
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft
File: z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft (raw, json)
Hash identifier: blIvtX38MDkzbuzvCOAaePKO1KksHihvGQxQVk5mv5c=
Subject key identifier: EB:8B:18:D4:72:F6:06:C4:95:AF:38:FB:B8:D4:50:17:99:A0:B2:CE
Authority key identifier: CF:E4:7B:C8:C7:48:BE:FD:1B:77:52:4C:C7:9F:FA:B5:4C:17:BD:B3
Certificate issuer: /CN=A91F7D5E/serialNumber=CFE47BC8C748BEFD1B77524CC79FFAB54C17BDB3
Certificate serial: 83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-R7yMdIvv0bd1JMx5_6tUwXvbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft
Manifest number: 81
Signing time: Sat 19 Sep 2026 07:44:30 +0000
Manifest this update: Sat 19 Sep 2026 07:44:30 +0000
Manifest next update: Sat 26 Sep 2026 07:44:30 +0000
Files and hashes: 1: z-R7yMdIvv0bd1JMx5_6tUwXvbM.crl (hash: pnBZ+js/rZjAwQ9HWsQNW81CxJQRYyzlVp+rKxrbYh0=)
2: 75FA3D56F20311F081D1C5E2496F56BC.roa (hash: iKD/upGNnZX+RaqlnGQMRh+aU9FLucr+XYy9zJq/7P4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.crl
rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-R7yMdIvv0bd1JMx5_6tUwXvbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7D5E, serialNumber=CFE47BC8C748BEFD1B77524CC79FFAB54C17BDB3
Validity
Not Before: Sep 19 07:44:30 2026 GMT
Not After : Sep 26 07:44:30 2026 GMT
Subject: CN=6aae3d5e-b127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:6d:29:de:f9:b3:34:d5:61:23:22:25:af:
98:d9:1d:63:12:08:ef:36:9e:07:f5:91:b1:5b:fb:
e0:4c:7e:54:97:f7:41:68:d2:0b:73:db:d2:75:4c:
f1:f7:e3:e0:af:96:0d:9b:96:20:03:e7:d5:bb:39:
df:fa:31:81:d1:99:2e:41:1c:74:34:75:e6:73:7c:
79:5c:29:c9:8f:ee:e6:6c:7f:39:8a:5b:f6:e5:6a:
af:d3:63:17:c7:dd:3d:99:f9:8d:92:e4:53:66:ca:
fc:09:ae:23:a5:39:3b:78:b3:ff:72:37:18:53:d9:
cb:31:39:ec:f5:28:1d:e4:7e:3f:57:ff:a8:ba:2c:
c3:23:4a:5d:d3:ee:72:97:fb:35:4f:34:a4:40:bf:
1c:a3:08:3b:6f:f4:32:45:ad:ee:71:43:bb:dd:11:
39:82:94:93:5b:66:48:80:56:63:f2:e0:89:3e:f6:
97:59:e7:24:2d:d8:be:e1:34:44:34:28:97:d2:e6:
69:56:95:4c:35:9b:39:78:5b:1c:c4:ed:69:89:ac:
eb:32:8f:e1:52:b9:f4:db:5e:e1:18:68:82:65:ae:
2f:f8:da:77:a2:63:86:bd:9f:f8:fd:d5:88:37:e5:
9e:f0:f6:21:71:f8:dc:4e:ca:a2:8b:a5:27:c8:c1:
e2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8B:18:D4:72:F6:06:C4:95:AF:38:FB:B8:D4:50:17:99:A0:B2:CE
X509v3 Authority Key Identifier:
