
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/zfpbwg4xKRmsax7K2Stx5zSmALA.mft
File: zfpbwg4xKRmsax7K2Stx5zSmALA.mft (raw, json)
Hash identifier: cix5h+bul/s1/4M09rzS/8sQvjMJWGeT4jNoa7P1EpI=
Subject key identifier: 92:37:17:AD:E8:0A:69:D9:E1:F2:1B:90:B5:6F:2A:B0:FA:CF:4D:A8
Authority key identifier: CD:FA:5B:C2:0E:31:29:19:AC:6B:1E:CA:D9:2B:71:E7:34:A6:00:B0
Certificate issuer: /CN=A91731A3/serialNumber=CDFA5BC20E312919AC6B1ECAD92B71E734A600B0
Certificate serial: 16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfpbwg4xKRmsax7K2Stx5zSmALA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/zfpbwg4xKRmsax7K2Stx5zSmALA.mft
Manifest number: 15
Signing time: Sat 19 Sep 2026 09:03:39 +0000
Manifest this update: Sat 19 Sep 2026 09:03:39 +0000
Manifest next update: Sat 26 Sep 2026 09:03:39 +0000
Files and hashes: 1: zfpbwg4xKRmsax7K2Stx5zSmALA.crl (hash: TxRLre49g2cChtdidNC1kxT4XvwR5WqR2+wysR0gTQU=)
2: FF8ED6FA979211F1B1FF570F5011F970.roa (hash: Lh2K/wF9t2esCreJupluX3wR+8TGZ0wv94ej3vVe05c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/zfpbwg4xKRmsax7K2Stx5zSmALA.crl
rsync://rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/zfpbwg4xKRmsax7K2Stx5zSmALA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfpbwg4xKRmsax7K2Stx5zSmALA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91731A3, serialNumber=CDFA5BC20E312919AC6B1ECAD92B71E734A600B0
Validity
Not Before: Sep 19 09:03:39 2026 GMT
Not After : Sep 26 09:03:39 2026 GMT
Subject: CN=6aae4feb-f387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c2:df:31:f2:b6:62:99:f1:6c:4d:c1:0f:dd:
7e:ae:f5:cc:e2:81:40:7f:c8:9c:14:9c:c9:03:13:
96:6f:3c:53:d1:95:3c:ea:af:76:93:5e:d0:8d:4e:
88:03:27:82:47:34:a7:47:e9:86:90:dd:a5:9c:2b:
62:6e:a3:ac:54:80:7e:c1:ac:9d:99:1b:0c:bc:1d:
f2:fe:08:23:bd:d5:b1:6b:7b:a2:bc:19:5b:29:07:
ee:00:11:08:15:50:76:9c:35:f2:cd:71:46:b0:d9:
92:0a:48:c1:aa:c0:73:ab:bb:bb:c8:93:ff:5b:e8:
b2:18:06:0c:f7:35:90:5d:2f:d8:77:a1:f4:01:59:
43:92:b1:4f:20:07:d5:e8:16:56:32:b8:9c:9f:23:
1b:d8:ab:33:5d:d5:14:11:33:60:84:28:cc:c9:fd:
a2:1f:e2:c9:b0:c1:c9:6c:c0:97:4c:7f:22:8d:06:
12:50:25:05:57:3c:1d:75:95:35:4f:31:06:b1:0c:
db:12:70:3b:01:42:13:5f:58:de:1e:eb:f7:b2:1c:
cd:07:5a:1b:65:26:ce:53:1c:d5:cf:9c:56:40:be:
ae:c2:cb:df:eb:02:f0:9e:f1:0b:51:3b:cd:6a:cd:
1a:60:b1:e4:6a:70:d5:d5:4a:fa:ee:16:6b:7f:d4:
80:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:37:17:AD:E8:0A:69:D9:E1:F2:1B:90:B5:6F:2A:B0:FA:CF:4D:A8
X509v3 Authority Key Identifier:
