
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft
File: z0HNr0HFcAEpBkzvKEADvvC5v8I.mft (raw, json)
Hash identifier: DQr+v6S5N1LTFcA43aMHd8ilpqYB3G5qwkJIKisKMBQ=
Subject key identifier: CF:46:C7:EE:27:DA:93:8A:BD:25:63:77:2A:B4:6A:3F:25:9C:6A:62
Authority key identifier: CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2
Certificate issuer: /CN=A91C0D37/serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2
Certificate serial: 0242
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft
Manifest number: 021F
Signing time: Wed 29 Jul 2026 03:57:24 +0000
Manifest this update: Wed 29 Jul 2026 03:57:24 +0000
Manifest next update: Wed 05 Aug 2026 03:57:24 +0000
Files and hashes: 1: z0HNr0HFcAEpBkzvKEADvvC5v8I.crl (hash: N+N+5C3y8i36wK0fD8bzUoud8IMVA0eDubo4GdMCdS8=)
2: 00FEEFF0536911EE8594503BC4F9AE02.roa (hash: YiI4BDI+YEuyMJJzNPPm+NOvEBL4ZLRtDOzUj0P1mAQ=)
3: C85D80CE43F611EF84151D6FC4F9AE02.roa (hash: DT8F2vSiTnDZ92tEugXg46ga5AYrQXf1PZTpjRK3m7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl
rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 03:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 578 (0x242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0D37, serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2
Validity
Not Before: Jul 29 03:57:24 2026 GMT
Not After : Aug 5 03:57:24 2026 GMT
Subject: CN=6a697a24-ed9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:f8:d8:d7:e7:54:12:59:39:67:c2:2c:51:
c2:12:9c:05:cd:d4:b7:e6:a5:a2:43:32:9c:19:b1:
fb:b7:28:32:46:e3:dd:a0:3a:a5:3e:a6:ec:27:95:
0c:3b:a5:a4:61:ee:3b:ff:41:90:d1:d4:26:67:be:
a5:9f:76:c9:a2:d7:22:07:7c:9d:a7:8e:56:bd:0f:
9b:3b:b5:60:27:73:e7:72:1d:f7:74:20:58:44:8d:
60:fb:85:f3:74:25:91:13:3e:cc:ed:9b:2f:51:be:
f7:4c:7f:26:c1:da:5c:0f:ee:61:b6:47:b7:73:cc:
35:14:6b:34:0c:fb:31:54:66:d4:f2:e0:0d:e3:e0:
9a:50:01:64:1c:49:87:e3:67:d1:6f:34:ab:18:11:
83:f9:e2:22:49:a4:22:12:8d:9b:c8:e6:c5:64:2e:
1f:99:3a:ae:bd:3b:ff:b4:f7:c0:56:14:e3:f2:55:
ef:93:fb:c9:97:9b:02:46:59:3f:b5:67:bd:2f:a4:
03:24:1b:fa:b1:f0:49:33:05:3c:f2:83:b6:0c:a5:
82:fd:b4:fc:9b:13:a6:03:a4:92:55:4b:4e:6a:83:
ba:93:45:97:5a:65:dc:66:79:4b:1b:94:ec:ab:57:
a3:f4:11:8c:41:8b:f2:c2:9d:65:de:e4:65:62:64:
24:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:46:C7:EE:27:DA:93:8A:BD:25:63:77:2A:B4:6A:3F:25:9C:6A:62
X509v3 Authority Key Identifier:
keyid:CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4f:cf:f2:fb:80:05:ba:68:04:6d:5f:d0:a4:77:fe:60:58:
1b:ce:0b:c8:14:75:ff:95:95:40:7e:b1:23:6d:7f:0a:2a:61:
d9:d0:df:da:15:90:f2:59:f0:a1:b8:dd:34:f4:a3:ee:95:53:
44:9f:15:c0:45:23:25:1c:8f:47:80:1a:38:0c:68:d6:b7:ac:
49:10:a1:60:d6:cf:37:2a:bc:79:db:a0:4a:af:a6:53:e9:a4:
77:69:c7:e6:26:d1:77:8a:b3:e3:8e:e9:29:89:a9:d8:87:3a:
dd:a0:35:7a:0a:bd:8c:de:9f:24:2f:eb:9a:eb:41:97:0d:0c:
b8:15:16:1b:ca:7d:c1:3f:ff:ed:28:6a:9f:82:00:35:fe:81:
23:d3:ee:97:f8:61:30:cc:65:ed:82:9f:29:eb:36:d1:90:45:
e5:74:66:f9:4f:3b:5d:ef:fa:8d:2e:3c:f9:eb:9d:d4:17:13:
51:fa:40:7d:bd:0a:7c:01:6a:88:42:64:be:1b:1d:54:a7:a8:
63:f6:47:93:20:a8:52:62:9b:bb:c5:13:3b:06:d7:3a:ac:36:
d2:6e:94:a3:d3:a6:49:13:2b:8a:cf:6e:9d:f6:90:f7:a3:0b:
12:ea:da:94:f3:20:7b:ce:b4:cc:8c:e5:c5:c9:81:6d:fe:45:
2b:5f:1a:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBEMzcxMTAvBgNVBAUTKENGNDFDREFGNDFDNTcwMDEyOTA2NENFRjI4NDAwM0JF
RjBCOUJGQzIwHhcNMjYwNzI5MDM1NzI0WhcNMjYwODA1MDM1NzI0WjAYMRYwFAYD
VQQDEw02YTY5N2EyNC1lZDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAurD42NfnVBJZOWfCLFHCEpwFzdS35qWiQzKcGbH7tygyRuPdoDqlPqbsJ5UM
O6WkYe47/0GQ0dQmZ76ln3bJotciB3ydp45WvQ+bO7VgJ3Pnch33dCBYRI1g+4Xz
dCWREz7M7ZsvUb73TH8mwdpcD+5htke3c8w1FGs0DPsxVGbU8uAN4+CaUAFkHEmH
42fRbzSrGBGD+eIiSaQiEo2byObFZC4fmTquvTv/tPfAVhTj8lXvk/vJl5sCRlk/
tWe9L6QDJBv6sfBJMwU88oO2DKWC/bT8mxOmA6SSVUtOaoO6k0WXWmXcZnlLG5Ts
q1ej9BGMQYvywp1l3uRlYmQk/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM9Gx+4n
2pOKvSVjdyq0aj8lnGpiMB8GA1UdIwQYMBaAFM9Bza9BxXABKQZM7yhAA77wub/C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wRThCQ0IzODUz
NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNBRXBCa3p2S0VBRHZ2QzV2
OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3owSE5yMEhGY0FFcEJrenZLRUFEdnZDNXY4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MEQzNy8wRThCQ0IzODUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNB
RXBCa3p2S0VBRHZ2QzV2OEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAek/P8vuABbpoBG1f0KR3/mBYG84LyBR1/5WVQH6xI21/Ciph2dDf2hWQ8lnw
objdNPSj7pVTRJ8VwEUjJRyPR4AaOAxo1resSRChYNbPNyq8edugSq+mU+mkd2nH
5ibRd4qz447pKYmp2Ic63aA1egq9jN6fJC/rmutBlw0MuBUWG8p9wT//7Shqn4IA
Nf6BI9Pul/hhMMxl7YKfKes20ZBF5XRm+U87Xe/6jS48+eud1BcTUfpAfb0KfAFq
iEJkvhsdVKeoY/ZHkyCoUmKbu8UTOwbXOqw20m6Uo9OmSRMris9unfaQ96MLEura
lPMge860zIzlxcmBbf5FK18aRw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:06:13 2026 by rpki-client