
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
File: ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft (raw, json)
Hash identifier: 4wewluqxKcLc8QkTg4bZmith9a2WIauA8xpdSsffL4E=
Subject key identifier: 55:F0:BE:49:78:D6:C8:83:AE:35:C1:E1:95:52:D2:F6:4F:40:8A:73
Authority key identifier: 66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9
Certificate issuer: /CN=A91A12C4/serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
Manifest number: 0129
Signing time: Sun 05 Apr 2026 05:01:58 +0000
Manifest this update: Sun 05 Apr 2026 05:01:58 +0000
Manifest next update: Sun 12 Apr 2026 05:01:58 +0000
Files and hashes: 1: ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl (hash: SV0ndbOmju8Ya4METOMCPaBM4hHlIVpsmVIJI6BuswM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl
rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A12C4, serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9
Validity
Not Before: Apr 5 05:01:58 2026 GMT
Not After : Apr 12 05:01:58 2026 GMT
Subject: CN=69d1ecc6-ad24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c9:5b:7c:b7:dd:39:33:08:85:41:44:75:e4:
f2:3b:b7:5e:a4:66:b3:20:2d:24:9a:07:55:51:73:
77:32:f0:2e:01:f2:01:d0:e6:fc:0b:23:0d:c2:6b:
a1:d8:95:46:7c:22:b7:c2:e1:45:fd:5b:99:6e:36:
a7:94:3c:15:5a:1a:37:af:e7:6e:b5:3e:31:b7:7c:
c5:69:e0:0b:c6:82:ed:05:e7:fc:0c:1a:5c:71:c2:
69:cb:fe:80:c4:b5:21:01:62:ba:ed:ea:08:0b:02:
2e:3f:f3:25:cb:50:0b:f9:1b:8f:a7:97:53:63:03:
3a:b4:1c:64:7e:54:d8:78:3b:9f:ff:b6:34:8a:2c:
e2:1f:5a:f0:88:8f:0f:77:e9:05:c7:37:78:cc:47:
48:2e:22:85:52:9c:2f:48:41:3c:68:86:ff:32:90:
c4:5c:fa:53:31:7b:25:6d:04:f8:81:9f:68:14:32:
2e:ed:75:28:69:b9:c2:b1:11:9f:99:af:a4:34:6b:
2e:28:50:d3:12:3a:b3:40:2e:90:f0:e9:0e:7f:c0:
ff:bc:78:0f:b0:05:1b:eb:ef:f3:26:1c:70:62:9b:
ab:d0:46:20:36:3d:5b:fc:23:11:38:e8:09:fa:04:
4c:8c:59:f6:4b:34:e0:7f:30:17:00:5f:b4:e3:76:
0f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F0:BE:49:78:D6:C8:83:AE:35:C1:E1:95:52:D2:F6:4F:40:8A:73
X509v3 Authority Key Identifier:
keyid:66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:eb:8f:43:c3:f6:bb:63:c6:0d:83:51:8d:96:01:a1:4b:36:
d7:06:6e:80:0e:31:03:b3:28:a9:36:ee:f8:03:d9:50:d2:04:
e7:c6:58:88:18:77:47:d8:07:44:b8:57:70:48:4c:51:71:d7:
99:ac:65:09:05:2f:7b:34:46:fd:54:f0:c4:f1:b0:3a:bf:4d:
ac:b3:5d:db:f8:35:33:49:0a:92:3e:5e:f3:59:bc:1d:70:57:
da:6b:7f:f2:ae:68:78:6e:ec:88:18:7c:38:91:00:bd:62:8f:
a8:c4:ff:91:0c:35:91:0d:42:87:28:55:12:1f:19:cc:93:62:
58:b5:74:cb:32:e2:51:92:fd:06:6e:6c:14:c1:93:d5:c6:04:
02:cf:15:22:85:82:10:4a:31:bb:82:a8:97:36:b3:ed:ab:96:
cb:78:d4:73:18:96:9f:54:f0:30:3f:eb:df:2a:cb:c3:73:01:
52:2e:7e:c1:60:5c:a9:b4:2e:33:38:27:d4:e6:93:f6:67:1c:
2c:32:b3:2d:5e:9f:43:f6:5c:51:33:3d:c9:5a:58:47:87:27:
92:bf:e4:df:c6:bb:2b:78:db:fe:5b:f9:b1:ed:0a:ab:4d:15:
b3:c0:b6:2a:8b:5c:b1:0e:c6:6d:0b:c7:94:83:8e:5d:d4:b6:
78:47:67:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTEyQzQxMTAvBgNVBAUTKDY2QzVCMTkwNEIzNUM0N0Q5NDUwOEVDMEExQUNEQTgz
NjhERUY0QTkwHhcNMjYwNDA1MDUwMTU4WhcNMjYwNDEyMDUwMTU4WjAYMRYwFAYD
VQQDEw02OWQxZWNjNi1hZDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvslbfLfdOTMIhUFEdeTyO7depGazIC0kmgdVUXN3MvAuAfIB0Ob8CyMNwmuh
2JVGfCK3wuFF/VuZbjanlDwVWho3r+dutT4xt3zFaeALxoLtBef8DBpcccJpy/6A
xLUhAWK67eoICwIuP/Mly1AL+RuPp5dTYwM6tBxkflTYeDuf/7Y0iiziH1rwiI8P
d+kFxzd4zEdILiKFUpwvSEE8aIb/MpDEXPpTMXslbQT4gZ9oFDIu7XUoabnCsRGf
ma+kNGsuKFDTEjqzQC6Q8OkOf8D/vHgPsAUb6+/zJhxwYpur0EYgNj1b/CMROOgJ
+gRMjFn2SzTgfzAXAF+043YPdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFXwvkl4
1siDrjXB4ZVS0vZPQIpzMB8GA1UdIwQYMBaAFGbFsZBLNcR9lFCOwKGs2oNo3vSp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTJDNC9GQkYxNEU3MjZD
MTcxMUVGQkRCRkQ1MEJDNEY5QUUwMi9ac1d4a0VzMXhIMlVVSTdBb2F6YWcyamU5
S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pzV3hrRXMxeEgyVVVJN0FvYXphZzJqZTlLay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTJDNC9GQkYxNEU3MjZDMTcxMUVGQkRCRkQ1MEJDNEY5QUUwMi9ac1d4a0VzMXhI
MlVVSTdBb2F6YWcyamU5S2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyeuPQ8P2u2PGDYNRjZYBoUs21wZugA4xA7MoqTbu+APZUNIE58ZYiBh3R9gH
RLhXcEhMUXHXmaxlCQUvezRG/VTwxPGwOr9NrLNd2/g1M0kKkj5e81m8HXBX2mt/
8q5oeG7siBh8OJEAvWKPqMT/kQw1kQ1ChyhVEh8ZzJNiWLV0yzLiUZL9Bm5sFMGT
1cYEAs8VIoWCEEoxu4Kolzaz7auWy3jUcxiWn1TwMD/r3yrLw3MBUi5+wWBcqbQu
Mzgn1OaT9mccLDKzLV6fQ/ZcUTM9yVpYR4cnkr/k38a7K3jb/lv5se0Kq00Vs8C2
KotcsQ7GbQvHlIOOXdS2eEdnbQ==
-----END CERTIFICATE-----
Generated at Sun Apr 5 21:08:35 2026 by rpki-client