
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
File: Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft (raw, json)
Hash identifier: MaO5B8Hok7l/QP6/F7/5C4W7/yNMGPaDI7O3VJp1q5U=
Subject key identifier: 44:A8:77:94:78:D1:BF:32:03:27:D8:75:D2:55:2B:8F:B4:C7:A5:2B
Authority key identifier: 66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A
Certificate issuer: /CN=A91C146D/serialNumber=664E59A000B91E72F803E6D86841154C8056B88A
Certificate serial: 0111
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
Manifest number: 0108
Signing time: Wed 29 Jul 2026 07:33:31 +0000
Manifest this update: Wed 29 Jul 2026 07:33:30 +0000
Manifest next update: Wed 05 Aug 2026 07:33:30 +0000
Files and hashes: 1: Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl (hash: LGmCRijXwOP42uVQNTNytXjiBC9dtYhGdhfBXosx6MI=)
2: 992A7358004211F0AC90656CC4F9AE02.roa (hash: p1iNzs7m8iHrfQ8AnJhFGKvDY9F4t1QWaHIUzSsJTWE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl
rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 06:58:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C146D, serialNumber=664E59A000B91E72F803E6D86841154C8056B88A
Validity
Not Before: Jul 29 07:33:30 2026 GMT
Not After : Aug 5 07:33:30 2026 GMT
Subject: CN=6a69accb-3876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6a:b4:f5:b8:b5:e6:f0:21:98:87:a3:77:0c:
b7:db:a4:83:a1:b9:70:df:21:68:d0:d0:f0:e6:0e:
1d:14:36:81:96:c1:86:3b:d2:d8:63:6a:21:48:fb:
d4:0a:e1:a3:9f:96:58:3a:d1:41:ab:13:ab:5c:55:
55:d7:8f:8f:b0:62:e7:a5:0b:49:ea:c0:a0:cf:59:
25:0e:ec:d0:4a:43:88:34:56:40:e5:91:43:34:f6:
2b:e9:d0:02:35:2e:9c:2c:cf:e5:22:32:c6:8b:9b:
cd:34:7c:e7:83:81:6b:54:f8:a7:6a:ec:9e:74:f0:
20:af:19:60:80:ff:b5:9c:30:ce:e6:85:a4:21:09:
50:d4:f2:01:c9:a9:a6:12:0e:1a:6f:5c:fd:d9:de:
4b:99:d8:34:52:ad:c1:eb:cd:b8:48:08:5b:7d:6f:
77:74:d8:36:8b:c5:e4:5c:d3:f7:ed:40:28:b4:26:
2d:77:66:23:b5:84:3a:ac:66:2f:36:26:1d:b5:14:
d3:f3:c4:f6:b7:02:b9:40:ed:22:db:24:75:b1:76:
a3:1a:f8:57:aa:be:36:54:95:ce:06:84:3c:fe:42:
45:92:dc:0c:04:f7:cb:e5:18:fc:d2:6c:0c:91:6d:
84:c2:5f:d9:b2:ae:86:04:dc:1e:97:b3:f6:be:8a:
bd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A8:77:94:78:D1:BF:32:03:27:D8:75:D2:55:2B:8F:B4:C7:A5:2B
X509v3 Authority Key Identifier:
keyid:66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e3:ff:55:83:dc:69:33:6a:a1:d8:65:cc:5a:5a:8c:12:3a:
b7:90:00:14:3e:2b:d3:00:34:a6:29:ec:0b:9c:b9:ba:6d:49:
4d:5f:9b:2e:39:8c:52:59:16:ac:f6:9d:c7:c9:9f:71:f3:01:
33:b3:ce:93:9b:20:06:3e:df:12:13:7c:78:51:d5:ee:71:aa:
d0:d6:b7:a6:20:99:53:30:2e:86:e1:5c:ff:72:b1:5e:0d:30:
ee:b5:97:ce:48:41:ea:8c:dc:f8:66:e3:70:6d:3d:69:4a:23:
47:f8:25:18:3d:66:46:58:c6:95:2b:66:9b:08:ff:f6:0b:af:
a4:62:a3:f2:75:5a:20:d7:7c:c4:f5:56:08:c9:76:92:0a:d0:
3e:a2:a8:ef:e3:42:b7:8b:98:ba:4e:df:a6:f4:c5:9a:db:aa:
35:4e:24:4c:a9:eb:bd:4a:bb:75:51:08:c7:35:9d:94:29:9f:
ce:ca:51:9e:01:87:f0:70:e4:e2:9e:b7:20:98:c4:17:d5:99:
68:9b:ae:3b:39:c0:df:84:8e:8a:a0:99:95:f2:8d:5f:b7:0c:
83:d3:4b:3c:d0:95:02:0c:30:b8:ff:74:22:dd:45:8c:31:4f:
5b:b1:13:6d:ab:61:24:3e:76:b8:fb:75:72:cd:67:21:2a:aa:
6e:2e:f2:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE0NkQxMTAvBgNVBAUTKDY2NEU1OUEwMDBCOTFFNzJGODAzRTZEODY4NDExNTRD
ODA1NkI4OEEwHhcNMjYwNzI5MDczMzMwWhcNMjYwODA1MDczMzMwWjAYMRYwFAYD
VQQDEw02YTY5YWNjYi0zODc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArGq09bi15vAhmIejdwy326SDoblw3yFo0NDw5g4dFDaBlsGGO9LYY2ohSPvU
CuGjn5ZYOtFBqxOrXFVV14+PsGLnpQtJ6sCgz1klDuzQSkOINFZA5ZFDNPYr6dAC
NS6cLM/lIjLGi5vNNHzng4FrVPinauyedPAgrxlggP+1nDDO5oWkIQlQ1PIByamm
Eg4ab1z92d5Lmdg0Uq3B6824SAhbfW93dNg2i8XkXNP37UAotCYtd2YjtYQ6rGYv
NiYdtRTT88T2twK5QO0i2yR1sXajGvhXqr42VJXOBoQ8/kJFktwMBPfL5Rj80mwM
kW2Ewl/Zsq6GBNwel7P2voq9AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFESod5R4
0b8yAyfYddJVK4+0x6UrMB8GA1UdIwQYMBaAFGZOWaAAuR5y+APm2GhBFUyAVriK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTQ2RC9FQ0IwMEI0MjAw
MzcxMUYwQkJENzI0NzVDNEY5QUUwMi9aazVab0FDNUhuTDRBLWJZYUVFVlRJQld1
SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1prNVpvQUM1SG5MNEEtYllhRUVWVElCV3VJby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MTQ2RC9FQ0IwMEI0MjAwMzcxMUYwQkJENzI0NzVDNEY5QUUwMi9aazVab0FDNUhu
TDRBLWJZYUVFVlRJQld1SW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHuP/VYPcaTNqodhlzFpajBI6t5AAFD4r0wA0pinsC5y5um1JTV+bLjmMUlkW
rPadx8mfcfMBM7POk5sgBj7fEhN8eFHV7nGq0Na3piCZUzAuhuFc/3KxXg0w7rWX
zkhB6ozc+GbjcG09aUojR/glGD1mRljGlStmmwj/9guvpGKj8nVaINd8xPVWCMl2
kgrQPqKo7+NCt4uYuk7fpvTFmtuqNU4kTKnrvUq7dVEIxzWdlCmfzspRngGH8HDk
4p63IJjEF9WZaJuuOznA34SOiqCZlfKNX7cMg9NLPNCVAgwwuP90It1FjDFPW7ET
bathJD52uPt1cs1nISqqbi7yoA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:49:59 2026 by rpki-client