
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft
File: ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft (raw, json)
Hash identifier: SjyIKSgwX+vGogERXJLcyoNn7F6tInw9uDM1Cf5KcVs=
Subject key identifier: 79:B1:B0:C7:6E:C6:FA:05:F4:EE:03:A8:57:E4:B2:B6:DA:43:5A:1F
Authority key identifier: 64:64:A8:D4:CB:7A:6B:C9:2B:94:9D:1A:1E:6F:09:93:33:C5:6D:F1
Certificate issuer: /CN=A91694A4/serialNumber=6464A8D4CB7A6BC92B949D1A1E6F099333C56DF1
Certificate serial: 42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft
Manifest number: 41
Signing time: Tue 13 Oct 2026 09:16:09 +0000
Manifest this update: Tue 13 Oct 2026 09:16:08 +0000
Manifest next update: Tue 20 Oct 2026 09:16:08 +0000
Files and hashes: 1: ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.crl (hash: LOoo2/Az/OYyJ77fvzAnLcHNlpup13OfDM87SIMT+bc=)
2: CCB3F0C665C411F19AAB55CC8147A888.roa (hash: 6HsQ3Z7sCMaiW2glN0WOtCM/Fh9gJPdbJXQJdZ4RzC8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.crl
rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 09:16:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91694A4, serialNumber=6464A8D4CB7A6BC92B949D1A1E6F099333C56DF1
Validity
Not Before: Oct 13 09:16:08 2026 GMT
Not After : Oct 20 09:16:08 2026 GMT
Subject: CN=6acdf6d8-d78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:00:d4:bd:79:f7:6f:33:22:4e:6e:a6:25:f6:
5a:9d:0b:c4:ae:4c:5c:e4:fc:2c:4e:86:9d:e6:60:
02:d4:64:bc:41:46:f3:e8:6e:bc:ac:ec:82:1e:60:
16:0c:6f:31:7c:8e:05:1d:5f:31:80:37:09:4b:11:
52:b0:06:b9:77:3d:2e:85:91:e1:c0:8f:5d:64:ee:
4b:0c:16:c4:bb:6b:3d:60:2f:8c:f3:c9:0d:09:75:
6c:e7:44:bd:aa:bc:c6:a9:54:f8:89:94:a8:50:41:
b7:9c:5f:58:c7:b2:ea:da:72:14:4b:76:90:ba:de:
ae:d4:68:2f:f3:ef:6f:3a:2d:1e:24:c4:bd:00:4c:
95:9b:04:26:63:5e:37:fe:13:cf:b6:b6:0b:3b:7e:
c5:13:43:f5:a0:a9:1f:74:6f:b1:a6:40:10:de:54:
80:b1:60:2e:c8:1d:af:e8:52:95:05:77:81:1d:f5:
b5:9c:ac:6d:3f:c6:fd:e1:c7:c6:61:a8:23:88:79:
92:dd:f4:7b:2b:4e:fe:bb:16:df:05:48:a2:bf:88:
cd:f6:6e:9c:e9:df:85:9d:28:b2:3b:be:3c:b7:6f:
4d:02:05:8d:7a:a0:3b:0f:5e:3e:b0:87:91:9e:2b:
9d:ac:18:73:2a:51:1b:d3:ad:d8:0a:91:01:1d:03:
7b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B1:B0:C7:6E:C6:FA:05:F4:EE:03:A8:57:E4:B2:B6:DA:43:5A:1F
X509v3 Authority Key Identifier:
keyid:64:64:A8:D4:CB:7A:6B:C9:2B:94:9D:1A:1E:6F:09:93:33:C5:6D:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4d:38:bc:e5:60:33:d6:2a:72:81:09:dd:dc:0a:45:16:1d:
