
$ rpki-client -vvf rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft
File: ZH5crcsfv367iZpyGcOg8D0_ew0.mft (raw, json)
Hash identifier: TjpyBdcKoslqD4/J8souNjhigiLG1W/SbSG2tKuEP3o=
Subject key identifier: AF:76:41:59:D5:BC:DF:60:B2:88:C1:30:CB:0B:E6:D5:D0:9C:DB:15
Authority key identifier: 64:7E:5C:AD:CB:1F:BF:7E:BB:89:9A:72:19:C3:A0:F0:3D:3F:7B:0D
Certificate issuer: /CN=A91951DE/serialNumber=647E5CADCB1FBF7EBB899A7219C3A0F03D3F7B0D
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft
Manifest number: C4
Signing time: Mon 27 Jul 2026 09:02:45 +0000
Manifest this update: Mon 27 Jul 2026 09:02:45 +0000
Manifest next update: Mon 03 Aug 2026 09:02:45 +0000
Files and hashes: 1: ZH5crcsfv367iZpyGcOg8D0_ew0.crl (hash: Hu+fEyanIJa8Q8p149pe02x1JmhEmD5M7ANfanLBAss=)
2: 533DC25E60B511F0AB567568C4F9AE02.roa (hash: 3eyoBtxWZnVo9d8QTWGg5n0zVCETmWq673Im+Ia8NGk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.crl
rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91951DE, serialNumber=647E5CADCB1FBF7EBB899A7219C3A0F03D3F7B0D
Validity
Not Before: Jul 27 09:02:45 2026 GMT
Not After : Aug 3 09:02:45 2026 GMT
Subject: CN=6a671eb5-8779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:e2:1a:68:e6:44:2d:85:f3:d4:33:87:6a:
d1:de:29:8f:de:39:e0:70:6e:24:bd:6b:9a:7b:3a:
61:32:82:41:9b:f6:2f:38:1e:a4:44:9d:f3:f4:e7:
f3:a7:12:51:9c:45:10:64:ed:50:cc:c7:3a:2d:9d:
6d:df:45:f8:af:b3:32:a9:fe:d9:32:60:3d:60:38:
6a:5a:dc:62:85:74:64:38:2a:b8:89:a2:da:f8:61:
93:84:4c:cc:40:56:47:ff:20:38:a3:8e:af:61:e4:
6c:15:8d:8d:80:fd:c1:de:57:87:cb:5e:ca:08:b1:
59:b9:95:a3:58:c9:a4:48:d3:42:7c:36:65:0c:19:
f2:40:d5:61:7b:ba:73:4e:97:40:8f:7f:ed:32:f1:
c8:ac:cc:9c:85:67:10:cc:f4:ed:45:a9:ea:0f:c8:
b6:6f:ec:0f:22:ab:b7:f4:29:f3:0d:73:cb:14:94:
2f:ac:b1:1a:cb:48:3d:3a:59:d2:7b:2a:7f:22:92:
8e:10:8c:0f:9a:80:ef:59:15:70:27:4c:d8:02:4c:
7f:ab:8b:0b:65:af:f8:b8:9d:31:1a:0a:65:56:22:
bd:6b:17:f6:23:36:f9:de:a9:8a:d0:1b:88:bc:31:
4a:f5:3f:cd:2c:11:ed:86:18:cb:77:2e:76:c2:43:
9e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:76:41:59:D5:BC:DF:60:B2:88:C1:30:CB:0B:E6:D5:D0:9C:DB:15
X509v3 Authority Key Identifier:
keyid:64:7E:5C:AD:CB:1F:BF:7E:BB:89:9A:72:19:C3:A0:F0:3D:3F:7B:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:00:2e:b9:15:9b:81:96:bc:72:4e:15:be:ce:50:38:c3:a3:
