
$ rpki-client -vvf rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft
File: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft (raw, json)
Hash identifier: gpidwvDu7+TohN9j/6y/xp19CnqGQVPGqidv4ak7JU0=
Subject key identifier: 05:D3:1E:C4:F7:6D:38:31:17:3C:5C:B6:5F:53:0E:23:BB:14:6D:D8
Authority key identifier: CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9
Certificate issuer: /CN=A913459F/serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9
Certificate serial: 167E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft
Manifest number: 167E
Signing time: Tue 28 Jul 2026 16:46:55 +0000
Manifest this update: Tue 28 Jul 2026 16:46:55 +0000
Manifest next update: Tue 04 Aug 2026 16:46:55 +0000
Files and hashes: 1: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl (hash: oI8alJ2kgpZfV4vBdhxBeqVEK5Ax2eQBWWUmn++bq3g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl
rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:46:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5758 (0x167e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913459F, serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9
Validity
Not Before: Jul 28 16:46:55 2026 GMT
Not After : Aug 4 16:46:55 2026 GMT
Subject: CN=6a68dcff-4ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:17:ce:e5:36:c3:f3:ff:26:03:76:09:5c:2e:
28:b0:67:9a:1d:41:95:89:e3:97:3c:d4:bf:bd:3d:
f0:53:b9:e1:c8:07:65:8a:d5:12:67:d0:7c:e4:af:
e5:24:e6:b7:e5:44:cd:63:47:32:a8:00:28:e0:c1:
5a:86:b2:bf:c6:e0:73:ec:84:6c:1e:a6:17:30:9b:
22:2e:50:48:3a:83:42:fe:5e:dd:65:94:19:91:b1:
6e:a0:60:2a:76:36:9c:b9:e0:1f:30:d1:e5:2f:b6:
01:89:21:a5:64:c4:06:44:a1:5d:7e:bc:92:7b:88:
75:e1:1e:a2:1c:60:fb:2c:ab:83:e2:68:99:79:ef:
d4:44:4f:d0:37:4d:88:00:49:9c:49:b7:1d:95:14:
eb:cf:d1:ef:b3:77:a0:8c:80:77:d4:eb:19:32:86:
33:ea:82:36:df:7a:86:33:65:97:80:6c:84:6f:b2:
18:a4:be:25:32:8b:dc:87:13:06:7b:16:66:16:ef:
c3:b7:1f:ab:a9:65:cb:d7:cb:ef:d0:b5:05:fa:27:
60:0a:43:03:af:9f:0b:33:0e:de:7f:f3:62:6c:20:
f8:26:ce:5f:5a:c7:0d:df:19:9f:3a:0f:b7:d0:8f:
49:6e:ca:57:21:a3:0d:7f:5c:55:88:25:9f:03:eb:
4e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D3:1E:C4:F7:6D:38:31:17:3C:5C:B6:5F:53:0E:23:BB:14:6D:D8
X509v3 Authority Key Identifier:
keyid:CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f3:bd:a8:9a:9d:c7:3c:c2:e5:90:7f:72:13:eb:7e:d3:f7:
fb:27:d1:11:e7:93:19:8e:bc:4f:c9:7c:3d:f0:80:ac:bc:8a:
b8:ad:9e:97:c1:26:dc:bc:13:95:04:b6:65:ba:c7:d2:f8:4f:
c8:e8:e0:87:ba:0f:42:b3:17:5a:9e:25:21:cc:07:5c:c1:f1:
74:24:ac:6a:da:a9:11:5f:a9:eb:6b:e2:58:49:15:0a:3e:d6:
e2:a1:bf:2e:70:07:71:35:57:ea:7f:f5:65:c5:a4:f1:c0:23:
9c:ee:3c:7d:a5:b1:22:69:69:9b:1e:bb:e8:89:7a:4d:23:c3:
09:13:01:60:fa:17:80:f2:07:09:91:3e:b2:3e:b7:03:74:15:
04:6b:7a:79:c4:d1:68:ac:e5:b3:03:37:97:24:b9:94:70:41:
7c:8c:ab:cc:07:78:4c:29:1c:65:a1:85:e9:68:0a:89:a0:82:
cd:fb:eb:77:47:03:a5:c9:44:f4:b9:fb:8a:78:0e:84:45:e4:
ad:33:75:b6:54:78:41:50:a1:94:96:4a:39:11:5c:c1:89:e1:
d7:ff:9b:61:09:25:f5:b9:74:83:ec:ce:a4:02:29:b6:9b:e8:
f1:8b:4b:72:9f:4b:70:b7:92:65:7b:5b:b4:6a:6c:85:ff:03:
63:fd:75:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQ1OUYxMTAvBgNVBAUTKENGNDY2MTJGM0Q2NUQ3RUU5Rjc4QkY5NTc1OUY2N0Y0
N0FEOTU4RDkwHhcNMjYwNzI4MTY0NjU1WhcNMjYwODA0MTY0NjU1WjAYMRYwFAYD
VQQDEw02YTY4ZGNmZi00ZWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwRfO5TbD8/8mA3YJXC4osGeaHUGVieOXPNS/vT3wU7nhyAdlitUSZ9B85K/l
JOa35UTNY0cyqAAo4MFahrK/xuBz7IRsHqYXMJsiLlBIOoNC/l7dZZQZkbFuoGAq
djacueAfMNHlL7YBiSGlZMQGRKFdfrySe4h14R6iHGD7LKuD4miZee/URE/QN02I
AEmcSbcdlRTrz9Hvs3egjIB31OsZMoYz6oI233qGM2WXgGyEb7IYpL4lMovchxMG
exZmFu/Dtx+rqWXL18vv0LUF+idgCkMDr58LMw7ef/NibCD4Js5fWscN3xmfOg+3
0I9JbspXIaMNf1xViCWfA+tOgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAXTHsT3
bTgxFzxctl9TDiO7FG3YMB8GA1UdIwQYMBaAFM9GYS89Zdfun3i/lXWfZ/R62VjZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDU5Ri9FN0UzRUFCQTJD
MTkxMUU4OTlCRDlFODFDNEY5QUUwMi96MFpoTHoxbDEtNmZlTC1WZFo5bjlIclpX
TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3owWmhMejFsMS02ZmVMLVZkWjluOUhyWldOay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDU5Ri9FN0UzRUFCQTJDMTkxMUU4OTlCRDlFODFDNEY5QUUwMi96MFpoTHoxbDEt
NmZlTC1WZFo5bjlIclpXTmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKvO9qJqdxzzC5ZB/chPrftP3+yfREeeTGY68T8l8PfCArLyKuK2el8Em3LwT
lQS2ZbrH0vhPyOjgh7oPQrMXWp4lIcwHXMHxdCSsatqpEV+p62viWEkVCj7W4qG/
LnAHcTVX6n/1ZcWk8cAjnO48faWxImlpmx676Il6TSPDCRMBYPoXgPIHCZE+sj63
A3QVBGt6ecTRaKzlswM3lyS5lHBBfIyrzAd4TCkcZaGF6WgKiaCCzfvrd0cDpclE
9Ln7ingOhEXkrTN1tlR4QVChlJZKORFcwYnh1/+bYQkl9bl0g+zOpAIptpvo8YtL
cp9LcLeSZXtbtGpshf8DY/11Xg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:23:57 2026 by rpki-client