
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
File: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft (raw, json)
Hash identifier: I8MAPhn0I90DK2s2bjvDwbJ9cSuOzjxDVVvE0AwH8Dc=
Subject key identifier: 53:EF:64:6E:A2:18:85:5F:60:C6:86:4F:C4:70:39:31:EC:60:A0:4F
Authority key identifier: 65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD
Certificate issuer: /CN=A91E77F3/serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD
Certificate serial: 0196
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
Manifest number: 0190
Signing time: Mon 21 Sep 2026 04:27:42 +0000
Manifest this update: Mon 21 Sep 2026 04:27:42 +0000
Manifest next update: Mon 28 Sep 2026 04:27:42 +0000
Files and hashes: 1: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl (hash: h6wAm+gnv9fhNdlBWLd/aJ+P4S78Uw+seboF+ZFwKzM=)
2: 92EBC90CABD111F0B4462F16C4F9AE02.roa (hash: Y/OOSY60AbWXfzo+A9kK6oMwS+RTIvrW3ZiwtXUzU20=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl
rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:27:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E77F3, serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD
Validity
Not Before: Sep 21 04:27:42 2026 GMT
Not After : Sep 28 04:27:42 2026 GMT
Subject: CN=6ab0b23e-b2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:92:7c:4f:0e:bc:1b:e4:9c:8f:3e:01:11:
c5:90:6c:01:72:e7:61:23:2a:90:8a:df:cb:7c:e8:
88:d5:e8:ee:6c:ae:2b:13:9f:8f:0d:d4:e7:67:a8:
0f:fd:f4:50:3b:7c:cf:6c:dc:ca:c3:b6:b5:63:bb:
16:1c:ad:80:74:e6:13:b9:bb:d9:9a:2d:3f:fa:22:
1d:68:57:69:d9:5d:d5:31:03:19:9c:fc:53:f9:34:
4a:bd:81:60:83:dd:c5:0e:fd:7c:8b:bc:3b:be:c6:
c5:05:cb:c5:c7:9e:eb:86:af:d9:46:31:32:45:2c:
2a:a9:b0:eb:9a:5f:f6:9e:18:e2:6b:0a:d1:f8:4b:
0a:dc:6e:7f:84:41:2a:d8:8f:23:4e:3e:07:62:06:
c1:53:9a:08:c6:b7:73:b4:ad:d0:9f:f5:be:00:cb:
c6:50:91:a2:c8:34:b1:31:8f:a2:22:d3:3a:71:a5:
dc:e7:bc:5a:e1:4f:38:74:e9:a0:ce:b0:a4:46:a0:
71:71:9a:88:dd:23:91:b3:cd:5d:c1:2f:bd:8b:7d:
db:0d:27:78:e8:91:0c:c9:b9:ec:7d:a2:19:50:b0:
b9:f1:81:3d:17:d7:3e:4a:22:d3:82:63:ce:48:4c:
8e:46:79:28:d7:53:95:d7:69:77:e5:b6:98:ee:57:
29:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EF:64:6E:A2:18:85:5F:60:C6:86:4F:C4:70:39:31:EC:60:A0:4F
X509v3 Authority Key Identifier:
keyid:65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e4:c5:e0:dd:79:fe:ba:ed:ce:2f:54:88:9e:50:6a:f5:54:
35:b8:b9:00:f1:d5:17:b4:77:41:71:47:cd:19:5e:56:88:c6:
6a:ee:25:22:90:c0:2b:04:d1:00:fa:4d:24:6a:9a:b3:19:fb:
3d:33:a8:c5:cd:f7:d4:1f:cf:d1:83:44:7c:ef:42:f8:52:a2:
a4:1b:6f:c5:5c:7a:cd:da:8d:d3:6e:cb:fa:43:75:65:06:a7:
79:ed:4c:7b:e2:75:00:9c:59:92:0f:c9:46:25:5b:4d:4c:9f:
8f:2c:2c:2b:b6:ac:6b:7c:40:dc:13:5b:df:4d:4f:c7:5b:0b:
e6:5b:8a:9c:cc:75:70:8e:77:dc:be:1f:a6:a1:bd:d8:0c:0c:
72:e8:35:fd:df:9a:98:0d:a7:ff:d1:6d:20:8e:d8:6a:5b:d8:
71:3f:0d:96:f1:52:82:67:1f:f8:82:74:7d:b7:cd:17:79:6d:
50:d6:7d:27:37:fe:bd:b3:33:38:07:0e:80:55:96:31:8b:6d:
ea:04:73:3d:ed:db:31:d2:ba:32:3e:5e:bd:17:ee:04:80:07:
ac:30:1d:e0:65:75:41:40:56:ba:19:a6:ad:0a:e4:b4:72:24:
12:80:e2:63:6f:72:bf:5d:75:9b:58:7a:48:77:83:5b:e6:dd:
04:5b:e8:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTc3RjMxMTAvBgNVBAUTKDY1MTE0QjE3NDNGRDYwREQ3NzI4REVFMUU4NUI0OUVF
QTFCRjBEQUQwHhcNMjYwOTIxMDQyNzQyWhcNMjYwOTI4MDQyNzQyWjAYMRYwFAYD
VQQDEw02YWIwYjIzZS1iMmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtbuSfE8OvBvknI8+ARHFkGwBcudhIyqQit/LfOiI1ejubK4rE5+PDdTnZ6gP
/fRQO3zPbNzKw7a1Y7sWHK2AdOYTubvZmi0/+iIdaFdp2V3VMQMZnPxT+TRKvYFg
g93FDv18i7w7vsbFBcvFx57rhq/ZRjEyRSwqqbDrml/2nhjiawrR+EsK3G5/hEEq
2I8jTj4HYgbBU5oIxrdztK3Qn/W+AMvGUJGiyDSxMY+iItM6caXc57xa4U84dOmg
zrCkRqBxcZqI3SORs81dwS+9i33bDSd46JEMybnsfaIZULC58YE9F9c+SiLTgmPO
SEyORnko11OV12l35baY7lcpmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFPvZG6i
GIVfYMaGT8RwOTHsYKBPMB8GA1UdIwQYMBaAFGURSxdD/WDddyje4ehbSe6hvw2t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzdGMy85NEVGQ0MwQzVC
OUMxMUVGOENFQTMxNDVDNEY5QUUwMi9aUkZMRjBQOVlOMTNLTjdoNkZ0SjdxR19E
YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pSRkxGMFA5WU4xM0tON2g2RnRKN3FHX0RhMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzdGMy85NEVGQ0MwQzVCOUMxMUVGOENFQTMxNDVDNEY5QUUwMi9aUkZMRjBQOVlO
MTNLTjdoNkZ0SjdxR19EYTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHuTF4N15/rrtzi9UiJ5QavVUNbi5APHVF7R3QXFHzRleVojGau4lIpDAKwTR
APpNJGqasxn7PTOoxc331B/P0YNEfO9C+FKipBtvxVx6zdqN027L+kN1ZQanee1M
e+J1AJxZkg/JRiVbTUyfjywsK7asa3xA3BNb301Px1sL5luKnMx1cI533L4fpqG9
2AwMcug1/d+amA2n/9FtII7YalvYcT8NlvFSgmcf+IJ0fbfNF3ltUNZ9Jzf+vbMz
OAcOgFWWMYtt6gRzPe3bMdK6Mj5evRfuBIAHrDAd4GV1QUBWuhmmrQrktHIkEoDi
Y29yv111m1h6SHeDW+bdBFvovQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 04:19:39 2026 by rpki-client