
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft
File: ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft (raw, json)
Hash identifier: H7ov5lUnrKMD8AFDLm4qYOuOb7W2tMPVMdbRn4lZEsM=
Subject key identifier: 33:E4:76:B6:AE:FA:C3:06:3E:81:6F:F0:55:12:41:74:85:E9:17:00
Authority key identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B
Certificate issuer: /CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B
Certificate serial: 0229
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft
Manifest number: 0209
Signing time: Sat 19 Sep 2026 03:31:30 +0000
Manifest this update: Sat 19 Sep 2026 03:31:29 +0000
Manifest next update: Sat 26 Sep 2026 03:31:29 +0000
Files and hashes: 1: ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl (hash: lw/WgK4jvj7TzG5j/dGDlg7TYAX3MvzskgCVCAgwblU=)
2: F-eGmluoQDcJwZvYQm5uqKBVjuM.asa (hash: SPz1HKfVzTdUzy5CGwKPcxQYeh0C/4QtvqZ//tdMDXk=)
3: 9C457296810A11F1BDF96ABB6CA30FBC.roa (hash: mfMM1rWOREqg0X2Y0BnQVxJe3RdEDQ0y+IePXzNhgjY=)
4: F0FFDBF6686D11F18ACBCE18A247A888.roa (hash: CAMy7JCqCcMBjMFrQ5fn4gzgU0neIkf9oa/fpbxqTn0=)
5: CFB0BEF68F7111EFBF50A331C4F9AE02.roa (hash: d522JtU7ofK+iHBHN7f6Uf/7SL+MFyqmrLpi0e3t3i4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl
rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4E62, serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B
Validity
Not Before: Sep 19 03:31:29 2026 GMT
Not After : Sep 26 03:31:29 2026 GMT
Subject: CN=6aae0212-2cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7d:85:fa:cc:c7:54:72:38:46:8b:4d:ad:ba:
71:09:ec:27:3d:ae:8c:50:ab:3d:5b:9d:25:32:12:
79:2c:e4:31:7b:12:3d:ef:93:59:82:41:94:e4:40:
08:65:f9:6a:35:90:94:43:b4:13:d4:35:17:4f:52:
d6:8c:ed:fd:63:ce:a1:f4:1a:b3:0a:6a:17:a1:c9:
91:62:10:de:c0:6e:8e:1b:4f:b9:a7:b9:e0:6f:f5:
f5:22:75:6c:4a:1f:07:96:93:c3:02:9f:90:73:63:
6d:bb:36:e3:05:31:59:40:3c:30:9f:40:72:c4:9d:
f3:6a:48:de:58:20:ca:27:7c:51:89:94:62:58:a3:
29:c3:b8:ba:35:8c:bb:f2:ef:2a:d8:73:b6:a8:4b:
70:18:e3:5d:c7:72:0c:7d:3f:9a:53:47:c2:5a:85:
fd:16:08:44:98:fb:cc:34:22:f1:a4:82:05:ca:3c:
f3:41:bd:00:5a:5e:59:34:b5:a9:2c:ab:e6:ac:39:
95:5a:ce:99:f5:c8:25:ba:37:1e:c4:a7:17:2d:dd:
50:a6:cc:41:29:0a:a0:ae:b4:b0:0e:68:80:16:5a:
6e:96:3f:7f:79:83:30:85:ec:c1:05:48:e0:6d:30:
cc:ae:64:58:ca:43:1f:e7:45:74:83:83:58:95:69:
71:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E4:76:B6:AE:FA:C3:06:3E:81:6F:F0:55:12:41:74:85:E9:17:00
X509v3 Authority Key Identifier:
