
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft
File: Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft (raw, json)
Hash identifier: w/i9uuQQzyAWgWmSMySxnQSHZHq3fsx9Hh+Za8TU/3g=
Subject key identifier: A4:45:61:59:77:D1:1A:1B:CA:0A:31:5B:D0:F4:DA:BE:B1:BB:CB:49
Authority key identifier: 67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0
Certificate issuer: /CN=A91DA13E/serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0
Certificate serial: 0874
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft
Manifest number: 0869
Signing time: Fri 12 Jun 2026 20:50:16 +0000
Manifest this update: Fri 12 Jun 2026 20:50:16 +0000
Manifest next update: Fri 19 Jun 2026 20:50:16 +0000
Files and hashes: 1: Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl (hash: PIVtVmaEgnnpu/k7U5XW2uZMZsShcdMeoXfHopd/XsM=)
2: 28D471BA06B611EBBBFD6B2CC4F9AE02.roa (hash: UDmShs5ErpF7g+pJqqDV/YHq/rjSCvUODX6lHEx/JXo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl
rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2164 (0x874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA13E, serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0
Validity
Not Before: Jun 12 20:50:16 2026 GMT
Not After : Jun 19 20:50:16 2026 GMT
Subject: CN=6a2c7108-3265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:85:f3:b7:e4:c6:f0:80:c2:1d:cd:b3:b5:
9b:e1:57:ac:e0:49:2f:51:e3:e3:a1:9d:be:c4:aa:
72:c1:a7:27:9b:a6:a6:99:b5:b3:8f:ac:b5:f6:f0:
55:57:0a:d1:6f:d9:dc:b6:47:35:da:d8:7b:ff:b0:
a0:e9:9a:87:1f:50:ed:67:46:04:f6:bc:81:f6:91:
47:e2:57:19:e9:1f:ed:f9:31:46:ff:07:3b:de:bb:
4b:90:b7:66:d2:97:f2:4c:f1:ac:05:eb:16:86:42:
c6:1b:84:f9:10:9e:2e:6a:9a:f1:b6:ee:d0:24:49:
e8:32:3a:cb:28:54:0e:c2:2c:ee:0b:94:a8:6f:60:
d7:87:0e:0b:49:c2:77:0a:72:11:ac:c7:dc:ac:63:
40:89:b0:6c:4f:25:bc:53:1e:79:e8:06:5a:c2:fc:
07:8c:69:7d:ce:69:72:e5:fb:36:3e:f4:cb:8a:ef:
1a:3e:f8:4f:3f:fe:80:83:f7:49:ec:da:2d:f6:2e:
a7:ec:3b:43:bd:ed:46:59:24:1d:98:5f:84:32:9b:
90:39:0b:d4:77:c6:47:08:bd:81:72:f6:ca:93:16:
ae:b8:93:b6:22:81:2a:9e:d2:fd:07:de:62:65:c0:
50:29:a5:3e:a2:1d:b0:50:e1:f1:51:8d:9a:9a:f4:
3c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:45:61:59:77:D1:1A:1B:CA:0A:31:5B:D0:F4:DA:BE:B1:BB:CB:49
X509v3 Authority Key Identifier:
keyid:67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:eb:ef:ea:4a:d4:5b:e8:ca:e1:92:22:20:a0:3d:1e:3d:5c:
69:32:61:de:4e:c2:f0:2a:9d:85:b1:e8:e8:8b:33:dc:72:90:
bf:7d:9f:3c:43:c5:7e:95:de:e0:f0:91:af:3b:3a:c5:b7:f3:
8d:d6:0c:e0:6b:20:e4:ff:43:e2:a9:e1:a7:3e:e4:27:de:6c:
e8:84:d9:25:90:ec:9b:f3:58:46:59:c2:af:68:34:02:74:bc:
a9:69:fd:d9:ba:58:a2:80:f9:1a:5e:08:52:c2:a0:2c:1f:45:
91:fc:11:25:58:88:59:92:7f:5f:21:30:a4:09:f1:49:7a:29:
72:c3:1e:8b:5a:32:3d:ff:92:2f:c7:4b:b9:8e:ce:2b:f4:6f:
84:98:50:d7:19:13:5e:8d:31:1d:92:39:37:3f:18:fd:ac:e5:
1c:91:97:2a:f9:b0:07:03:c8:6d:76:50:5a:76:28:c2:cc:9d:
4b:25:f7:2e:72:b2:79:92:83:18:19:1d:2f:92:fa:9d:a0:3e:
d5:47:52:2f:dc:91:54:18:b2:fd:66:2e:2c:ec:19:2b:9f:6d:
be:28:91:d2:73:76:b3:c6:60:ae:de:ca:cf:4c:5e:a8:0b:89:
be:9d:fa:6f:c8:52:8d:19:49:85:e3:61:64:a7:63:4d:86:e3:
e4:41:09:54
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REExM0UxMTAvBgNVBAUTKDY3RjNCOUZBQUExMEQyMENCMDE3RjA3RkNDOUExNTRE
ODhCNjYzQTAwHhcNMjYwNjEyMjA1MDE2WhcNMjYwNjE5MjA1MDE2WjAYMRYwFAYD
VQQDEw02YTJjNzEwOC0zMjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqNyF87fkxvCAwh3Ns7Wb4Ves4EkvUePjoZ2+xKpywacnm6ammbWzj6y19vBV
VwrRb9nctkc12th7/7Cg6ZqHH1DtZ0YE9ryB9pFH4lcZ6R/t+TFG/wc73rtLkLdm
0pfyTPGsBesWhkLGG4T5EJ4uaprxtu7QJEnoMjrLKFQOwizuC5Sob2DXhw4LScJ3
CnIRrMfcrGNAibBsTyW8Ux556AZawvwHjGl9zmly5fs2PvTLiu8aPvhPP/6Ag/dJ
7Not9i6n7DtDve1GWSQdmF+EMpuQOQvUd8ZHCL2BcvbKkxauuJO2IoEqntL9B95i
ZcBQKaU+oh2wUOHxUY2amvQ8jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKRFYVl3
0RobygoxW9D02r6xu8tJMB8GA1UdIwQYMBaAFGfzufqqENIMsBfwf8yaFU2ItmOg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS80RTg1MzFDQTA2
QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi9aX081LXFvUTBneXdGX0JfekpvVlRZaTJZ
NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1pfTzUtcW9RMGd5d0ZfQl96Sm9WVFlpMlk2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QTEzRS80RTg1MzFDQTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi9aX081LXFvUTBn
eXdGX0JfekpvVlRZaTJZNkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGuvv6krUW+jK4ZIiIKA9Hj1caTJh3k7C8CqdhbHo6Isz3HKQv32fPEPFfpXe
4PCRrzs6xbfzjdYM4Gsg5P9D4qnhpz7kJ95s6ITZJZDsm/NYRlnCr2g0AnS8qWn9
2bpYooD5Gl4IUsKgLB9FkfwRJViIWZJ/XyEwpAnxSXopcsMei1oyPf+SL8dLuY7O
K/RvhJhQ1xkTXo0xHZI5Nz8Y/azlHJGXKvmwBwPIbXZQWnYowsydSyX3LnKyeZKD
GBkdL5L6naA+1UdSL9yRVBiy/WYuLOwZK59tviiR0nN2s8Zgrt7Kz0xeqAuJvp36
b8hSjRlJheNhZKdjTYbj5EEJVA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:38:35 2026 by rpki-client