
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
File: rzCJXc48ZcI77FTLCJhY66Fhic4.mft (raw, json)
Hash identifier: ey/s1E1WBv63tUNfzYjw6g4X5TnSk+6rEzz9p2ATMTU=
Subject key identifier: D7:18:C6:02:77:8D:21:D1:1E:92:26:B8:74:A3:E8:14:8D:A6:AC:DD
Authority key identifier: AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE
Certificate issuer: /CN=A91CA294/serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE
Certificate serial: A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
Manifest number: 9F
Signing time: Mon 27 Jul 2026 09:30:06 +0000
Manifest this update: Mon 27 Jul 2026 09:30:05 +0000
Manifest next update: Mon 03 Aug 2026 09:30:05 +0000
Files and hashes: 1: rzCJXc48ZcI77FTLCJhY66Fhic4.crl (hash: 69J+WUttVPj6kUzFUzYZqLU8tbI5wDi6bAlYgZxP/7o=)
2: 7CCBF066A2F811F09235B919C4F9AE02.roa (hash: L2xc97rBOEo7wGTXyTU4krqEAbLPgvd1QpBdIvhLYmA=)
3: 44D1A4E69DAB11F0A7401064C4F9AE02.roa (hash: /dWw78lmDvPsrlgqtDvPWypN8cQFZwkLxuNHhkdxFFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl
rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA294, serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE
Validity
Not Before: Jul 27 09:30:05 2026 GMT
Not After : Aug 3 09:30:05 2026 GMT
Subject: CN=6a67251d-826d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d5:6c:ab:56:51:a0:42:b1:28:9b:16:25:be:
71:af:e7:d3:ac:05:62:18:24:c4:73:bf:f8:e0:c1:
96:a4:79:e3:87:2a:da:51:96:8f:47:a4:d3:a1:77:
ab:fd:df:9e:6c:1d:53:c6:4d:be:50:c0:2a:ca:78:
e0:a3:96:b6:46:22:ff:8d:00:1f:fe:75:8a:38:12:
a4:73:45:23:c5:b8:d9:b6:0f:b0:7f:e7:40:eb:e2:
a7:5b:95:0e:d5:48:1d:59:1b:7d:6d:89:c4:cb:aa:
35:bb:46:9e:73:ca:8e:40:e5:d4:bd:38:c4:3d:98:
6e:cd:e3:dc:42:2a:4d:fe:f7:7c:69:b5:21:a1:16:
d6:fe:5a:65:da:38:30:fd:c9:a7:00:96:ea:53:02:
0a:7c:55:50:d7:8f:76:8e:66:44:18:94:65:b0:60:
44:39:14:31:d1:b8:98:c7:3e:75:b9:44:da:d7:ee:
a4:b3:f5:fc:ba:76:ce:48:c2:df:26:47:e4:05:da:
f7:fd:e4:1d:42:a1:19:f0:f6:8b:26:8f:f0:d0:6b:
6a:ff:a8:a7:0c:aa:e4:4d:cf:33:cf:9c:83:07:62:
0a:f0:45:c8:de:86:22:ea:80:e1:a7:b8:14:3d:8a:
dc:e9:bb:65:40:a1:1e:cb:64:b5:b1:44:aa:25:d5:
af:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:18:C6:02:77:8D:21:D1:1E:92:26:B8:74:A3:E8:14:8D:A6:AC:DD
X509v3 Authority Key Identifier:
keyid:AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b6:cf:90:4c:b8:7c:e4:39:eb:a5:90:85:e6:07:bf:fa:8d:
