
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
File: MZfydASVOdoqReLMBqpcyHTmJ28.mft (raw, json)
Hash identifier: jxVo7NGaA3rTRY6AT74KcR8QC4xwG3crc7W6zxNPI3Q=
Subject key identifier: 3A:87:16:EF:F9:A6:D5:6D:E6:0A:65:8C:8C:FA:97:CA:CF:B9:55:C7
Authority key identifier: 31:97:F2:74:04:95:39:DA:2A:45:E2:CC:06:AA:5C:C8:74:E6:27:6F
Certificate issuer: /CN=A919BF94/serialNumber=3197F274049539DA2A45E2CC06AA5CC874E6276F
Certificate serial: 35
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZfydASVOdoqReLMBqpcyHTmJ28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
Manifest number: 35
Signing time: Mon 21 Sep 2026 08:35:16 +0000
Manifest this update: Mon 21 Sep 2026 08:35:16 +0000
Manifest next update: Mon 28 Sep 2026 08:35:16 +0000
Files and hashes: 1: MZfydASVOdoqReLMBqpcyHTmJ28.crl (hash: 3KjXR07b19V/mEaYv7M+zo3F13YFumKzD83nDAEhSns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.crl
rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZfydASVOdoqReLMBqpcyHTmJ28.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:35:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BF94, serialNumber=3197F274049539DA2A45E2CC06AA5CC874E6276F
Validity
Not Before: Sep 21 08:35:16 2026 GMT
Not After : Sep 28 08:35:16 2026 GMT
Subject: CN=6ab0ec44-4876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1c:cc:34:fe:64:99:8f:76:1e:9e:e9:31:7c:
5f:df:0a:1e:6b:30:0c:0d:a7:40:07:3d:84:27:e0:
b8:db:50:91:6b:4d:a5:84:30:71:20:2e:4f:ef:94:
63:b5:da:da:0d:b4:b7:6b:51:42:dc:ea:7f:49:e4:
c3:03:76:5f:00:aa:1a:1e:2a:81:25:90:45:96:2b:
c5:93:b5:d3:0e:57:1f:0a:e2:47:18:46:99:6c:37:
d6:fe:22:5a:53:4a:71:40:f9:08:48:49:1f:ff:d4:
50:89:3b:d1:48:e9:2a:5d:7c:7b:78:fe:a2:e1:30:
99:fd:66:b9:8c:54:37:7a:c2:ea:ad:1f:66:55:b1:
73:9a:29:83:e3:11:44:5d:3f:b4:19:63:f7:1c:fd:
77:8c:e9:ba:40:61:ed:15:b5:c5:9e:c7:6e:2a:24:
44:ad:24:26:e4:cb:6b:83:2b:e6:eb:a3:32:8b:64:
3f:1d:45:eb:a2:af:10:28:43:75:a5:8f:2d:1e:83:
f6:56:b5:f2:83:59:4c:a3:fb:33:06:c1:f3:32:1e:
e5:19:c2:9f:44:8c:79:81:a9:91:a0:53:17:ee:cf:
22:a2:88:8a:b3:09:99:f9:73:2d:49:f1:59:dc:ff:
a6:7b:a3:bf:02:9f:ec:77:ee:b9:74:7c:4f:9d:7f:
f9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:87:16:EF:F9:A6:D5:6D:E6:0A:65:8C:8C:FA:97:CA:CF:B9:55:C7
X509v3 Authority Key Identifier:
keyid:31:97:F2:74:04:95:39:DA:2A:45:E2:CC:06:AA:5C:C8:74:E6:27:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZfydASVOdoqReLMBqpcyHTmJ28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:9b:e1:ee:b7:b5:de:44:b9:2c:b7:32:76:aa:01:56:25:49:
f7:64:b8:71:1c:41:69:a4:4d:64:51:bb:8e:d7:29:a3:09:76:
5c:c0:13:f2:13:82:f9:39:b4:a7:01:0b:a6:91:c3:5f:be:97:
84:13:77:41:d0:8d:18:1b:49:4f:69:4d:c8:b6:bd:38:c1:54:
d3:47:0b:11:81:9d:b8:93:1c:95:48:eb:af:f2:f4:82:cf:4d:
01:78:6e:3a:31:07:b8:57:91:46:a1:e4:a5:3c:27:07:40:a0:
d0:c2:1c:28:84:93:d9:91:5e:12:19:02:5e:58:b5:0b:c8:44:
a7:b2:28:56:44:e9:ad:00:ec:f1:b3:d2:b9:09:3e:9d:70:b2:
59:66:90:7b:ee:1a:2e:da:31:98:fb:ea:8d:7b:73:39:dc:34:
a0:40:38:e0:cb:49:89:9d:d8:76:f7:e8:78:e2:ff:cc:c3:47:
27:a6:8d:4c:1b:f2:c6:95:7c:35:68:dd:d6:4a:a5:0a:47:95:
cc:dd:06:37:67:4e:0c:d8:a4:0e:53:cb:6b:bf:e2:46:9d:32:
c7:96:f0:e0:70:ab:87:d1:2e:59:39:ae:d7:a0:4f:15:e5:8d:
ae:42:0a:5e:ff:d0:52:5a:bd:66:76:22:c2:ed:40:16:e6:7b:
c3:e7:47:11
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
QkY5NDExMC8GA1UEBRMoMzE5N0YyNzQwNDk1MzlEQTJBNDVFMkNDMDZBQTVDQzg3
NEU2Mjc2RjAeFw0yNjA5MjEwODM1MTZaFw0yNjA5MjgwODM1MTZaMBgxFjAUBgNV
BAMTDTZhYjBlYzQ0LTQ4NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDbHMw0/mSZj3YenukxfF/fCh5rMAwNp0AHPYQn4LjbUJFrTaWEMHEgLk/vlGO1
2toNtLdrUULc6n9J5MMDdl8AqhoeKoElkEWWK8WTtdMOVx8K4kcYRplsN9b+IlpT
SnFA+QhISR//1FCJO9FI6SpdfHt4/qLhMJn9ZrmMVDd6wuqtH2ZVsXOaKYPjEURd
P7QZY/cc/XeM6bpAYe0VtcWex24qJEStJCbky2uDK+brozKLZD8dReuirxAoQ3Wl
jy0eg/ZWtfKDWUyj+zMGwfMyHuUZwp9EjHmBqZGgUxfuzyKiiIqzCZn5cy1J8Vnc
/6Z7o78Cn+x37rl0fE+df/lFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOocW7/mm
1W3mCmWMjPqXys+5VccwHwYDVR0jBBgwFoAUMZfydASVOdoqReLMBqpcyHTmJ28w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlCRjk0LzgzNTNFM0YwNjUy
OTExRjE4Qzg2RjhBNzlBRUU1MjhFL01aZnlkQVNWT2RvcVJlTE1CcXBjeUhUbUoy
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvTVpmeWRBU1ZPZG9xUmVMTUJxcGN5SFRtSjI4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlC
Rjk0LzgzNTNFM0YwNjUyOTExRjE4Qzg2RjhBNzlBRUU1MjhFL01aZnlkQVNWT2Rv
cVJlTE1CcXBjeUhUbUoyOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCEm+Hut7XeRLkstzJ2qgFWJUn3ZLhxHEFppE1kUbuO1ymjCXZcwBPyE4L5ObSn
AQumkcNfvpeEE3dB0I0YG0lPaU3Itr04wVTTRwsRgZ24kxyVSOuv8vSCz00BeG46
MQe4V5FGoeSlPCcHQKDQwhwohJPZkV4SGQJeWLULyESnsihWROmtAOzxs9K5CT6d
cLJZZpB77hou2jGY++qNe3M53DSgQDjgy0mJndh29+h44v/Mw0cnpo1MG/LGlXw1
aN3WSqUKR5XM3QY3Z04M2KQOU8trv+JGnTLHlvDgcKuH0S5ZOa7XoE8V5Y2uQgpe
/9BSWr1mdiLC7UAW5nvD50cR
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:12:36 2026 by rpki-client