
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
File: ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft (raw, json)
Hash identifier: CneWUGdvLAToHe4EFcPSmTkyCGY2jV/WCRA2OHJ3NqQ=
Subject key identifier: 23:C4:B7:EA:6D:CC:C2:CD:C6:CD:28:6A:D5:88:58:A5:2F:E8:9B:30
Authority key identifier: 64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44
Certificate issuer: /CN=A914E3F8/serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444
Certificate serial: 09FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
Manifest number: 09FA
Signing time: Thu 24 Sep 2026 19:44:02 +0000
Manifest this update: Thu 24 Sep 2026 19:44:02 +0000
Manifest next update: Thu 01 Oct 2026 19:44:02 +0000
Files and hashes: 1: ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl (hash: 2YLBXaHUJ4FNHL3xD6nlEJNaCsbEcE7dO+jNStZBXR0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl
rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 19:44:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2555 (0x9fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E3F8, serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444
Validity
Not Before: Sep 24 19:44:02 2026 GMT
Not After : Oct 1 19:44:02 2026 GMT
Subject: CN=6ab57d82-9fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bd:a5:33:0b:a6:ed:ac:c1:f5:d3:d3:33:8f:
e0:9f:72:f5:96:f0:f5:e3:3d:44:07:2e:f4:24:0e:
b7:bf:8c:11:25:69:d2:37:2b:4b:d4:b4:26:5d:9a:
4e:88:2f:63:b8:68:50:40:1c:c1:48:ce:be:22:d9:
5f:c1:be:5a:1d:b7:af:57:b4:17:27:28:68:c4:f0:
a1:4e:9c:40:eb:d7:78:d9:44:8e:84:0b:da:db:ef:
61:6d:9b:d2:76:27:4f:09:8c:4a:95:56:29:90:53:
cd:55:f8:db:f8:e1:43:32:11:72:97:c6:66:7a:04:
1e:d7:40:c0:e6:6c:7b:9a:4b:6e:84:cb:2a:68:8e:
25:04:03:4b:f4:33:77:23:51:47:e2:8c:10:1d:bf:
a6:8c:88:89:f1:17:38:18:a8:e2:29:21:d8:53:85:
4b:4b:d1:9c:4a:c2:04:ad:7f:2b:c6:d3:47:53:47:
84:9b:3f:cb:88:19:5a:d1:ee:5d:88:1d:04:74:2b:
f4:c3:84:50:34:94:ce:f2:d9:2f:4a:37:57:66:1b:
7e:f5:18:65:33:12:ee:45:b0:4c:fa:89:ac:bf:e0:
5d:35:63:15:09:ec:85:dc:69:d5:d9:4e:14:63:ad:
35:5c:fc:07:68:51:65:7d:9c:6b:44:0a:40:b5:54:
6d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C4:B7:EA:6D:CC:C2:CD:C6:CD:28:6A:D5:88:58:A5:2F:E8:9B:30
X509v3 Authority Key Identifier:
keyid:64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
df:c5:b4:ee:13:7e:5b:14:36:cc:b4:c4:1d:44:44:79:da:20:
1f:0f:2e:58:56:46:c7:9c:18:5b:d0:eb:a9:31:76:40:be:ab:
56:9d:b3:88:8b:dd:b5:42:ad:68:67:87:0c:c1:41:31:45:01:
50:82:ab:fd:03:80:b0:90:28:23:8f:6b:15:2d:aa:12:f8:48:
34:6c:7b:df:1b:cb:65:24:57:fc:f0:32:ec:07:6d:7e:09:1e:
29:19:78:59:72:53:1c:39:41:cf:12:03:47:74:06:4d:16:d0:
e1:2b:1a:bd:01:c9:0b:1a:dc:19:84:9c:78:fd:0b:d3:33:05:
01:6d:b3:6a:38:4a:66:1a:1b:5e:c7:62:a3:79:9c:be:c5:48:
dd:4d:2a:b3:3d:46:80:89:bf:63:79:ed:4c:37:b5:f0:4b:1d:
a1:8f:e4:4e:16:55:6d:36:17:69:ea:6c:fd:20:8a:f7:87:80:
88:97:80:0e:a7:20:94:b6:31:25:c7:bc:76:8f:68:13:c6:c4:
d4:ed:a1:ba:6e:9d:f5:42:07:37:40:9d:fa:a3:1d:7e:a3:71:
9d:e0:45:2a:0a:34:ea:92:2e:00:84:cc:76:15:2c:34:71:7d:
2a:ca:78:08:4f:58:f6:f1:df:cb:ee:fd:ae:8d:d7:8a:54:4e:
92:18:8c:c9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEUzRjgxMTAvBgNVBAUTKDY0RjZGNzg2QjhFQzg2OUM3NjY4NkFGM0M5OUJDNDdC
OTlGREQ0NDQwHhcNMjYwOTI0MTk0NDAyWhcNMjYxMDAxMTk0NDAyWjAYMRYwFAYD
VQQDEw02YWI1N2Q4Mi05ZmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo72lMwum7azB9dPTM4/gn3L1lvD14z1EBy70JA63v4wRJWnSNytL1LQmXZpO
iC9juGhQQBzBSM6+Itlfwb5aHbevV7QXJyhoxPChTpxA69d42USOhAva2+9hbZvS
didPCYxKlVYpkFPNVfjb+OFDMhFyl8ZmegQe10DA5mx7mktuhMsqaI4lBANL9DN3
I1FH4owQHb+mjIiJ8Rc4GKjiKSHYU4VLS9GcSsIErX8rxtNHU0eEmz/LiBla0e5d
iB0EdCv0w4RQNJTO8tkvSjdXZht+9RhlMxLuRbBM+omsv+BdNWMVCeyF3GnV2U4U
Y601XPwHaFFlfZxrRApAtVRt9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCPEt+pt
zMLNxs0oatWIWKUv6JswMB8GA1UdIwQYMBaAFGT294a47Iacdmhq88mbxHuZ/dRE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTNGOC9EQzRBNEUxMEE2
REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hweDJhR3J6eVp2RWU1bjkx
RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pQYjNocmpzaHB4MmFHcnp5WnZFZTVuOTFFUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTNGOC9EQzRBNEUxMEE2REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hw
eDJhR3J6eVp2RWU1bjkxRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA38W07hN+WxQ2zLTEHUREedogHw8uWFZGx5wYW9DrqTF2QL6rVp2ziIvdtUKt
aGeHDMFBMUUBUIKr/QOAsJAoI49rFS2qEvhINGx73xvLZSRX/PAy7AdtfgkeKRl4
WXJTHDlBzxIDR3QGTRbQ4SsavQHJCxrcGYSceP0L0zMFAW2zajhKZhobXsdio3mc
vsVI3U0qsz1GgIm/Y3ntTDe18EsdoY/kThZVbTYXaeps/SCK94eAiJeADqcglLYx
Jce8do9oE8bE1O2hum6d9UIHN0Cd+qMdfqNxneBFKgo06pIuAITMdhUsNHF9Ksp4
CE9Y9vHfy+79ro3XilROkhiMyQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:01:41 2026 by rpki-client