a3:4a:5b:eb:c2:12:c0:8f:62:36:49:69:5a:ba:05:20:4d:89:
dc:53:1d:17:40:3e:f8:12:c1:fc:b3:3a:c4:ed:37:64:af:50:
32:f0:f7:b4:33:e7:8b:5d:e3:25:c0:9e:b4:47:a5:76:0c:a5:
cc:79:7c:ea:29:20:8d:70:e3:47:bc:78:9d:c1:a1:0a:52:b2:
34:9c:f8:ab:52:94:d1:fa:91:69:da:fd:ba:ed:c1:02:1d:ce:
49:c4:72:49:58:a1:56:95:a4:c3:7b:0e:20:04:61:ca:9e:4b:
05:70:1f:b4:f5:6f:24:fb:24:9a:32:60:a9:c8:3b:2b:71:60:
db:b4:f3:68:07:23:e1:9a:28:e6:8e:e0:22:3d:ec:ab:49:b4:
d0:79:ad:f5:3d:ed:c6:8d:47:08:4d:d1:9d:d0:fe:d8:73:11:
98:4f:17:ba:aa:c1:7a:8a:ed:5e:6e:b5:a0:af:f1:47:2f:16:
fb:c4:96:f1:0a:ab:48:7d:c0:b4:ba:a1:7d:26:1c:0c:5a:69:
7b:15:56:47:03:ee:ac:67:c1:29:d0:9d:dd:4b:51:a5:a1:e6:
10:f8:18:e4:d0:58:09:bc:17:14:a8:e3:2b:53:c2:de:45:1d:
e7:84:87:66
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTUxREUxMTAvBgNVBAUTKDY0N0U1Q0FEQ0IxRkJGN0VCQjg5OUE3MjE5QzNBMEYw
M0QzRjdCMEQwHhcNMjYwNzI3MDkwMjQ1WhcNMjYwODAzMDkwMjQ1WjAYMRYwFAYD
VQQDEw02YTY3MWViNS04Nzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsLfiGmjmRC2F89Qzh2rR3imP3jngcG4kvWuaezphMoJBm/YvOB6kRJ3z9Ofz
pxJRnEUQZO1QzMc6LZ1t30X4r7Myqf7ZMmA9YDhqWtxihXRkOCq4iaLa+GGThEzM
QFZH/yA4o46vYeRsFY2NgP3B3leHy17KCLFZuZWjWMmkSNNCfDZlDBnyQNVhe7pz
TpdAj3/tMvHIrMychWcQzPTtRanqD8i2b+wPIqu39CnzDXPLFJQvrLEay0g9OlnS
eyp/IpKOEIwPmoDvWRVwJ0zYAkx/q4sLZa/4uJ0xGgplViK9axf2Izb53qmK0BuI
vDFK9T/NLBHthhjLdy52wkOeZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK92QVnV
vN9gsojBMMsL5tXQnNsVMB8GA1UdIwQYMBaAFGR+XK3LH79+u4machnDoPA9P3sN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTFERS85MDRGODcwQTYw
QjQxMUYwOEVEN0FFNjNDNEY5QUUwMi9aSDVjcmNzZnYzNjdpWnB5R2NPZzhEMF9l
dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pINWNyY3NmdjM2N2lacHlHY09nOEQwX2V3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NTFERS85MDRGODcwQTYwQjQxMUYwOEVEN0FFNjNDNEY5QUUwMi9aSDVjcmNzZnYz
NjdpWnB5R2NPZzhEMF9ldzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbgAuuRWbgZa8ck4Vvs5QOMOjo0pb68ISwI9iNklpWroFIE2J3FMdF0A++BLB
/LM6xO03ZK9QMvD3tDPni13jJcCetEeldgylzHl86ikgjXDjR7x4ncGhClKyNJz4
q1KU0fqRadr9uu3BAh3OScRySVihVpWkw3sOIARhyp5LBXAftPVvJPskmjJgqcg7
K3Fg27TzaAcj4Zoo5o7gIj3sq0m00Hmt9T3txo1HCE3RndD+2HMRmE8XuqrBeort
Xm61oK/xRy8W+8SW8QqrSH3AtLqhfSYcDFppexVWRwPurGfBKdCd3UtRpaHmEPgY
5NBYCbwXFKjjK1PC3kUd54SHZg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:43 2026 by rpki-client