
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft
File: ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft (raw, json)
Hash identifier: yXH4klBxyIykRpMwhdT9H7HCg3yLc373Rhw9VdFAr1c=
Subject key identifier: 76:A7:25:3E:F8:F6:3A:96:E5:95:80:1D:DB:9B:39:E3:94:32:C2:85
Authority key identifier: 66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12
Certificate issuer: /CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212
Certificate serial: 104B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft
Manifest number: 1036
Signing time: Sat 28 Feb 2026 17:33:01 +0000
Manifest this update: Sat 28 Feb 2026 17:33:01 +0000
Manifest next update: Sat 07 Mar 2026 17:33:01 +0000
Files and hashes: 1: ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl (hash: 1QPwAVyNtM1BgKCXAS/nqfucMdravSKarU4rDzkGDFs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl
rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4171 (0x104b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199E3F, serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212
Validity
Not Before: Feb 28 17:33:01 2026 GMT
Not After : Mar 7 17:33:01 2026 GMT
Subject: CN=69a326cd-6e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0c:bd:58:2d:29:d0:a5:29:2f:7f:db:29:4b:
0b:7c:8d:16:d3:1b:44:f7:df:0b:6f:88:f1:c2:42:
74:0f:10:ba:11:e4:50:51:76:b4:9d:96:5b:66:2e:
93:72:a5:01:28:a3:d3:db:6a:15:f0:e4:5c:f1:60:
b3:63:67:5b:a0:27:18:66:2e:65:0c:f7:5c:81:30:
4e:23:00:bb:db:07:55:39:11:2b:79:ae:d0:28:cf:
1c:1c:03:e7:c5:5b:92:88:a7:56:fd:16:c8:82:17:
20:40:a2:5c:06:3a:50:7e:10:21:e6:e5:2e:0f:96:
e6:3b:15:b5:c7:96:ee:95:b2:b1:77:46:76:74:c5:
0f:06:40:7d:59:cd:60:e1:a1:f6:c5:d8:30:e8:60:
3f:dc:e6:17:44:ab:43:7d:50:95:13:29:f0:df:10:
1e:da:42:ff:f2:3d:9d:fb:61:b3:b7:5b:de:8d:1a:
83:93:19:f3:0a:76:4f:21:4a:fe:c7:8e:26:79:24:
a6:44:67:b7:53:00:8d:06:94:7a:c4:47:cb:d0:cf:
8e:65:2c:83:d0:22:95:9d:39:1f:ed:00:29:36:f5:
d0:57:51:af:e1:61:2c:ee:f5:fc:52:80:74:3a:4a:
81:ac:7c:c6:83:2b:10:6a:ff:05:69:28:5f:1f:8f:
6a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A7:25:3E:F8:F6:3A:96:E5:95:80:1D:DB:9B:39:E3:94:32:C2:85
X509v3 Authority Key Identifier:
keyid:66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:81:cd:8d:8b:91:6c:49:50:5f:14:41:98:c3:f3:f8:66:fa:
79:62:68:cf:91:7e:db:82:48:2e:1b:08:7f:b6:e5:fd:2f:73:
48:42:d5:2a:43:83:35:4d:8d:43:c2:4c:84:68:a5:b9:c4:6d:
64:2d:2c:e9:7a:58:54:f2:22:b1:ad:52:59:a1:2f:43:6f:00:
cd:dc:f7:69:53:df:17:16:b7:42:f5:33:96:9e:99:f4:2b:30:
b0:03:22:fc:c7:ef:f7:46:12:7b:6b:4f:c9:4b:a2:26:8c:af:
ed:45:4a:98:ae:e1:6d:f5:10:92:d6:9a:70:f3:2f:6b:e9:66:
69:94:50:da:02:62:ff:6b:02:90:dc:7b:47:0c:f2:9f:6b:91:
5d:86:d4:51:1c:41:3b:ae:91:cc:2a:0e:2b:2f:ef:49:c2:4a:
22:a2:b5:ed:4a:5c:fb:10:b2:e7:93:a9:a2:2c:3d:46:37:ea:
7b:02:ae:d8:d0:6e:2a:5e:3f:3f:ee:de:c9:58:fe:4e:69:62:
29:18:31:ef:c1:a2:8f:df:68:de:f2:8c:14:e0:7f:52:72:f1:
c8:dc:cb:82:a8:e9:f5:6f:db:05:c6:6f:7a:bf:fa:10:bc:30:
8b:3f:87:7c:44:59:1f:90:cd:01:49:87:44:98:c0:75:c4:0b:
5e:a3:cb:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTlFM0YxMTAvBgNVBAUTKDY2OTFBQkVDMUE0NkZEQkNEMjYwN0M0REYxN0E1NENF
MzMzNEMyMTIwHhcNMjYwMjI4MTczMzAxWhcNMjYwMzA3MTczMzAxWjAYMRYwFAYD
VQQDEw02OWEzMjZjZC02ZTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqQy9WC0p0KUpL3/bKUsLfI0W0xtE998Lb4jxwkJ0DxC6EeRQUXa0nZZbZi6T
cqUBKKPT22oV8ORc8WCzY2dboCcYZi5lDPdcgTBOIwC72wdVORErea7QKM8cHAPn
xVuSiKdW/RbIghcgQKJcBjpQfhAh5uUuD5bmOxW1x5bulbKxd0Z2dMUPBkB9Wc1g
4aH2xdgw6GA/3OYXRKtDfVCVEynw3xAe2kL/8j2d+2Gzt1vejRqDkxnzCnZPIUr+
x44meSSmRGe3UwCNBpR6xEfL0M+OZSyD0CKVnTkf7QApNvXQV1Gv4WEs7vX8UoB0
OkqBrHzGgysQav8FaShfH49qQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHanJT74
9jqW5ZWAHdubOeOUMsKFMB8GA1UdIwQYMBaAFGaRq+waRv280mB8TfF6VM4zNMIS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUUzRi9EOEM1MUFDQTVD
RjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19ielNZSHhOOFhwVXpqTTB3
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pwR3I3QnBHX2J6U1lIeE44WHBVempNMHdoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OUUzRi9EOEM1MUFDQTVDRjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19i
elNZSHhOOFhwVXpqTTB3aEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXoHNjYuRbElQXxRBmMPz+Gb6eWJoz5F+24JILhsIf7bl/S9zSELVKkODNU2N
Q8JMhGilucRtZC0s6XpYVPIisa1SWaEvQ28Azdz3aVPfFxa3QvUzlp6Z9CswsAMi
/Mfv90YSe2tPyUuiJoyv7UVKmK7hbfUQktaacPMva+lmaZRQ2gJi/2sCkNx7Rwzy
n2uRXYbUURxBO66RzCoOKy/vScJKIqK17Upc+xCy55Opoiw9RjfqewKu2NBuKl4/
P+7eyVj+TmliKRgx78Gij99o3vKMFOB/UnLxyNzLgqjp9W/bBcZver/6ELwwiz+H
fERZH5DNAUmHRJjAdcQLXqPLJw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:43:16 2026 by rpki-client