
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft
File: cz1KHp8pnM0_jnJKteer9Ci7GV0.mft (raw, json)
Hash identifier: w9k/jBpfjWF5I3u8snDK5lIB3E2suygPriVGfUoLLRc=
Subject key identifier: 96:52:17:91:B1:97:5A:0D:2B:DF:E8:AA:FE:EC:4F:3D:27:AF:ED:27
Authority key identifier: 73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D
Certificate issuer: /CN=A91DE500/serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D
Certificate serial: 01AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft
Manifest number: 01A6
Signing time: Fri 17 Apr 2026 03:59:20 +0000
Manifest this update: Fri 17 Apr 2026 03:59:19 +0000
Manifest next update: Fri 24 Apr 2026 03:59:19 +0000
Files and hashes: 1: cz1KHp8pnM0_jnJKteer9Ci7GV0.crl (hash: rECBR8ewbEGM0Pteiq1vHwwbrToXG5iTtYTSjXuGHqc=)
2: D035B7BE5BC711F097260D5EC4F9AE02.roa (hash: 4MonzweCLEnl+TnK4Sp/6IiK94a2qiwQ1O3fFdo89mM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl
rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:59:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428 (0x1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE500, serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D
Validity
Not Before: Apr 17 03:59:19 2026 GMT
Not After : Apr 24 03:59:19 2026 GMT
Subject: CN=69e1b018-c6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:09:d3:4a:e8:9d:ff:49:57:16:19:a1:c3:54:
e1:0b:32:ba:b1:a9:60:b6:6f:00:1b:e8:a8:4a:92:
f1:a1:9d:07:6f:a6:b8:0b:f3:62:85:49:b6:3b:ce:
7d:0d:78:47:86:1d:1d:ea:22:08:0c:7e:2d:d5:4c:
e7:9e:cb:a5:b9:b3:18:9a:18:37:0f:aa:b0:09:4a:
22:6b:11:65:d5:e3:b7:a6:bc:b2:ec:60:9c:f2:c8:
cf:d4:a9:87:11:ad:83:a0:73:2a:51:85:f2:ae:e4:
ec:70:4b:5e:5f:d1:b8:2e:26:4a:56:0d:a7:ae:be:
3b:98:1f:41:50:bb:81:36:6c:b3:12:11:ab:e7:fa:
d7:c7:b9:a0:81:b7:4d:d4:49:b3:12:6b:09:9f:9b:
a8:f8:80:70:e5:9e:09:08:15:36:24:3d:a0:a4:cc:
b1:c6:86:32:93:52:8e:7f:59:ab:8b:eb:e1:6c:5f:
95:2f:47:20:98:47:fa:26:27:62:f1:b7:c1:0e:90:
2a:36:a2:26:8f:b7:0a:96:43:29:75:e2:53:6d:4b:
6f:ba:61:b2:eb:d4:23:27:67:62:80:ac:b8:0e:84:
b9:86:7f:9d:62:17:1f:97:97:ed:1d:40:6c:4e:c6:
53:28:9f:3f:59:71:34:1a:50:d9:b6:0d:31:51:14:
0b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:52:17:91:B1:97:5A:0D:2B:DF:E8:AA:FE:EC:4F:3D:27:AF:ED:27
X509v3 Authority Key Identifier:
keyid:73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:cd:20:87:21:8f:c2:c2:d4:0b:10:32:6e:3b:37:81:f2:9e:
c6:0d:4e:0c:35:08:7b:2d:1d:51:f8:03:4b:68:e7:4f:e1:6a:
3d:4e:76:13:c2:a7:2e:7c:7c:b1:ca:31:b2:22:ac:48:7d:f3:
36:a3:af:b3:6e:21:a2:7e:55:61:8a:91:2e:4d:ff:bb:9f:8d:
85:3a:bb:02:42:34:2f:c0:e6:5c:43:95:42:af:b2:f6:74:4f:
8c:7b:be:83:b9:4e:be:b5:e7:82:9b:49:bc:b8:bf:7a:1f:88:
cb:e6:0b:a0:d7:c2:f0:27:0f:1f:d4:05:d8:a8:fb:e2:f0:3b:
76:ed:db:41:28:2d:db:ac:08:79:bb:52:8a:92:fb:9c:e5:f8:
4e:95:84:d6:f0:0b:41:2e:03:a4:81:18:32:42:8e:04:96:1e:
68:a4:73:d8:3a:98:e7:6f:c7:90:3a:23:eb:67:c4:5b:19:db:
75:1b:ac:e3:b9:27:02:31:2e:33:5b:22:77:af:95:97:da:b3:
d1:27:a2:73:fc:af:8c:b4:5e:74:ae:c4:95:b3:1d:94:c0:11:
cc:31:18:8c:e7:1e:fe:da:b6:cd:35:c0:3c:98:c1:ad:9c:29:
2e:bb:4e:77:03:63:c8:ae:39:ea:14:3c:c8:74:cd:b4:7f:73:
58:f4:57:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REU1MDAxMTAvBgNVBAUTKDczM0Q0QTFFOUYyOTlDQ0QzRjhFNzI0QUI1RTdBQkY0
MjhCQjE5NUQwHhcNMjYwNDE3MDM1OTE5WhcNMjYwNDI0MDM1OTE5WjAYMRYwFAYD
VQQDEw02OWUxYjAxOC1jNmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA/gnTSuid/0lXFhmhw1ThCzK6salgtm8AG+ioSpLxoZ0Hb6a4C/NihUm2O859
DXhHhh0d6iIIDH4t1UznnsulubMYmhg3D6qwCUoiaxFl1eO3pryy7GCc8sjP1KmH
Ea2DoHMqUYXyruTscEteX9G4LiZKVg2nrr47mB9BULuBNmyzEhGr5/rXx7mggbdN
1EmzEmsJn5uo+IBw5Z4JCBU2JD2gpMyxxoYyk1KOf1mri+vhbF+VL0cgmEf6Jidi
8bfBDpAqNqImj7cKlkMpdeJTbUtvumGy69QjJ2digKy4DoS5hn+dYhcfl5ftHUBs
TsZTKJ8/WXE0GlDZtg0xURQLvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJZSF5Gx
l1oNK9/oqv7sTz0nr+0nMB8GA1UdIwQYMBaAFHM9Sh6fKZzNP45ySrXnq/Qouxld
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC80OUU2RkU0NkM3
MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5NMF9qbkpLdGVlcjlDaTdH
VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2N6MUtIcDhwbk0wX2puSkt0ZWVyOUNpN0dWMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RTUwMC80OUU2RkU0NkM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5N
MF9qbkpLdGVlcjlDaTdHVjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAo80ghyGPwsLUCxAybjs3gfKexg1ODDUIey0dUfgDS2jnT+FqPU52E8KnLnx8
scoxsiKsSH3zNqOvs24hon5VYYqRLk3/u5+NhTq7AkI0L8DmXEOVQq+y9nRPjHu+
g7lOvrXngptJvLi/eh+Iy+YLoNfC8CcPH9QF2Kj74vA7du3bQSgt26wIebtSipL7
nOX4TpWE1vALQS4DpIEYMkKOBJYeaKRz2DqY52/HkDoj62fEWxnbdRus47knAjEu
M1sid6+Vl9qz0Seic/yvjLRedK7ElbMdlMARzDEYjOce/tq2zTXAPJjBrZwpLrtO
dwNjyK456hQ8yHTNtH9zWPRXbA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:46:58 2026 by rpki-client