c6:e7:7b:5c:6f:b0:25:83:ef:2f:6c:a9:a1:fd:a8:0f:1d:aa:
98:db:be:e1:db:60:85:6e:8c:03:17:2c:8b:01:7a:2d:92:6c:
cc:fa:4b:4b:79:c9:83:60:fd:8c:8a:ab:fd:71:fa:df:86:5f:
9a:fe:0b:66:f6:1e:86:6a:71:b5:82:26:01:18:bb:7e:0f:64:
c9:6f:e6:82:0d:35:b1:51:5b:1a:c1:bb:68:0c:da:65:5b:3a:
23:8e:4a:12:dd:d4:07:9a:b5:21:9e:21:d4:d8:38:46:bb:30:
45:31:b5:7b:69:a5:b9:04:fa:45:fc:b2:c6:2c:c7:af:50:61:
e0:a2:67:fb:d8:58:ee:3c:19:d5:f9:d5:0e:bc:af:20:24:42:
d8:c4:fc:83:20:f0:44:3d:25:e2:91:24:42:9f:64:d2:fe:f8:
40:7e:57:1d:ce:84:7f:36:f8:79:28:3c:59:01:b8:32:e6:75:
e5:69:e8:c9:90:a1:53:d2:da:c3:1f:f5:ba:2f:3a:35:5a:9f:
cf:e1:89:43:be:68:33:b2:83:00:65:35:20:35:7d:48:08:b3:
88:95:78:3e:7f:40:cc:e6:47:e9:88:24:a9:54:d0:d3:3c:a0:
44:fe:10:20
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
OTRBNDExMC8GA1UEBRMoNjQ2NEE4RDRDQjdBNkJDOTJCOTQ5RDFBMUU2RjA5OTMz
M0M1NkRGMTAeFw0yNjEwMTMwOTE2MDhaFw0yNjEwMjAwOTE2MDhaMBgxFjAUBgNV
BAMTDTZhY2RmNmQ4LWQ3OGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCkANS9efdvMyJObqYl9lqdC8SuTFzk/CxOhp3mYALUZLxBRvPobrys7IIeYBYM
bzF8jgUdXzGANwlLEVKwBrl3PS6FkeHAj11k7ksMFsS7az1gL4zzyQ0JdWznRL2q
vMapVPiJlKhQQbecX1jHsurachRLdpC63q7UaC/z7286LR4kxL0ATJWbBCZjXjf+
E8+2tgs7fsUTQ/WgqR90b7GmQBDeVICxYC7IHa/oUpUFd4Ed9bWcrG0/xv3hx8Zh
qCOIeZLd9HsrTv67Ft8FSKK/iM32bpzp34WdKLI7vjy3b00CBY16oDsPXj6wh5Ge
K52sGHMqURvTrdgKkQEdA3vnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUebGwx27G
+gX07gOoV+SyttpDWh8wHwYDVR0jBBgwFoAUZGSo1Mt6a8krlJ0aHm8JkzPFbfEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5NEE0LzIyNjk4RTQ0NjVC
QzExRjE5QTgxMDQzQzdFNDdBODg4L1pHU28xTXQ2YThrcmxKMGFIbThKa3pQRmJm
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWkdTbzFNdDZhOGtybEowYUhtOEprelBGYmZFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5
NEE0LzIyNjk4RTQ0NjVCQzExRjE5QTgxMDQzQzdFNDdBODg4L1pHU28xTXQ2YThr
cmxKMGFIbThKa3pQRmJmRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCKTTi85WAz1ipygQnd3ApFFh3G53tcb7Alg+8vbKmh/agPHaqY277h22CFbowD
FyyLAXotkmzM+ktLecmDYP2Miqv9cfrfhl+a/gtm9h6GanG1giYBGLt+D2TJb+aC
DTWxUVsawbtoDNplWzojjkoS3dQHmrUhniHU2DhGuzBFMbV7aaW5BPpF/LLGLMev
UGHgomf72FjuPBnV+dUOvK8gJELYxPyDIPBEPSXikSRCn2TS/vhAflcdzoR/Nvh5
KDxZAbgy5nXlaejJkKFT0trDH/W6Lzo1Wp/P4YlDvmgzsoMAZTUgNX1ICLOIlXg+
f0DM5kfpiCSpVNDTPKBE/hAg
-----END CERTIFICATE-----
Generated at Thu Oct 15 01:49:38 2026 by rpki-client