
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
File: RziIJrgc68tdWOukEDkWDSR7wX8.mft (raw, json)
Hash identifier: FRDhNYIwNsoAsCv+qeItwzjttuR2q0/PIj1N4f6PrJ8=
Subject key identifier: 6A:D6:F0:6B:A8:B1:48:71:5E:96:AA:C4:1B:3A:93:A7:B9:9A:7D:D3
Authority key identifier: 47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F
Certificate issuer: /CN=A91B9B37/serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F
Certificate serial: 057E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
Manifest number: 0572
Signing time: Sat 10 Oct 2026 23:23:34 +0000
Manifest this update: Sat 10 Oct 2026 23:23:34 +0000
Manifest next update: Sat 17 Oct 2026 23:23:34 +0000
Files and hashes: 1: RziIJrgc68tdWOukEDkWDSR7wX8.crl (hash: LFq37Xu2FPOEppd/2C4+DxIxfHY6fDA+AMU7mLwZ06c=)
2: 9F0BF8AE48C711ECAA1A222EC4F9AE02.roa (hash: 7bZrgSG4B5h866cUq/RZvg/ZPfRslwl3dn9ZQbuyqgQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl
rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 23:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1406 (0x57e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9B37, serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F
Validity
Not Before: Oct 10 23:23:34 2026 GMT
Not After : Oct 17 23:23:34 2026 GMT
Subject: CN=6acac8f6-eda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f5:2b:f3:d2:98:b7:b7:f1:c6:6f:4d:ff:29:
bb:f5:c0:11:e4:13:d7:10:f6:c2:f1:27:c7:0c:14:
af:b1:d3:d9:1d:67:1f:8d:b1:a6:1c:02:bf:d3:d9:
07:b4:c6:cc:70:fb:9e:1b:cc:a1:0b:b7:dd:38:1c:
1a:f5:3c:32:7f:99:64:28:eb:2e:30:97:82:d1:38:
73:09:32:da:76:e8:81:a6:8a:f8:89:2c:ad:10:d6:
bb:a7:16:d9:6b:66:61:52:35:c8:85:ab:fe:0e:a5:
23:78:0c:2a:72:70:4f:ed:37:29:c3:97:8d:6a:7b:
b8:c8:b1:9e:34:d6:93:f2:37:55:75:da:f6:d8:56:
55:e3:c2:ee:9e:99:e9:4f:38:0b:f1:6a:0c:65:42:
42:da:62:e5:03:31:2c:b6:08:eb:1e:78:8b:02:a8:
8d:80:a1:1b:f3:c7:65:51:32:3f:af:ce:5c:c5:ca:
df:e0:b2:e3:d2:51:e8:9b:25:4a:eb:80:4b:e9:61:
07:fa:38:ce:a7:49:04:4c:7a:7d:d0:0b:68:55:f1:
01:53:71:a4:ba:9a:90:bf:db:c3:3a:c0:c8:01:b8:
66:bf:97:43:49:f5:05:4c:36:f6:84:42:57:33:3a:
de:09:aa:75:6f:3c:02:de:5c:96:a4:29:c8:0b:e1:
9f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D6:F0:6B:A8:B1:48:71:5E:96:AA:C4:1B:3A:93:A7:B9:9A:7D:D3
X509v3 Authority Key Identifier:
keyid:47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:96:f1:f8:05:13:aa:94:9e:6f:8c:65:d7:0c:bc:9b:b1:62:
73:27:43:d2:5d:f9:f7:a8:81:6b:b6:ba:67:d4:42:d2:00:93:
21:91:28:49:49:6d:55:a4:e7:63:bd:4d:f8:d5:23:1f:df:f6:
02:af:3c:72:72:2f:51:09:35:0b:3f:f1:69:38:fc:f0:ab:82:
3a:5b:7d:70:82:cf:3c:c3:ff:0d:ad:92:e3:e9:8a:18:e5:f5:
d7:f6:86:5f:b5:bb:4f:fa:e2:75:c7:c3:c7:e1:e0:c3:70:b3:
2e:30:8c:c1:c4:38:b9:5b:39:47:7f:d0:48:14:15:ef:f9:fc:
13:fc:97:d8:d8:6c:a2:f2:f4:2e:07:f2:28:72:fd:0a:db:78:
3e:9e:46:df:bb:2f:f1:2e:1b:43:58:38:b0:ba:cc:e7:8f:cb:
e3:d9:5d:f9:b3:90:fb:b7:38:ef:6d:f2:6b:10:ca:80:88:80:
13:38:23:d6:ff:49:ab:b7:ab:9a:cb:aa:47:06:3c:32:71:3e:
3e:3b:24:97:4c:9d:9c:73:92:da:91:7a:ce:0e:52:74:e1:73:
eb:dc:1a:f7:da:9a:80:6a:35:b7:63:9e:9b:c6:68:c6:ed:f5:
c1:6d:f1:f0:57:8d:c1:85:57:16:c3:85:51:13:28:ba:cf:b1:
53:c5:bb:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlCMzcxMTAvBgNVBAUTKDQ3Mzg4ODI2QjgxQ0VCQ0I1RDU4RUJBNDEwMzkxNjBE
MjQ3QkMxN0YwHhcNMjYxMDEwMjMyMzM0WhcNMjYxMDE3MjMyMzM0WjAYMRYwFAYD
VQQDEw02YWNhYzhmNi1lZGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo/Ur89KYt7fxxm9N/ym79cAR5BPXEPbC8SfHDBSvsdPZHWcfjbGmHAK/09kH
tMbMcPueG8yhC7fdOBwa9Twyf5lkKOsuMJeC0ThzCTLaduiBpor4iSytENa7pxbZ
a2ZhUjXIhav+DqUjeAwqcnBP7Tcpw5eNanu4yLGeNNaT8jdVddr22FZV48Lunpnp
TzgL8WoMZUJC2mLlAzEstgjrHniLAqiNgKEb88dlUTI/r85cxcrf4LLj0lHomyVK
64BL6WEH+jjOp0kETHp90AtoVfEBU3GkupqQv9vDOsDIAbhmv5dDSfUFTDb2hEJX
MzreCap1bzwC3lyWpCnIC+GflwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGrW8Guo
sUhxXpaqxBs6k6e5mn3TMB8GA1UdIwQYMBaAFEc4iCa4HOvLXVjrpBA5Fg0ke8F/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUIzNy85QzM5QkUxNjQ4
QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4dGRXT3VrRURrV0RTUjd3
WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1J6aUlKcmdjNjh0ZFdPdWtFRGtXRFNSN3dYOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUIzNy85QzM5QkUxNjQ4QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4
dGRXT3VrRURrV0RTUjd3WDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARJbx+AUTqpSeb4xl1wy8m7FicydD0l3596iBa7a6Z9RC0gCTIZEoSUltVaTn
Y71N+NUjH9/2Aq88cnIvUQk1Cz/xaTj88KuCOlt9cILPPMP/Da2S4+mKGOX11/aG
X7W7T/ridcfDx+Hgw3CzLjCMwcQ4uVs5R3/QSBQV7/n8E/yX2NhsovL0LgfyKHL9
Ctt4Pp5G37sv8S4bQ1g4sLrM54/L49ld+bOQ+7c4723yaxDKgIiAEzgj1v9Jq7er
msuqRwY8MnE+Pjskl0ydnHOS2pF6zg5SdOFz69wa99qagGo1t2Oem8Zoxu31wW3x
8FeNwYVXFsOFURMous+xU8W7IA==
-----END CERTIFICATE-----
Generated at Mon Oct 12 20:18:16 2026 by rpki-client