keyid:CF:E4:7B:C8:C7:48:BE:FD:1B:77:52:4C:C7:9F:FA:B5:4C:17:BD:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-R7yMdIvv0bd1JMx5_6tUwXvbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:67:3a:47:23:e7:04:e9:82:f7:87:0a:43:70:01:38:f8:13:
db:25:74:84:0c:f3:dc:b8:51:8d:3a:5d:d9:6b:15:4b:f1:e4:
96:fd:5e:fa:b0:a9:6f:7e:56:67:fe:b6:a3:a4:44:e9:91:45:
3b:ef:69:5b:99:71:41:44:02:22:50:f3:8b:d4:56:7e:02:f6:
dc:59:4a:f9:9d:e4:b5:9b:d8:a9:ba:56:58:f0:9c:b9:bd:3b:
ea:47:1b:d4:46:50:03:1e:42:6b:b6:ca:f0:4a:59:74:25:f7:
a0:c8:15:ee:e3:95:90:92:c9:16:82:0d:8e:35:df:7e:ca:b0:
11:54:d9:11:9a:f3:3f:80:d9:18:dd:5a:5c:25:b3:85:78:58:
d6:bd:dc:9e:53:eb:bf:c6:70:81:57:e4:88:db:05:09:07:e8:
7f:e6:52:bb:0d:86:60:bd:73:d3:f0:67:d8:e3:0d:87:11:00:
79:68:bd:b7:dd:05:19:97:30:72:8f:8c:7d:bc:a2:f5:fb:1a:
7c:30:56:d5:9c:7d:76:17:89:2e:05:85:88:04:06:54:0c:51:
aa:76:ea:6b:d5:8a:01:61:93:c7:21:c6:bd:3a:60:89:2e:81:
2d:66:81:1d:41:9e:32:96:2a:b6:f2:db:a8:1a:70:78:94:c2:
a8:2e:09:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjdENUUxMTAvBgNVBAUTKENGRTQ3QkM4Qzc0OEJFRkQxQjc3NTI0Q0M3OUZGQUI1
NEMxN0JEQjMwHhcNMjYwOTE5MDc0NDMwWhcNMjYwOTI2MDc0NDMwWjAYMRYwFAYD
VQQDEw02YWFlM2Q1ZS1iMTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqSVtKd75szTVYSMiJa+Y2R1jEgjvNp4H9ZGxW/vgTH5Ul/dBaNILc9vSdUzx
9+Pgr5YNm5YgA+fVuznf+jGB0ZkuQRx0NHXmc3x5XCnJj+7mbH85ilv25Wqv02MX
x909mfmNkuRTZsr8Ca4jpTk7eLP/cjcYU9nLMTns9Sgd5H4/V/+ouizDI0pd0+5y
l/s1TzSkQL8cowg7b/QyRa3ucUO73RE5gpSTW2ZIgFZj8uCJPvaXWeckLdi+4TRE
NCiX0uZpVpVMNZs5eFscxO1piazrMo/hUrn0217hGGiCZa4v+Np3omOGvZ/4/dWI
N+We8PYhcfjcTsqii6UnyMHi6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOuLGNRy
9gbEla84+7jUUBeZoLLOMB8GA1UdIwQYMBaAFM/ke8jHSL79G3dSTMef+rVMF72z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0Q1RS8xOEM4M0Y0MEYy
MDExMUYwQUQ0MThDQkE0ODZGNTZCQy96LVI3eU1kSXZ2MGJkMUpNeDVfNnRVd1h2
Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3otUjd5TWRJdnYwYmQxSk14NV82dFV3WHZiTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
N0Q1RS8xOEM4M0Y0MEYyMDExMUYwQUQ0MThDQkE0ODZGNTZCQy96LVI3eU1kSXZ2
MGJkMUpNeDVfNnRVd1h2Yk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJGc6RyPnBOmC94cKQ3ABOPgT2yV0hAzz3LhRjTpd2WsVS/Hklv1e+rCpb35W
Z/62o6RE6ZFFO+9pW5lxQUQCIlDzi9RWfgL23FlK+Z3ktZvYqbpWWPCcub076kcb
1EZQAx5Ca7bK8EpZdCX3oMgV7uOVkJLJFoINjjXffsqwEVTZEZrzP4DZGN1aXCWz
hXhY1r3cnlPrv8ZwgVfkiNsFCQfof+ZSuw2GYL1z0/Bn2OMNhxEAeWi9t90FGZcw
co+Mfbyi9fsafDBW1Zx9dheJLgWFiAQGVAxRqnbqa9WKAWGTxyHGvTpgiS6BLWaB
HUGeMpYqtvLbqBpweJTCqC4J6A==
-----END CERTIFICATE-----
Generated at Sun Sep 20 22:09:43 2026 by rpki-client