c6:b0:94:78:9a:33:a4:fe:e3:52:31:dd:18:7a:58:7a:6e:3f:
ce:e8:84:ef:ed:64:a8:53:30:46:61:55:ff:98:3c:50:79:ac:
7c:b8:ee:f8:7a:bb:6c:b6:d4:8a:4e:e1:61:d9:60:3f:ca:5a:
6d:d0:f6:cd:53:a8:47:59:13:bd:46:8a:a7:0e:01:bf:e7:69:
a5:6a:26:81:07:01:97:60:61:9e:40:65:e6:77:73:f6:6c:a0:
a8:b3:79:61:a1:26:86:a0:b8:42:cd:fd:d2:87:ab:4d:5b:7b:
6f:9c:4e:98:17:c3:06:c9:b1:a9:d5:c3:b6:9b:46:8f:71:a9:
0f:84:92:f1:b6:dd:fc:d5:7f:06:51:1c:0a:6b:ab:8f:4b:ed:
ff:2b:83:5b:1a:84:72:ac:67:6b:07:3f:36:bb:e4:9a:d4:4b:
8e:04:ae:64:8f:9f:2b:3a:6a:a2:f9:37:37:c6:5f:1a:fc:1b:
83:5a:19:ac:16:5f:04:fa:06:9b:91:d3:d5:e2:8c:4a:b9:9d:
9f:c0:d8:6c:65:89:82:da:56:a9:f4:44:a8:bf:8e:e9:84:83:
4a:f1:66:47:6f:0e:0f:6d:f4:ac:3c:28:b0:de:be:20:8f:e9:
63:7d:45:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0EyOTQxMTAvBgNVBAUTKEFGMzA4OTVEQ0UzQzY1QzIzQkVDNTRDQjA4OTg1OEVC
QTE2MTg5Q0UwHhcNMjYwNzI3MDkzMDA1WhcNMjYwODAzMDkzMDA1WjAYMRYwFAYD
VQQDEw02YTY3MjUxZC04MjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAgtVsq1ZRoEKxKJsWJb5xr+fTrAViGCTEc7/44MGWpHnjhyraUZaPR6TToXer
/d+ebB1Txk2+UMAqynjgo5a2RiL/jQAf/nWKOBKkc0UjxbjZtg+wf+dA6+KnW5UO
1UgdWRt9bYnEy6o1u0aec8qOQOXUvTjEPZhuzePcQipN/vd8abUhoRbW/lpl2jgw
/cmnAJbqUwIKfFVQ1492jmZEGJRlsGBEORQx0biYxz51uUTa1+6ks/X8unbOSMLf
JkfkBdr3/eQdQqEZ8PaLJo/w0Gtq/6inDKrkTc8zz5yDB2IK8EXI3oYi6oDhp7gU
PYrc6btlQKEey2S1sUSqJdWvoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNcYxgJ3
jSHRHpImuHSj6BSNpqzdMB8GA1UdIwQYMBaAFK8wiV3OPGXCO+xUywiYWOuhYYnO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTI5NC9DN0FGQTZBMjlE
QUExMUYwOTY0MjBCNjNDNEY5QUUwMi9yekNKWGM0OFpjSTc3RlRMQ0poWTY2Rmhp
YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3J6Q0pYYzQ4WmNJNzdGVExDSmhZNjZGaGljNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QTI5NC9DN0FGQTZBMjlEQUExMUYwOTY0MjBCNjNDNEY5QUUwMi9yekNKWGM0OFpj
STc3RlRMQ0poWTY2RmhpYzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHrbPkEy4fOQ566WQheYHv/qNxrCUeJozpP7jUjHdGHpYem4/zuiE7+1kqFMw
RmFV/5g8UHmsfLju+Hq7bLbUik7hYdlgP8pabdD2zVOoR1kTvUaKpw4Bv+dppWom
gQcBl2BhnkBl5ndz9mygqLN5YaEmhqC4Qs390oerTVt7b5xOmBfDBsmxqdXDtptG
j3GpD4SS8bbd/NV/BlEcCmurj0vt/yuDWxqEcqxnawc/NrvkmtRLjgSuZI+fKzpq
ovk3N8ZfGvwbg1oZrBZfBPoGm5HT1eKMSrmdn8DYbGWJgtpWqfREqL+O6YSDSvFm
R28OD230rDwosN6+II/pY31FxA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:32 2026 by rpki-client