
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
File: zl8rQ5utW-vicqch6qzDj6rdSbQ.mft (raw, json)
Hash identifier: 0lKjxpjdftYZZ2MTGvEM3j8tPUDyc7e1shNvMaKfKzg=
Subject key identifier: EE:18:88:D2:AF:33:68:02:E8:44:34:0C:EC:2E:14:AA:EC:01:AF:2A
Authority key identifier: CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4
Certificate issuer: /CN=A91AB9A1/serialNumber=CE5F2B439BAD5BEBE272A721EAACC38FAADD49B4
Certificate serial: 06F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
Manifest number: 06F6
Signing time: Thu 16 Apr 2026 14:40:01 +0000
Manifest this update: Thu 16 Apr 2026 14:40:01 +0000
Manifest next update: Thu 23 Apr 2026 14:40:01 +0000
Files and hashes: 1: zl8rQ5utW-vicqch6qzDj6rdSbQ.crl (hash: XJihcYqfaT9nxNG3irm2iBzFwam7pWqhos7W6NuD+TM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.crl
rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:40:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1782 (0x6f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB9A1, serialNumber=CE5F2B439BAD5BEBE272A721EAACC38FAADD49B4
Validity
Not Before: Apr 16 14:40:01 2026 GMT
Not After : Apr 23 14:40:01 2026 GMT
Subject: CN=69e0f4c1-c765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3e:8c:41:0b:35:4f:8a:5e:66:e8:aa:18:5f:
e1:03:16:f6:9b:39:6c:0c:47:e2:06:2b:37:82:f4:
81:6a:34:4f:fa:72:f6:7c:af:70:7c:61:78:1d:ce:
02:1c:11:89:14:28:49:44:88:0f:18:4e:f8:83:fd:
61:18:9c:3e:30:84:7b:a4:79:7e:c0:00:fe:95:b8:
e7:3b:43:cb:53:30:d4:77:29:0d:6f:2c:f1:2e:40:
61:81:ba:80:15:93:50:a5:45:2a:90:e1:2a:79:ee:
72:3e:6b:6a:ab:62:05:92:99:89:8a:9a:1e:24:d0:
5b:77:a9:c5:78:85:85:8c:02:da:7f:3c:3e:ba:73:
a9:90:a3:a7:0a:c9:8d:b1:af:ee:e8:02:a3:b3:9f:
27:9f:4c:2a:84:e4:73:3c:28:53:41:a9:8d:67:e1:
d7:64:6d:46:5b:c4:a8:e3:3f:78:db:ba:64:aa:22:
6d:a0:d4:e0:94:ac:04:43:0c:73:be:98:a9:37:ba:
9c:92:13:ba:e6:a4:60:eb:02:1a:f7:d5:52:bb:15:
06:93:09:19:b1:85:32:39:8a:88:78:71:5a:8b:13:
6a:38:d1:c1:83:2a:42:d4:3c:35:1c:84:fc:dc:83:
15:07:6f:b6:d9:b4:61:0a:a3:36:5f:b6:ce:f1:1c:
dd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:18:88:D2:AF:33:68:02:E8:44:34:0C:EC:2E:14:AA:EC:01:AF:2A
X509v3 Authority Key Identifier:
keyid:CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:33:08:b2:0a:63:c9:8c:59:43:34:11:fe:32:27:fb:07:01:
e3:83:24:07:a5:75:ec:64:f3:a1:72:f5:6a:fc:51:c6:9d:18:
1b:76:4f:df:a2:48:f3:15:f6:a2:8c:94:9a:c6:57:9d:6d:3c:
99:ac:b7:44:94:43:d3:92:df:56:61:fd:b0:ba:ea:74:33:ef:
ad:50:b1:41:22:85:0a:01:c3:f5:a3:40:7d:76:e7:4f:7b:49:
3d:3d:ef:26:4f:8a:f6:aa:db:e6:43:e7:62:61:80:a9:60:0f:
40:58:89:b0:22:ca:32:da:16:ec:f1:cd:e5:ab:e9:b4:85:1c:
89:7c:d6:bd:3a:4b:86:56:fc:d1:c2:4e:97:7a:a1:a8:c6:3f:
c7:90:80:43:78:bc:91:0a:54:ad:f0:f3:c0:bf:a3:8e:08:56:
2b:94:3f:6a:0f:ed:d6:d9:55:67:31:2c:92:93:75:06:8a:18:
6c:ce:f8:a2:7b:22:d4:d0:83:ce:42:8c:0f:89:4b:ca:7a:0b:
2c:cc:c4:0f:7b:68:4d:b1:8b:f7:34:29:aa:97:90:75:8a:2d:
f5:4e:31:bd:0d:f7:cb:79:bf:dd:16:35:23:c6:34:f1:9c:25:
5d:16:6e:9f:9e:70:42:ea:d4:0e:50:bf:0d:f6:19:76:9a:fb:
1c:9d:70:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUI5QTExMTAvBgNVBAUTKENFNUYyQjQzOUJBRDVCRUJFMjcyQTcyMUVBQUNDMzhG
QUFERDQ5QjQwHhcNMjYwNDE2MTQ0MDAxWhcNMjYwNDIzMTQ0MDAxWjAYMRYwFAYD
VQQDEw02OWUwZjRjMS1jNzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0z6MQQs1T4peZuiqGF/hAxb2mzlsDEfiBis3gvSBajRP+nL2fK9wfGF4Hc4C
HBGJFChJRIgPGE74g/1hGJw+MIR7pHl+wAD+lbjnO0PLUzDUdykNbyzxLkBhgbqA
FZNQpUUqkOEqee5yPmtqq2IFkpmJipoeJNBbd6nFeIWFjALafzw+unOpkKOnCsmN
sa/u6AKjs58nn0wqhORzPChTQamNZ+HXZG1GW8So4z9427pkqiJtoNTglKwEQwxz
vpipN7qckhO65qRg6wIa99VSuxUGkwkZsYUyOYqIeHFaixNqONHBgypC1Dw1HIT8
3IMVB2+22bRhCqM2X7bO8RzdkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO4YiNKv
M2gC6EQ0DOwuFKrsAa8qMB8GA1UdIwQYMBaAFM5fK0ObrVvr4nKnIeqsw4+q3Um0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjlBMS81NzMzN0FDQThE
NzkxMUVCOEQ4QkQ2MEJDNEY5QUUwMi96bDhyUTV1dFctdmljcWNoNnF6RGo2cmRT
YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3psOHJRNXV0Vy12aWNxY2g2cXpEajZyZFNiUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjlBMS81NzMzN0FDQThENzkxMUVCOEQ4QkQ2MEJDNEY5QUUwMi96bDhyUTV1dFct
dmljcWNoNnF6RGo2cmRTYlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUjMIsgpjyYxZQzQR/jIn+wcB44MkB6V17GTzoXL1avxRxp0YG3ZP36JI8xX2
ooyUmsZXnW08may3RJRD05LfVmH9sLrqdDPvrVCxQSKFCgHD9aNAfXbnT3tJPT3v
Jk+K9qrb5kPnYmGAqWAPQFiJsCLKMtoW7PHN5avptIUciXzWvTpLhlb80cJOl3qh
qMY/x5CAQ3i8kQpUrfDzwL+jjghWK5Q/ag/t1tlVZzEskpN1BooYbM74onsi1NCD
zkKMD4lLynoLLMzED3toTbGL9zQpqpeQdYot9U4xvQ33y3m/3RY1I8Y08ZwlXRZu
n55wQurUDlC/DfYZdpr7HJ1wYw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:22:15 2026 by rpki-client