
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft
File: zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft (raw, json)
Hash identifier: fTRb8+zG6f18Y7KsKzVtJffd8o4lqPOwJUYrzwbFE4Y=
Subject key identifier: 77:D0:4F:CB:6B:BA:B8:77:AE:53:79:FF:3E:87:5E:7F:7C:D5:B4:74
Authority key identifier: CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8
Certificate issuer: /CN=A9133239/serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8
Certificate serial: 01A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft
Manifest number: 01A6
Signing time: Mon 21 Sep 2026 04:06:09 +0000
Manifest this update: Mon 21 Sep 2026 04:06:09 +0000
Manifest next update: Mon 28 Sep 2026 04:06:09 +0000
Files and hashes: 1: zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl (hash: yj9ZzDdMqhcJv+J72QbU44W9ayL/mL+xb94hv0bqMq0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl
rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422 (0x1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133239, serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8
Validity
Not Before: Sep 21 04:06:09 2026 GMT
Not After : Sep 28 04:06:09 2026 GMT
Subject: CN=6ab0ad31-fadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:39:a8:45:c0:0d:72:00:15:ee:ef:06:73:
71:36:6b:3b:da:22:ab:ed:58:b1:0a:fa:e0:f1:c0:
ef:d1:f8:b4:4f:0e:2a:ca:9e:a6:6a:8c:cd:e9:a1:
6d:25:30:56:65:40:90:8d:a9:bd:53:79:cb:8a:09:
94:52:da:a0:a0:ff:9d:73:2d:c2:ab:ab:11:12:cc:
71:f8:eb:49:5d:6d:49:ab:e5:a7:f8:1c:5a:56:86:
fc:54:54:d8:c7:e6:41:ca:a9:5e:cf:82:53:85:d8:
b6:f1:fe:39:bb:85:34:d3:82:d2:4e:63:4b:9a:11:
1a:c0:78:b6:32:c8:36:0d:f5:1d:c7:ba:4a:a4:5c:
b4:5f:fc:17:8d:c9:c9:06:ee:85:04:24:7d:60:31:
02:3d:9b:0e:50:10:88:64:e6:f7:39:39:e5:d1:40:
86:8a:a2:86:2d:b1:73:a1:ee:5f:cf:da:aa:79:6e:
67:88:d0:21:1b:5c:e6:50:e7:63:ff:4d:34:c0:90:
c0:e7:96:11:89:f3:27:bf:29:d4:be:e2:b9:ca:34:
c5:c0:c3:46:14:d7:dd:6c:d9:5f:74:93:b7:f9:a8:
56:c2:63:72:fd:09:8e:3d:a2:75:d2:91:57:13:fe:
c5:7e:9a:bc:1c:97:26:56:85:13:41:84:6c:54:57:
dc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D0:4F:CB:6B:BA:B8:77:AE:53:79:FF:3E:87:5E:7F:7C:D5:B4:74
X509v3 Authority Key Identifier:
keyid:CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:da:3d:6d:35:61:57:52:a3:88:2d:2b:8e:50:5e:6b:87:b7:
c2:fb:0f:f6:4f:d8:90:f0:dc:b8:8f:bf:dc:7f:d7:30:91:6b:
08:93:1b:43:cb:0c:d0:45:df:ec:06:bb:54:5d:4b:1e:7b:5c:
b1:20:64:5b:3f:44:76:c9:69:c4:48:4c:6c:8e:42:49:57:42:
ed:12:77:5f:04:c6:b4:28:76:c4:3e:97:82:4e:f5:aa:ec:b1:
c2:75:50:07:92:bc:f4:15:e4:d6:35:fd:f0:1e:ea:bd:d7:6b:
10:23:16:3a:89:58:30:88:ef:62:cd:1a:91:9a:6c:47:e2:fe:
12:d8:7d:45:90:0d:62:10:13:5c:7a:ac:5b:08:5b:e5:54:04:
32:48:cb:63:71:76:80:55:ad:a4:48:e2:71:2c:49:6d:7e:51:
ac:7a:91:75:43:20:c4:d0:27:5b:cc:c1:e2:9c:3a:68:38:e9:
14:3c:de:cd:49:0d:a2:33:65:89:c4:8d:46:88:0a:44:f4:13:
ad:42:df:85:5b:e5:95:bc:b1:ca:18:5b:48:fe:3a:e9:c0:24:
b6:fc:ca:2f:5d:e3:a7:e6:9a:9b:15:82:96:8e:e1:fc:cf:7e:
8c:62:a1:3f:2d:7e:20:39:cc:32:83:ec:e6:00:b0:82:00:41:
73:49:ac:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzMyMzkxMTAvBgNVBAUTKENDNkY0NEMxRTI1RjM3QTNBREY3NjI3Qjk3NzdERkEx
NzdEOUQxRTgwHhcNMjYwOTIxMDQwNjA5WhcNMjYwOTI4MDQwNjA5WjAYMRYwFAYD
VQQDEw02YWIwYWQzMS1mYWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs6k5qEXADXIAFe7vBnNxNms72iKr7VixCvrg8cDv0fi0Tw4qyp6maozN6aFt
JTBWZUCQjam9U3nLigmUUtqgoP+dcy3Cq6sREsxx+OtJXW1Jq+Wn+BxaVob8VFTY
x+ZByqlez4JThdi28f45u4U004LSTmNLmhEawHi2Msg2DfUdx7pKpFy0X/wXjcnJ
Bu6FBCR9YDECPZsOUBCIZOb3OTnl0UCGiqKGLbFzoe5fz9qqeW5niNAhG1zmUOdj
/000wJDA55YRifMnvynUvuK5yjTFwMNGFNfdbNlfdJO3+ahWwmNy/QmOPaJ10pFX
E/7Ffpq8HJcmVoUTQYRsVFfcdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHfQT8tr
urh3rlN5/z6HXn981bR0MB8GA1UdIwQYMBaAFMxvRMHiXzejrfdie5d336F32dHo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzIzOS83RDEyOUI1ODJG
MDIxMUVGOEM3QTU4NzBDNEY5QUUwMi96RzlFd2VKZk42T3Q5Mko3bDNmZm9YZlow
ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pHOUV3ZUpmTjZPdDkySjdsM2Zmb1hmWjBlZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MzIzOS83RDEyOUI1ODJGMDIxMUVGOEM3QTU4NzBDNEY5QUUwMi96RzlFd2VKZk42
T3Q5Mko3bDNmZm9YZlowZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXto9bTVhV1KjiC0rjlBea4e3wvsP9k/YkPDcuI+/3H/XMJFrCJMbQ8sM0EXf
7Aa7VF1LHntcsSBkWz9EdslpxEhMbI5CSVdC7RJ3XwTGtCh2xD6Xgk71quyxwnVQ
B5K89BXk1jX98B7qvddrECMWOolYMIjvYs0akZpsR+L+Eth9RZANYhATXHqsWwhb
5VQEMkjLY3F2gFWtpEjicSxJbX5RrHqRdUMgxNAnW8zB4pw6aDjpFDzezUkNojNl
icSNRogKRPQTrULfhVvllbyxyhhbSP466cAktvzKL13jp+aamxWClo7h/M9+jGKh
Py1+IDnMMoPs5gCwggBBc0ms5g==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:58:38 2026 by rpki-client