
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft
File: ZPivgeq5CJliFNQ59xFwDp9ItMs.mft (raw, json)
Hash identifier: BB4eeKU4uEQA1GRprr6p7PThIAbn4CjW+pp7EgiCMHA=
Subject key identifier: 3F:6B:73:B0:07:7D:22:93:F5:BC:1A:11:19:25:FD:15:82:6F:53:C4
Authority key identifier: 64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB
Certificate issuer: /CN=A91D5230/serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB
Certificate serial: 08FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft
Manifest number: 08E1
Signing time: Sun 26 Jul 2026 21:02:23 +0000
Manifest this update: Sun 26 Jul 2026 21:02:22 +0000
Manifest next update: Sun 02 Aug 2026 21:02:22 +0000
Files and hashes: 1: ZPivgeq5CJliFNQ59xFwDp9ItMs.crl (hash: 6FbgAGhP+TEF5+4p75X6OxzZKpb6Ucfy+wueOP89uvM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl
rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 21:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2299 (0x8fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5230, serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB
Validity
Not Before: Jul 26 21:02:22 2026 GMT
Not After : Aug 2 21:02:22 2026 GMT
Subject: CN=6a6675df-934a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f7:62:67:cf:1d:da:d3:21:e4:c7:3a:62:84:
c0:b3:52:be:2f:f1:1c:d2:b2:f7:7d:ad:16:e3:eb:
07:c5:fa:33:c0:41:e4:d4:ad:09:f6:fb:6b:7f:b7:
01:03:df:bf:b5:75:86:fd:52:69:73:68:1d:52:b2:
f3:ba:f6:6f:29:3a:d2:9d:57:2f:74:36:d7:cd:86:
92:6c:01:2c:16:11:8d:68:76:93:7e:a6:87:23:6b:
c1:41:53:cf:1d:54:43:f4:98:fa:55:2b:8e:33:a9:
ec:45:68:f2:f2:22:bd:a6:ba:ec:fc:b7:17:50:fe:
6f:0c:ac:9d:33:e7:5b:f6:7f:3d:6b:9b:54:a8:57:
7e:6a:f9:22:af:31:16:1f:69:d0:46:6a:3d:f4:5a:
86:58:f8:d2:36:80:20:11:f6:4c:73:b2:a5:b2:23:
1d:5e:ca:17:ae:9d:d0:c2:29:39:58:e0:d4:21:3b:
05:6a:15:f4:25:3e:b5:b3:83:61:5c:15:43:8c:66:
f0:f0:c9:27:72:3d:24:b7:69:da:19:5e:53:73:bf:
b6:ea:95:45:e9:59:29:4a:93:0a:c2:21:1e:2a:02:
7e:e4:72:8d:ba:d2:76:22:4a:ea:ea:56:c1:a1:2a:
4e:2d:43:28:f7:bb:32:b6:1c:ad:8b:18:b7:12:b9:
08:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6B:73:B0:07:7D:22:93:F5:BC:1A:11:19:25:FD:15:82:6F:53:C4
X509v3 Authority Key Identifier:
keyid:64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:09:d8:8e:95:df:d6:74:ee:0d:79:f4:14:e5:66:78:56:32:
6a:2f:3a:ee:52:48:ba:9e:c8:e3:1b:35:06:a7:78:64:7d:d8:
01:96:0f:e3:5d:a0:88:e9:dd:5b:28:dd:fd:58:dc:bc:d6:63:
8d:43:ca:3a:3b:5d:4b:82:98:14:d6:5a:35:d2:fb:3a:38:96:
04:72:ed:bf:51:81:d7:d7:ce:d8:2c:50:bb:96:8e:d6:ba:66:
ba:28:53:e1:36:bb:24:40:dd:12:79:cc:28:81:68:b2:91:f6:
cc:5a:8e:67:b3:64:6f:49:d1:7e:6e:8f:c3:6c:3f:c5:f2:36:
58:77:bb:46:2c:f5:73:12:b4:65:1a:3a:98:a9:97:b5:c1:ae:
43:40:94:60:c7:78:22:fb:fc:c0:02:da:2b:5f:49:72:9f:ff:
88:d2:25:5e:4e:49:98:a3:78:e5:c9:ef:d8:c6:1c:b2:8b:8b:
14:00:26:40:e8:ba:55:a3:40:49:99:3c:41:62:57:dc:96:66:
4e:08:0b:c0:ea:77:e0:1b:fd:da:0d:0c:d4:d0:55:fc:5a:56:
43:2f:77:b1:62:93:91:c3:11:c4:da:eb:e7:75:b9:ca:0e:3b:
a7:ad:6d:e2:d1:ad:f8:bd:28:f4:a1:b3:cc:05:5e:c8:f9:1f:
7d:b5:ac:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDUyMzAxMTAvBgNVBAUTKDY0RjhBRjgxRUFCOTA4OTk2MjE0RDQzOUY3MTE3MDBF
OUY0OEI0Q0IwHhcNMjYwNzI2MjEwMjIyWhcNMjYwODAyMjEwMjIyWjAYMRYwFAYD
VQQDEw02YTY2NzVkZi05MzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvvdiZ88d2tMh5Mc6YoTAs1K+L/Ec0rL3fa0W4+sHxfozwEHk1K0J9vtrf7cB
A9+/tXWG/VJpc2gdUrLzuvZvKTrSnVcvdDbXzYaSbAEsFhGNaHaTfqaHI2vBQVPP
HVRD9Jj6VSuOM6nsRWjy8iK9prrs/LcXUP5vDKydM+db9n89a5tUqFd+avkirzEW
H2nQRmo99FqGWPjSNoAgEfZMc7KlsiMdXsoXrp3Qwik5WODUITsFahX0JT61s4Nh
XBVDjGbw8Mkncj0kt2naGV5Tc7+26pVF6VkpSpMKwiEeKgJ+5HKNutJ2Ikrq6lbB
oSpOLUMo97sythytixi3ErkI1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD9rc7AH
fSKT9bwaERkl/RWCb1PEMB8GA1UdIwQYMBaAFGT4r4HquQiZYhTUOfcRcA6fSLTL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTIzMC9DNTAwNzREQUU4
NTIxMUVBQUM1MEI1NTFDNEY5QUUwMi9aUGl2Z2VxNUNKbGlGTlE1OXhGd0RwOUl0
TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pQaXZnZXE1Q0psaUZOUTU5eEZ3RHA5SXRNcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NTIzMC9DNTAwNzREQUU4NTIxMUVBQUM1MEI1NTFDNEY5QUUwMi9aUGl2Z2VxNUNK
bGlGTlE1OXhGd0RwOUl0TXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjwnYjpXf1nTuDXn0FOVmeFYyai867lJIup7I4xs1Bqd4ZH3YAZYP412giOnd
Wyjd/VjcvNZjjUPKOjtdS4KYFNZaNdL7OjiWBHLtv1GB19fO2CxQu5aO1rpmuihT
4Ta7JEDdEnnMKIFospH2zFqOZ7Nkb0nRfm6Pw2w/xfI2WHe7Riz1cxK0ZRo6mKmX
tcGuQ0CUYMd4Ivv8wALaK19Jcp//iNIlXk5JmKN45cnv2MYcsouLFAAmQOi6VaNA
SZk8QWJX3JZmTggLwOp34Bv92g0M1NBV/FpWQy93sWKTkcMRxNrr53W5yg47p61t
4tGt+L0o9KGzzAVeyPkffbWsEQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:00:26 2026 by rpki-client