
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft
File: ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft (raw, json)
Hash identifier: DXdUb/ZnNYLdtSwlZ1Jon/R8+3Gtw3wBWkmLEgtnxXE=
Subject key identifier: 0D:61:C2:89:20:9B:24:41:F8:FA:50:56:B1:B1:0A:5C:26:13:54:85
Authority key identifier: 65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53
Certificate issuer: /CN=A9151932/serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553
Certificate serial: 01A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft
Manifest number: 019B
Signing time: Sat 03 Oct 2026 05:16:12 +0000
Manifest this update: Sat 03 Oct 2026 05:16:11 +0000
Manifest next update: Sat 10 Oct 2026 05:16:11 +0000
Files and hashes: 1: ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl (hash: 79OSgl0sh6e2tck3/XY29TfcGmwtAOlqMzcYeEMinoY=)
2: 747C668ECCD911EF9B52C877C4F9AE02.roa (hash: 6UIx7UGJ9VYUN/t3RJGwJzqK/FjOLybUBY/WX4mX9U0=)
3: 42A767BE92E711F1A9AF51EC6611F970.roa (hash: xjxAflx6EC3Vav9wSDndPnjp+6X51gekKJAVPhXjF1A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl
rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 05:16:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151932, serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553
Validity
Not Before: Oct 3 05:16:11 2026 GMT
Not After : Oct 10 05:16:11 2026 GMT
Subject: CN=6ac08f9c-56da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:b1:8d:f3:7e:35:e5:e2:19:e3:c4:2a:19:
e1:c2:a2:3b:07:35:35:f2:cf:cc:1b:4f:0b:86:09:
7c:b0:5a:5a:63:39:e7:98:5d:fe:73:74:a2:b3:1c:
3c:41:f5:bb:a1:4c:e3:a3:f4:36:cb:ee:99:4c:62:
4f:71:c0:5d:73:1d:29:cd:de:a1:7e:b3:07:c0:de:
43:95:c6:e6:84:2a:be:b9:61:45:c5:26:15:5e:10:
7f:82:0d:53:08:04:63:6f:2f:98:61:a9:3c:e1:bb:
55:83:e0:83:56:ca:b3:4c:2d:5c:8d:c6:be:d9:8c:
1a:58:e4:17:20:49:c1:3d:5e:a3:9e:a3:55:a5:dc:
2a:60:f2:0e:64:a4:98:96:4c:48:4b:b3:4b:52:a6:
fe:89:c2:9b:74:52:8c:c0:ad:c1:ab:db:a5:94:ba:
5a:0d:b1:0a:d5:a2:65:54:45:ae:b4:12:62:6c:de:
cb:f5:0b:89:f6:e9:e9:a1:b3:f3:34:c9:6b:4f:ee:
1d:50:8d:60:95:ad:7b:08:66:f0:48:aa:44:d6:19:
ad:36:dd:a2:8d:f4:b2:77:a9:fa:2c:3d:0b:00:55:
e5:13:dc:a1:4e:c0:2c:84:31:17:4c:b3:e2:24:be:
d1:0e:42:f2:e1:22:0f:8a:53:ab:44:0e:6b:3f:14:
eb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:61:C2:89:20:9B:24:41:F8:FA:50:56:B1:B1:0A:5C:26:13:54:85
X509v3 Authority Key Identifier:
keyid:65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e3:d5:1b:18:48:d4:9b:d9:09:94:93:e6:de:d3:73:05:6a:a7:
66:15:fd:e4:d5:41:00:9d:7b:f4:01:7f:22:f7:7e:a0:a0:5c:
94:6a:b5:46:32:57:7d:6d:78:f1:78:40:a6:5c:f3:5c:00:da:
61:90:cc:80:10:1f:2c:d5:8f:9a:a6:c0:0e:dd:5c:90:ca:f8:
c8:e4:66:ac:32:b1:19:83:7a:15:3f:08:e5:09:db:92:0a:86:
b1:95:89:c0:1d:14:c1:df:5e:77:00:8c:db:04:6f:8b:fa:b0:
1a:d8:5a:e2:3e:fd:59:fb:ea:4b:f0:c4:c7:61:f9:b3:15:b0:
a6:07:b1:f3:a7:81:d3:cd:b2:35:e1:2c:11:ea:7f:ca:21:b5:
7c:44:e0:85:0a:92:78:da:2a:08:ed:d4:05:79:19:75:d4:08:
0c:c7:94:ed:80:52:25:96:c3:3c:07:2f:fd:87:c5:c4:c2:76:
0d:17:0a:3d:f6:9a:cd:32:55:ed:63:cd:2e:a6:ae:58:eb:70:
95:a3:a1:b4:a1:4f:55:b9:6b:86:21:96:c3:94:ee:7f:7e:72:
eb:51:f9:97:eb:e8:b6:d2:4f:f0:e1:2e:81:42:3b:ed:41:a0:
76:56:fc:b7:c8:62:ab:65:64:80:d8:9c:a0:a4:76:ef:a6:54:
0a:b3:83:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTE5MzIxMTAvBgNVBAUTKDY1RTE3NzBFNzg4NTUxMEExOENFOTBEOEFBREQ5RURF
N0Q1QjM1NTMwHhcNMjYxMDAzMDUxNjExWhcNMjYxMDEwMDUxNjExWjAYMRYwFAYD
VQQDEw02YWMwOGY5Yy01NmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwdqxjfN+NeXiGePEKhnhwqI7BzU18s/MG08Lhgl8sFpaYznnmF3+c3Sisxw8
QfW7oUzjo/Q2y+6ZTGJPccBdcx0pzd6hfrMHwN5DlcbmhCq+uWFFxSYVXhB/gg1T
CARjby+YYak84btVg+CDVsqzTC1cjca+2YwaWOQXIEnBPV6jnqNVpdwqYPIOZKSY
lkxIS7NLUqb+icKbdFKMwK3Bq9ullLpaDbEK1aJlVEWutBJibN7L9QuJ9unpobPz
NMlrT+4dUI1gla17CGbwSKpE1hmtNt2ijfSyd6n6LD0LAFXlE9yhTsAshDEXTLPi
JL7RDkLy4SIPilOrRA5rPxTrOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA1hwokg
myRB+PpQVrGxClwmE1SFMB8GA1UdIwQYMBaAFGXhdw54hVEKGM6Q2Krdnt59WzVT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTkzMi81MjFDOEU1Qzcy
MDcxMUVGOURDOEJBMjFDNEY5QUUwMi9aZUYzRG5pRlVRb1l6cERZcXQyZTNuMWJO
Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1plRjNEbmlGVVFvWXpwRFlxdDJlM24xYk5WTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTkzMi81MjFDOEU1QzcyMDcxMUVGOURDOEJBMjFDNEY5QUUwMi9aZUYzRG5pRlVR
b1l6cERZcXQyZTNuMWJOVk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA49UbGEjUm9kJlJPm3tNzBWqnZhX95NVBAJ179AF/Ivd+oKBclGq1RjJXfW14
8XhAplzzXADaYZDMgBAfLNWPmqbADt1ckMr4yORmrDKxGYN6FT8I5QnbkgqGsZWJ
wB0Uwd9edwCM2wRvi/qwGtha4j79WfvqS/DEx2H5sxWwpgex86eB082yNeEsEep/
yiG1fETghQqSeNoqCO3UBXkZddQIDMeU7YBSJZbDPAcv/YfFxMJ2DRcKPfaazTJV
7WPNLqauWOtwlaOhtKFPVblrhiGWw5Tuf35y61H5l+vottJP8OEugUI77UGgdlb8
t8hiq2VkgNicoKR276ZUCrODcA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 21:52:45 2026 by rpki-client