keyid:CD:FA:5B:C2:0E:31:29:19:AC:6B:1E:CA:D9:2B:71:E7:34:A6:00:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/zfpbwg4xKRmsax7K2Stx5zSmALA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfpbwg4xKRmsax7K2Stx5zSmALA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/zfpbwg4xKRmsax7K2Stx5zSmALA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ae:90:a5:00:c1:cd:76:c6:ab:72:e6:41:f7:8f:b3:e2:e4:
4f:ce:e6:c9:6c:c1:32:ab:cd:82:62:c7:e0:a0:b0:df:38:f8:
22:ef:78:d0:17:ca:8e:9b:55:94:00:eb:7a:60:71:2c:1b:68:
0e:e8:34:c7:c0:36:07:6d:81:91:bd:f2:2d:62:db:3e:a9:d8:
81:99:e4:0f:55:7b:c3:c2:67:92:27:90:4f:30:fd:a1:86:64:
d1:a8:cc:d1:70:38:d6:b4:b3:1c:ab:c6:12:bd:06:38:93:37:
d1:12:bb:56:e7:7b:80:82:d2:58:e3:5d:00:da:07:16:cf:49:
25:b1:d7:4a:be:a3:df:e8:ce:23:49:ee:90:3c:92:b2:89:38:
31:77:a7:ce:03:09:94:b6:2e:c2:d8:09:fb:ee:b6:c3:2e:84:
ef:0a:03:75:25:29:2b:54:56:14:34:61:0d:6f:49:cc:87:19:
80:1c:c1:4f:e3:53:c2:e6:bf:d7:ca:e6:d5:70:c1:1e:24:28:
16:01:63:92:54:06:df:7c:15:0b:d1:ad:a4:29:fe:21:d1:d6:
a5:8a:54:93:03:44:be:47:9c:ac:1c:ef:a2:1a:cf:3c:36:08:
a4:2c:66:6c:e4:8c:29:a0:c4:ba:5e:f9:a7:86:e0:31:8b:5f:
89:44:77:71
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MzFBMzExMC8GA1UEBRMoQ0RGQTVCQzIwRTMxMjkxOUFDNkIxRUNBRDkyQjcxRTcz
NEE2MDBCMDAeFw0yNjA5MTkwOTAzMzlaFw0yNjA5MjYwOTAzMzlaMBgxFjAUBgNV
BAMTDTZhYWU0ZmViLWYzODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDWwt8x8rZimfFsTcEP3X6u9czigUB/yJwUnMkDE5ZvPFPRlTzqr3aTXtCNTogD
J4JHNKdH6YaQ3aWcK2Juo6xUgH7BrJ2ZGwy8HfL+CCO91bFre6K8GVspB+4AEQgV
UHacNfLNcUaw2ZIKSMGqwHOru7vIk/9b6LIYBgz3NZBdL9h3ofQBWUOSsU8gB9Xo
FlYyuJyfIxvYqzNd1RQRM2CEKMzJ/aIf4smwwclswJdMfyKNBhJQJQVXPB11lTVP
MQaxDNsScDsBQhNfWN4e6/eyHM0HWhtlJs5THNXPnFZAvq7Cy9/rAvCe8QtRO81q
zRpgseRqcNXVSvruFmt/1IDLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUkjcXregK
adnh8huQtW8qsPrPTagwHwYDVR0jBBgwFoAUzfpbwg4xKRmsax7K2Stx5zSmALAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczMUEzLzlGQTFCMzAyOTc5
MjExRjFCNDI1NDdFQzRGMTFGOTcwL3pmcGJ3ZzR4S1Jtc2F4N0syU3R4NXpTbUFM
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvemZwYndnNHhLUm1zYXg3SzJTdHg1elNtQUxBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz
MUEzLzlGQTFCMzAyOTc5MjExRjFCNDI1NDdFQzRGMTFGOTcwL3pmcGJ3ZzR4S1Jt
c2F4N0syU3R4NXpTbUFMQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCmrpClAMHNdsarcuZB94+z4uRPzubJbMEyq82CYsfgoLDfOPgi73jQF8qOm1WU
AOt6YHEsG2gO6DTHwDYHbYGRvfItYts+qdiBmeQPVXvDwmeSJ5BPMP2hhmTRqMzR
cDjWtLMcq8YSvQY4kzfRErtW53uAgtJY410A2gcWz0klsddKvqPf6M4jSe6QPJKy
iTgxd6fOAwmUti7C2An77rbDLoTvCgN1JSkrVFYUNGENb0nMhxmAHMFP41PC5r/X
yubVcMEeJCgWAWOSVAbffBUL0a2kKf4h0dalilSTA0S+R5ysHO+iGs88NgikLGZs
5IwpoMS6XvmnhuAxi1+JRHdx
-----END CERTIFICATE-----
Generated at Mon Sep 21 02:26:21 2026 by rpki-client