
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
File: ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft (raw, json)
Hash identifier: ZDxZ8wT/3vzxslyv3RkSNE37rpmE7jl00/Qla21HwNY=
Subject key identifier: FB:ED:B0:1F:D5:DD:53:7A:B1:F0:98:9E:A9:BC:59:E6:5B:CD:70:F4
Authority key identifier: 64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44
Certificate issuer: /CN=A914E3F8/serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444
Certificate serial: 09DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
Manifest number: 09DB
Signing time: Sun 26 Jul 2026 20:21:33 +0000
Manifest this update: Sun 26 Jul 2026 20:21:32 +0000
Manifest next update: Sun 02 Aug 2026 20:21:32 +0000
Files and hashes: 1: ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl (hash: 3w0x1MmS154JsjvNHsm7fXJcOtHMn02XoSc/IQVWCaY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl
rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 20:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2524 (0x9dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E3F8, serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444
Validity
Not Before: Jul 26 20:21:32 2026 GMT
Not After : Aug 2 20:21:32 2026 GMT
Subject: CN=6a666c4d-0ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:d6:39:69:f9:7a:d1:8d:78:33:be:83:bc:
ca:3e:67:3b:d4:bb:5f:5d:b6:9c:ee:eb:02:aa:7c:
4d:a6:a5:99:2f:14:60:4e:a0:33:9d:ff:b8:7e:ea:
20:f6:f0:f7:3f:ac:01:0a:43:2a:eb:ea:39:29:e8:
d7:9a:ea:be:08:77:a4:4f:e1:2b:79:18:6b:6e:3e:
92:c8:93:e1:ee:71:b8:5d:fc:67:21:f3:98:47:58:
4e:5c:f2:b8:a2:23:e5:8e:37:b5:bc:78:14:20:1c:
ad:84:8c:ba:cd:31:23:ff:cd:6a:54:8d:30:0a:ee:
9a:84:11:47:3d:f9:cc:bc:09:a0:7f:25:83:d4:aa:
b1:cd:60:77:7f:51:3a:ed:93:51:78:b2:a8:02:6e:
b5:8f:0b:81:99:f5:2e:82:88:55:2d:f1:c3:41:fd:
67:ae:ae:b6:7a:65:d7:c3:37:fc:8c:c7:63:fd:3f:
c0:15:6c:7e:b4:cd:10:aa:c9:3b:7e:f6:43:9e:42:
9d:2c:df:b3:60:df:fe:06:bb:5b:e4:69:05:bd:91:
80:7d:83:95:b9:5f:10:19:f0:e5:52:90:22:0f:e6:
70:84:20:36:1c:7b:d2:41:a6:00:8b:63:49:4b:fb:
ec:a3:e9:2b:bb:05:11:5a:54:5d:ff:50:7d:3a:d5:
72:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:ED:B0:1F:D5:DD:53:7A:B1:F0:98:9E:A9:BC:59:E6:5B:CD:70:F4
X509v3 Authority Key Identifier:
keyid:64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
da:c0:74:df:d2:9e:df:d7:48:22:db:8e:d6:d5:3b:d9:1e:e6:
63:76:81:a8:7d:96:4b:b2:7a:f3:3a:57:bc:b7:2f:17:47:91:
31:4a:f1:78:23:00:84:8b:3a:e4:75:87:78:61:12:4d:f1:09:
4a:30:05:ad:b3:b9:72:c4:fb:96:7e:1e:6a:b4:02:2a:ca:56:
bd:db:94:83:c7:55:b6:c3:b4:51:9b:c6:1f:48:f2:c7:06:70:
eb:fa:d6:f3:9e:fa:46:8a:2f:40:bc:35:fd:e3:01:8c:85:f4:
81:cb:2f:33:9a:2b:d8:a2:6d:ff:d5:92:bc:05:3c:87:61:1b:
af:a3:d7:87:c8:b4:0e:f8:68:b3:08:98:49:46:d8:df:86:86:
47:f5:d9:8c:3b:45:a9:6b:0c:bc:a7:e7:70:e2:5c:33:7b:4a:
b9:82:fd:35:cd:6b:a3:f2:ef:0d:a2:1a:4a:aa:40:06:36:9d:
db:f0:11:0a:e7:7e:6d:30:b1:af:ff:3e:f6:0f:7a:8c:bc:c2:
92:a6:0a:12:a9:32:d9:ee:b3:c9:64:5d:06:ae:b9:6a:41:69:
1a:fc:a0:16:a9:95:3b:8d:e6:dd:90:95:4d:5d:c3:99:2a:aa:
4b:74:25:42:ff:4c:5e:53:88:ef:5d:6c:8d:f7:87:2f:81:8b:
ec:2a:96:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEUzRjgxMTAvBgNVBAUTKDY0RjZGNzg2QjhFQzg2OUM3NjY4NkFGM0M5OUJDNDdC
OTlGREQ0NDQwHhcNMjYwNzI2MjAyMTMyWhcNMjYwODAyMjAyMTMyWjAYMRYwFAYD
VQQDEw02YTY2NmM0ZC0wY2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArtPWOWn5etGNeDO+g7zKPmc71LtfXbac7usCqnxNpqWZLxRgTqAznf+4fuog
9vD3P6wBCkMq6+o5KejXmuq+CHekT+EreRhrbj6SyJPh7nG4XfxnIfOYR1hOXPK4
oiPljje1vHgUIBythIy6zTEj/81qVI0wCu6ahBFHPfnMvAmgfyWD1KqxzWB3f1E6
7ZNReLKoAm61jwuBmfUugohVLfHDQf1nrq62emXXwzf8jMdj/T/AFWx+tM0Qqsk7
fvZDnkKdLN+zYN/+Brtb5GkFvZGAfYOVuV8QGfDlUpAiD+ZwhCA2HHvSQaYAi2NJ
S/vso+kruwURWlRd/1B9OtVyOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPvtsB/V
3VN6sfCYnqm8WeZbzXD0MB8GA1UdIwQYMBaAFGT294a47Iacdmhq88mbxHuZ/dRE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTNGOC9EQzRBNEUxMEE2
REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hweDJhR3J6eVp2RWU1bjkx
RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pQYjNocmpzaHB4MmFHcnp5WnZFZTVuOTFFUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTNGOC9EQzRBNEUxMEE2REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hw
eDJhR3J6eVp2RWU1bjkxRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA2sB039Ke39dIItuO1tU72R7mY3aBqH2WS7J68zpXvLcvF0eRMUrxeCMAhIs6
5HWHeGESTfEJSjAFrbO5csT7ln4earQCKspWvduUg8dVtsO0UZvGH0jyxwZw6/rW
8576RoovQLw1/eMBjIX0gcsvM5or2KJt/9WSvAU8h2Ebr6PXh8i0DvhoswiYSUbY
34aGR/XZjDtFqWsMvKfncOJcM3tKuYL9Nc1ro/LvDaIaSqpABjad2/ARCud+bTCx
r/8+9g96jLzCkqYKEqky2e6zyWRdBq65akFpGvygFqmVO43m3ZCVTV3DmSqqS3Ql
Qv9MXlOI711sjfeHL4GL7CqWXw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:34:53 2026 by rpki-client