
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
File: zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft (raw, json)
Hash identifier: Kio11QaceKQZLzQzRoEqukwAVI5jPe0rY3xUqbHpCyk=
Subject key identifier: 22:94:D8:01:C2:16:A0:41:CB:E5:E0:0B:8A:52:71:74:EB:9D:0F:F2
Authority key identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5
Certificate issuer: /CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5
Certificate serial: 0138
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
Manifest number: 0134
Signing time: Mon 27 Jul 2026 07:31:11 +0000
Manifest this update: Mon 27 Jul 2026 07:31:11 +0000
Manifest next update: Mon 03 Aug 2026 07:31:11 +0000
Files and hashes: 1: zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl (hash: nSUVok7LqL4oxUDgkGangk8gD5ZX9jzD7VoQcT+FmZU=)
2: F6935C8EB35911EF96C43242C4F9AE02.roa (hash: S9t/+J52VQt2ne9SbBBHigAP25wl7hoUywJOVYVw1Ik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl
rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD39E, serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5
Validity
Not Before: Jul 27 07:31:11 2026 GMT
Not After : Aug 3 07:31:11 2026 GMT
Subject: CN=6a67093f-4edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:42:fe:64:10:1c:24:41:9e:be:b7:a3:56:72:
a4:9a:5b:8b:a8:4d:dd:cc:08:40:92:f6:53:b3:e0:
da:ea:18:49:6e:b6:fb:bb:a9:66:1a:27:e4:3a:74:
60:3a:a1:88:96:34:f4:bc:c0:6a:22:72:b1:1e:e3:
25:90:9c:f2:29:6b:78:99:cc:0d:4a:a5:bf:ae:e2:
06:6c:72:1a:d7:c3:09:75:b0:f9:da:f0:8f:f9:74:
fa:e3:e7:54:0f:f9:ee:ec:f1:2a:67:25:c0:ef:6f:
5e:b5:4e:8d:ba:ca:7c:cf:54:c0:be:ec:b2:4a:b0:
73:39:31:b4:99:da:27:9a:17:8c:68:ab:9d:f7:b1:
34:14:67:d1:a3:33:ed:c9:39:15:1b:71:d8:8c:26:
96:e0:bc:67:56:30:44:8d:f2:fe:3f:1f:61:bd:c8:
38:9a:f6:23:10:d2:c4:88:de:58:bd:e3:9f:9f:11:
d5:70:9f:7a:8b:87:c1:9b:d6:18:bb:76:1b:0a:8c:
df:dc:97:d4:96:d2:e7:cd:11:4a:da:82:5d:d9:21:
f7:72:9f:01:8f:7f:23:03:51:b0:d4:8a:d3:b1:72:
2f:fe:a9:4b:01:7c:ef:52:69:08:ea:1f:fd:85:c5:
d2:4c:0a:35:dd:6c:b8:73:55:4f:1f:26:2e:b3:7c:
07:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:94:D8:01:C2:16:A0:41:CB:E5:E0:0B:8A:52:71:74:EB:9D:0F:F2
X509v3 Authority Key Identifier:
keyid:CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:4a:f4:15:3c:97:3e:b2:cd:ed:d5:df:11:dc:d9:53:00:8c:
c3:e4:1e:af:05:fc:a3:9e:e9:dc:7a:b1:93:02:d8:4b:9e:a0:
20:84:1f:8f:c0:b8:ca:ce:6d:65:e1:ca:27:8e:de:e7:41:6d:
6a:ed:b1:1e:5e:06:06:a5:d9:69:f3:72:b0:1c:5f:bf:e4:bc:
80:4f:f4:1e:84:26:21:77:8d:6d:f1:3a:ec:03:fb:0d:67:32:
60:b8:7f:f8:1d:e9:c3:81:cd:1e:5f:8b:1f:dd:fc:c5:65:1c:
4a:ab:d5:7f:d1:29:82:db:c9:cb:53:9b:16:3d:5a:84:c7:b3:
5b:2e:63:9d:20:4d:d7:7c:eb:b2:19:63:ae:69:19:19:67:4b:
b5:37:a3:09:dc:b7:ab:9b:40:a3:11:13:88:ac:5a:f4:14:a5:
4d:da:dd:4d:c6:25:3b:0f:92:ed:3a:25:9d:98:e3:cd:f5:36:
fb:d9:e9:c3:1f:4c:2f:fa:20:35:e4:0f:ad:28:44:4a:36:41:
46:91:db:62:59:28:ae:a6:43:2d:d5:14:fa:9f:15:22:b8:2c:
65:4f:17:bf:36:4d:11:d7:70:78:96:66:cc:0f:84:c8:6b:bb:
a8:28:09:08:ee:51:98:f5:03:21:e6:4d:d4:d3:03:dc:36:bc:
c7:62:2b:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQzOUUxMTAvBgNVBAUTKENEOTI3OERFRDkxOEIyMzc1MDg2QjJDRjhFNEUwNjkx
N0QwMjExQjUwHhcNMjYwNzI3MDczMTExWhcNMjYwODAzMDczMTExWjAYMRYwFAYD
VQQDEw02YTY3MDkzZi00ZWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjEL+ZBAcJEGevrejVnKkmluLqE3dzAhAkvZTs+Da6hhJbrb7u6lmGifkOnRg
OqGIljT0vMBqInKxHuMlkJzyKWt4mcwNSqW/ruIGbHIa18MJdbD52vCP+XT64+dU
D/nu7PEqZyXA729etU6Nusp8z1TAvuyySrBzOTG0mdonmheMaKud97E0FGfRozPt
yTkVG3HYjCaW4LxnVjBEjfL+Px9hvcg4mvYjENLEiN5YveOfnxHVcJ96i4fBm9YY
u3YbCozf3JfUltLnzRFK2oJd2SH3cp8Bj38jA1Gw1IrTsXIv/qlLAXzvUmkI6h/9
hcXSTAo13Wy4c1VPHyYus3wHbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCKU2AHC
FqBBy+XgC4pScXTrnQ/yMB8GA1UdIwQYMBaAFM2SeN7ZGLI3UIayz45OBpF9AhG1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM5RS83OTg0NTcwQ0Iz
NTkxMUVGQjRCRTdGNDFDNEY5QUUwMi96Wko0M3RrWXNqZFFockxQams0R2tYMENF
YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3paSjQzdGtZc2pkUWhyTFBqazRHa1gwQ0ViVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RDM5RS83OTg0NTcwQ0IzNTkxMUVGQjRCRTdGNDFDNEY5QUUwMi96Wko0M3RrWXNq
ZFFockxQams0R2tYMENFYlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN0r0FTyXPrLN7dXfEdzZUwCMw+QerwX8o57p3HqxkwLYS56gIIQfj8C4ys5t
ZeHKJ47e50Ftau2xHl4GBqXZafNysBxfv+S8gE/0HoQmIXeNbfE67AP7DWcyYLh/
+B3pw4HNHl+LH938xWUcSqvVf9EpgtvJy1ObFj1ahMezWy5jnSBN13zrshljrmkZ
GWdLtTejCdy3q5tAoxETiKxa9BSlTdrdTcYlOw+S7TolnZjjzfU2+9npwx9ML/og
NeQPrShESjZBRpHbYlkorqZDLdUU+p8VIrgsZU8XvzZNEddweJZmzA+EyGu7qCgJ
CO5RmPUDIeZN1NMD3Da8x2IrrQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:07:37 2026 by rpki-client