f:d2:10:c5:89:82:67:a2:5b:d8:fe:f6:
cd:3b:9c:3f:2e:9d:3e:43:f0:ce:e2:9b:1c:06:fc:
87:42:c0:cb:d5:ec:18:66:c3:2f:c3:19:d3:9e:9c:
0e:63:bb:be:36:b8:f9:6c:0c:99:56:0c:22:fb:65:
81:59:d4:ec:3a:66:ff:4d:de:99:2a:0c:d0:85:0f:
02:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A7:76:7E:EB:0D:2F:2B:DE:CA:7C:80:B9:A1:44:72:38:C2:EB:22
X509v3 Authority Key Identifier:
keyid:66:C2:DB:0D:8B:69:0C:95:36:B0:6A:B7:CE:C6:5C:08:D5:76:3F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:82:47:db:2b:c7:d6:70:83:d2:cc:1c:df:c3:89:f7:1b:f8:
f5:ce:a2:69:5b:1c:a6:67:94:31:34:51:df:3a:45:0a:80:80:
bc:23:14:aa:b3:bb:e8:30:aa:c1:51:4b:dd:b3:79:16:4c:ab:
62:63:d0:53:ba:7f:d6:72:c2:ce:41:73:1d:09:35:83:4f:4f:
58:f3:35:bb:f3:98:fe:9b:65:4b:2a:ca:9e:29:94:08:13:02:
ec:29:00:d6:a7:4c:6c:b6:48:7d:71:18:85:56:ce:dd:76:25:
a8:aa:10:6c:20:88:43:e4:68:2f:5c:72:58:14:14:a6:b9:d3:
85:60:85:30:d0:36:68:bc:01:87:e2:71:d9:8b:53:e3:43:0e:
6d:2b:f9:0c:c3:c6:dd:8a:02:b8:c7:bb:2b:53:70:79:72:49:
be:98:93:cb:60:2e:36:43:b7:52:8d:c4:af:ac:d4:53:cf:71:
ea:5b:f7:9c:62:50:9a:96:6d:95:71:5c:04:e5:0b:d8:22:f2:
22:84:1e:d7:29:fa:f6:9a:14:b4:6f:00:32:8a:bb:f7:00:c2:
49:a2:3b:22:b8:83:c7:20:53:ce:56:00:27:9b:4c:8b:d6:ba:
83:f3:51:9a:cb:49:62:70:04:1e:35:50:09:22:23:39:de:cb:
3e:ef:8f:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzExOTQxMTAvBgNVBAUTKDY2QzJEQjBEOEI2OTBDOTUzNkIwNkFCN0NFQzY1QzA4
RDU3NjNGNEYwHhcNMjYwNzI3MDk0MDIxWhcNMjYwODAzMDk0MDIxWjAYMRYwFAYD
VQQDEw02YTY3Mjc4NS1lOGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3fysf00g9h21BW9bzJdt6/RZRG8Uyd0BtC97zmVQwPJ4WEnTfALisqsEpGd+
669ijl1SxBzRE/Yc2BFWfEnCgfuRKs87zgMhfkCrg03ozMjlF6QhNOblvVNJ1Yqf
eD3VXZc6zkNAmnRo3Owv9Bcu84mkQ91LpCxDkpes7PauNSaXuh9UROW6zZULuMw0
Hvpme9145q2UvqwWcyRBjjX8XNHwNxm4Jde8uTF+1HLqhkynfNGX7Ok/0hDFiYJn
olvY/vbNO5w/Lp0+Q/DO4pscBvyHQsDL1ewYZsMvwxnTnpwOY7u+Nrj5bAyZVgwi
+2WBWdTsOmb/Td6ZKgzQhQ8CCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC2ndn7r
DS8r3sp8gLmhRHI4wusiMB8GA1UdIwQYMBaAFGbC2w2LaQyVNrBqt87GXAjVdj9P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTE5NC8yOURFMTJDQUIz
Q0ExMUYwQTVDMDdCN0VDNEY5QUUwMi9ac0xiRFl0cERKVTJzR3EzenNaY0NOVjJQ
MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pzTGJEWXRwREpVMnNHcTN6c1pjQ05WMlAwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTE5NC8yOURFMTJDQUIzQ0ExMUYwQTVDMDdCN0VDNEY5QUUwMi9ac0xiRFl0cERK
VTJzR3EzenNaY0NOVjJQMDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjYJH2yvH1nCD0swc38OJ9xv49c6iaVscpmeUMTRR3zpFCoCAvCMUqrO76DCq
wVFL3bN5FkyrYmPQU7p/1nLCzkFzHQk1g09PWPM1u/OY/ptlSyrKnimUCBMC7CkA
1qdMbLZIfXEYhVbO3XYlqKoQbCCIQ+RoL1xyWBQUprnThWCFMNA2aLwBh+Jx2YtT
40MObSv5DMPG3YoCuMe7K1NweXJJvpiTy2AuNkO3Uo3Er6zUU89x6lv3nGJQmpZt
lXFcBOUL2CLyIoQe1yn69poUtG8AMoq79wDCSaI7IriDxyBTzlYAJ5tMi9a6g/NR
mstJYnAEHjVQCSIjOd7LPu+Prg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:31:40 2026 by rpki-client