keyid:65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:12:4e:47:52:3f:02:48:19:87:43:b6:77:d9:f5:5e:56:1e:
2a:3e:45:14:7e:db:f3:6c:f9:0c:24:c0:f0:b8:51:f2:de:b3:
82:b3:b0:57:dc:7b:0f:b5:be:16:d3:62:b8:35:37:90:10:43:
d7:b4:40:79:18:41:e1:bf:bc:6f:c3:15:f9:b6:57:a9:6e:8f:
ea:02:4e:38:74:05:46:3f:01:76:c7:cf:03:21:c3:ba:e0:fd:
8e:57:f3:4e:3c:e8:2f:84:de:c8:14:01:7d:48:e1:ea:30:cc:
18:99:e5:b7:99:a8:96:6a:67:18:fb:b0:62:ca:71:71:d6:9b:
5d:a9:b2:85:9d:80:c1:57:72:93:99:c1:ea:1d:ad:56:77:97:
0c:a5:7f:03:87:67:d5:90:e4:95:93:01:45:2d:ad:ee:9b:df:
de:12:93:28:69:10:10:bc:30:bf:ff:8f:48:4e:1d:83:c5:02:
0e:20:45:82:23:34:fd:43:f1:63:e3:58:1a:c6:3e:e4:55:d8:
57:5c:89:65:aa:07:ae:1c:a0:d3:68:70:af:44:90:cb:71:38:
7e:6b:34:8a:90:2c:40:4e:e6:a2:01:1e:32:57:2b:48:24:35:
c8:fb:54:39:da:6c:e2:5a:35:26:01:8b:95:f7:f0:5c:8c:c5:
da:08:43:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzRFNjIxMTAvBgNVBAUTKDY1ODA5MTBCNTVGQUU1RkY2MEY3MUVCMjA3MDQ3MEEx
MjYyRTM0M0IwHhcNMjYwOTE5MDMzMTI5WhcNMjYwOTI2MDMzMTI5WjAYMRYwFAYD
VQQDEw02YWFlMDIxMi0yY2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1n2F+szHVHI4RotNrbpxCewnPa6MUKs9W50lMhJ5LOQxexI975NZgkGU5EAI
ZflqNZCUQ7QT1DUXT1LWjO39Y86h9BqzCmoXocmRYhDewG6OG0+5p7ngb/X1InVs
Sh8HlpPDAp+Qc2NtuzbjBTFZQDwwn0ByxJ3zakjeWCDKJ3xRiZRiWKMpw7i6NYy7
8u8q2HO2qEtwGONdx3IMfT+aU0fCWoX9FghEmPvMNCLxpIIFyjzzQb0AWl5ZNLWp
LKvmrDmVWs6Z9cglujcexKcXLd1QpsxBKQqgrrSwDmiAFlpulj9/eYMwhezBBUjg
bTDMrmRYykMf50V0g4NYlWlxywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDPkdrau
+sMGPoFv8FUSQXSF6RcAMB8GA1UdIwQYMBaAFGWAkQtV+uX/YPcesgcEcKEmLjQ7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEU2Mi83MDJBMDI4Q0M5
OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVmOWc5eDZ5QndSd29TWXVO
RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pZQ1JDMVg2NWY5Zzl4NnlCd1J3b1NZdU5Ecy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NEU2Mi83MDJBMDI4Q0M5OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVm
OWc5eDZ5QndSd29TWXVORHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFBJOR1I/AkgZh0O2d9n1XlYeKj5FFH7b82z5DCTA8LhR8t6zgrOwV9x7D7W+
FtNiuDU3kBBD17RAeRhB4b+8b8MV+bZXqW6P6gJOOHQFRj8BdsfPAyHDuuD9jlfz
TjzoL4TeyBQBfUjh6jDMGJnlt5molmpnGPuwYspxcdabXamyhZ2AwVdyk5nB6h2t
VneXDKV/A4dn1ZDklZMBRS2t7pvf3hKTKGkQELwwv/+PSE4dg8UCDiBFgiM0/UPx
Y+NYGsY+5FXYV1yJZaoHrhyg02hwr0SQy3E4fms0ipAsQE7mogEeMlcrSCQ1yPtU
Odps4lo1JgGLlffwXIzF2ghDkg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 17:33:27 2026 by rpki-client