
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft
File: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft (raw, json)
Hash identifier: /C7Z+wVKoSVgwnA/iXHTnzCb1vA8fq1AtKN3IJX1+DA=
Subject key identifier: 67:D6:36:09:8C:D0:86:E8:BF:75:5B:46:1F:8B:2B:64:AF:64:CF:CC
Authority key identifier: 64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3
Certificate issuer: /CN=A91EBC61/serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3
Certificate serial: 0124
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft
Manifest number: 011C
Signing time: Sat 13 Jun 2026 05:50:37 +0000
Manifest this update: Sat 13 Jun 2026 05:50:37 +0000
Manifest next update: Sat 20 Jun 2026 05:50:37 +0000
Files and hashes: 1: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl (hash: ZseKxaYvMgMj02Znn67BE6ZZy45U958FoyP6dUfHuUA=)
2: 8D26DADCB6C411EF99C3B758C4F9AE02.roa (hash: svfCZY/4ijPFg+GD8JzFGuMZM/fHEdmUD+EacNaNCNg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl
rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBC61, serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3
Validity
Not Before: Jun 13 05:50:37 2026 GMT
Not After : Jun 20 05:50:37 2026 GMT
Subject: CN=6a2cefad-ee7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f0:e9:5b:db:33:98:08:da:f1:9a:20:8e:14:
c6:40:5c:90:87:6d:8a:2f:b9:5e:6e:a3:a7:4c:bb:
ca:04:b0:ac:e9:f5:cf:f8:8c:27:0d:33:c2:97:36:
0d:17:db:a3:c6:d2:f8:02:41:e5:cf:61:cf:c2:db:
73:36:0a:71:d8:3f:58:82:89:0c:95:f8:2f:88:16:
46:02:e1:58:63:89:bf:e2:0a:bb:a0:74:d0:cb:37:
d1:31:04:4d:35:4f:82:a8:f0:7f:2d:9d:05:53:4b:
2e:bd:42:de:50:bf:d6:7f:f5:97:53:e3:a5:0f:57:
96:49:58:46:ea:ba:d4:3c:73:c9:52:22:f8:dc:80:
94:39:6c:89:2a:7c:ab:31:ea:c4:0e:e2:b4:c1:c2:
fb:51:2a:bb:5a:90:82:e5:8c:7a:aa:a4:be:bd:b2:
05:55:98:7e:7e:7a:f1:bf:2d:47:07:cc:fa:4b:8a:
5d:53:b1:8e:f0:56:77:6e:c1:b3:1f:99:59:2f:ef:
a8:6f:ff:e4:65:ed:cc:03:41:2d:6d:d9:59:7c:2b:
aa:f1:6f:9b:1b:5e:19:f5:ce:d8:df:a4:7b:e9:1f:
91:ae:5d:ef:f6:09:d3:e8:03:b8:84:71:d0:f8:f4:
44:2b:16:c7:2a:4d:e5:1f:fe:d6:19:2c:d4:e4:e2:
0c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D6:36:09:8C:D0:86:E8:BF:75:5B:46:1F:8B:2B:64:AF:64:CF:CC
X509v3 Authority Key Identifier:
keyid:64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:2f:3e:8a:0b:2a:c4:da:1e:04:0d:39:92:9e:aa:2a:93:73:
3b:c2:58:21:30:7d:9c:41:eb:17:7e:fc:25:f1:b8:65:01:a1:
9a:de:42:65:a3:72:f1:26:83:8d:4b:93:4a:3b:fd:ed:18:1f:
af:d6:14:af:4e:11:14:25:38:03:68:ee:4c:3e:13:d3:2e:0a:
63:bd:f3:a2:c1:05:a9:85:29:00:32:b8:f2:f6:c9:3d:be:07:
a5:bd:4b:4f:41:8e:ed:07:09:88:fd:5e:0f:dd:bd:5a:8c:f8:
68:36:5e:a7:3e:90:a0:cf:a3:1e:d7:3a:c4:2a:48:c4:41:94:
2a:4d:c7:07:dd:f3:8a:28:db:25:2e:4d:4e:6f:13:84:6d:35:
4c:3a:41:9c:3d:00:a9:f5:f2:d5:b4:e8:91:0d:56:eb:0d:fa:
56:0f:03:c1:2b:92:1e:d9:db:21:7a:6e:d7:c0:c9:3e:41:b7:
a3:0b:d3:95:ca:86:c7:61:f1:6b:67:b6:bd:3c:8d:c9:a0:1a:
73:75:fb:b4:a5:5b:7f:27:a7:06:3d:49:d6:2c:35:ff:6b:74:
72:af:31:ca:4d:b4:28:65:d2:05:fd:ac:b4:ef:cb:4a:e9:e9:
7e:10:36:2d:e1:3c:8b:1e:96:88:08:c4:16:fc:66:51:db:89:
74:f8:c7:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJDNjExMTAvBgNVBAUTKDY0RDJCM0Q2NUE1QzZDQ0U0RDA4RDc4RkZFREIyODU2
QjY0MUQ2QTMwHhcNMjYwNjEzMDU1MDM3WhcNMjYwNjIwMDU1MDM3WjAYMRYwFAYD
VQQDEw02YTJjZWZhZC1lZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl/DpW9szmAja8ZogjhTGQFyQh22KL7lebqOnTLvKBLCs6fXP+IwnDTPClzYN
F9ujxtL4AkHlz2HPwttzNgpx2D9YgokMlfgviBZGAuFYY4m/4gq7oHTQyzfRMQRN
NU+CqPB/LZ0FU0suvULeUL/Wf/WXU+OlD1eWSVhG6rrUPHPJUiL43ICUOWyJKnyr
MerEDuK0wcL7USq7WpCC5Yx6qqS+vbIFVZh+fnrxvy1HB8z6S4pdU7GO8FZ3bsGz
H5lZL++ob//kZe3MA0EtbdlZfCuq8W+bG14Z9c7Y36R76R+Rrl3v9gnT6AO4hHHQ
+PREKxbHKk3lH/7WGSzU5OIM8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGfWNgmM
0Ibov3VbRh+LK2SvZM/MMB8GA1UdIwQYMBaAFGTSs9ZaXGzOTQjXj/7bKFa2Qdaj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkM2MS80NDZCRDdBMkI2
QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9aTkt6MWxwY2JNNU5DTmVQX3Rzb1ZyWkIx
cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1pOS3oxbHBjYk01TkNOZVBfdHNvVnJaQjFxTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QkM2MS80NDZCRDdBMkI2QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9aTkt6MWxwY2JN
NU5DTmVQX3Rzb1ZyWkIxcU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoS8+igsqxNoeBA05kp6qKpNzO8JYITB9nEHrF378JfG4ZQGhmt5CZaNy8SaD
jUuTSjv97Rgfr9YUr04RFCU4A2juTD4T0y4KY73zosEFqYUpADK48vbJPb4Hpb1L
T0GO7QcJiP1eD929Woz4aDZepz6QoM+jHtc6xCpIxEGUKk3HB93ziijbJS5NTm8T
hG01TDpBnD0AqfXy1bTokQ1W6w36Vg8DwSuSHtnbIXpu18DJPkG3owvTlcqGx2Hx
a2e2vTyNyaAac3X7tKVbfyenBj1J1iw1/2t0cq8xyk20KGXSBf2stO/LSunpfhA2
LeE8ix6WiAjEFvxmUduJdPjHbw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:05:49 2026 by rpki-client