
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.mft
File: ZYpZAQJeJrcXbdKtrqu2fPCh7R0.mft (raw, json)
Hash identifier: bs4Dmlob2jIRz1w0mQ2XTeBaJi+lKa4uP37lC5vrihk=
Subject key identifier: D5:E3:4E:41:2A:B4:B9:1B:3C:71:50:9C:9A:B2:A5:7F:E5:8A:AF:3B
Authority key identifier: 65:8A:59:01:02:5E:26:B7:17:6D:D2:AD:AE:AB:B6:7C:F0:A1:ED:1D
Certificate issuer: /CN=A91DC76E/serialNumber=658A5901025E26B7176DD2ADAEABB67CF0A1ED1D
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.mft
Manifest number: 0F
Signing time: Sun 05 Apr 2026 08:23:57 +0000
Manifest this update: Sun 05 Apr 2026 08:23:57 +0000
Manifest next update: Sun 12 Apr 2026 08:23:57 +0000
Files and hashes: 1: ZYpZAQJeJrcXbdKtrqu2fPCh7R0.crl (hash: uC8Q2S+SxfU9/pcOKbE3sZPcZsR4ChRNkUsWHbjTRPQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.crl
rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:23:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC76E, serialNumber=658A5901025E26B7176DD2ADAEABB67CF0A1ED1D
Validity
Not Before: Apr 5 08:23:57 2026 GMT
Not After : Apr 12 08:23:57 2026 GMT
Subject: CN=69d21c1d-d1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:32:57:fb:28:dc:b9:60:51:6c:67:3e:3a:be:
4a:8c:9a:16:bc:8f:20:fb:61:f2:98:e7:e0:bb:b5:
cc:8d:83:af:31:19:39:31:73:10:24:b1:54:d2:8f:
a3:8b:e9:84:8b:ab:2a:20:95:f7:47:2e:11:c0:74:
c5:50:ae:83:d7:6d:25:52:98:82:58:b0:3e:1a:26:
bd:c7:98:fc:78:d8:7d:9b:7a:97:f4:17:3f:79:fa:
85:3c:8f:24:0d:c8:6a:14:7d:18:47:58:c3:7f:94:
6b:9b:4f:b1:1a:4d:e5:50:42:b3:9a:73:1b:1c:de:
16:f2:be:3d:c1:c3:c0:c1:7d:ff:07:d5:05:dc:b0:
0c:6f:51:8f:c5:77:98:17:3e:3d:dc:a1:f3:51:be:
c5:57:26:fa:cc:f4:e6:be:1d:9e:86:1f:f2:9e:4f:
8f:8f:8e:19:62:07:20:e4:62:03:4c:75:8d:9b:74:
e9:9e:5f:f4:49:59:59:a5:c0:0e:e2:da:c9:72:4e:
d8:86:c0:9b:b5:7b:2d:d0:b5:96:07:10:86:4a:fc:
c9:83:a4:05:e9:74:0d:2e:a6:e5:65:20:3e:c7:a7:
20:32:90:e0:36:ed:0c:12:f0:6f:49:d4:1c:34:b6:
29:dd:23:6d:4a:6d:91:a0:ac:fd:68:f1:b3:f5:94:
8d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E3:4E:41:2A:B4:B9:1B:3C:71:50:9C:9A:B2:A5:7F:E5:8A:AF:3B
X509v3 Authority Key Identifier:
keyid:65:8A:59:01:02:5E:26:B7:17:6D:D2:AD:AE:AB:B6:7C:F0:A1:ED:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:9d:0b:df:8e:07:76:2a:8c:8a:6b:b0:ca:09:d7:22:81:8b:
db:0d:2d:ec:92:0b:72:28:f7:17:dd:65:90:de:3b:d3:5c:b6:
9e:d4:39:8c:8d:18:52:fe:76:9a:5d:5e:8d:2f:d0:b5:4b:be:
30:a2:2a:ee:c8:77:00:d6:8f:26:28:75:a2:af:74:95:41:93:
3b:6f:6f:fb:e9:e2:e8:e7:9e:03:a5:4d:d0:ba:53:c5:7a:97:
8b:08:df:07:8b:b4:a7:29:cc:9d:3c:3c:5e:16:65:22:15:a2:
30:38:35:e2:5c:7d:2a:41:a3:71:93:67:76:75:4b:54:19:3a:
2d:15:00:a0:7d:ba:90:f4:5d:95:c7:ad:c5:28:62:44:d1:a3:
79:3b:4d:90:68:b3:e5:d1:a7:98:81:92:7d:46:ae:e3:2c:f9:
0a:0b:aa:05:1d:c1:95:65:8c:3e:34:e9:fa:a5:02:92:b0:03:
57:24:3d:d6:ba:61:39:90:8c:d6:bd:98:7d:64:69:f0:74:d4:
d7:be:b0:ab:bc:a3:56:b1:65:54:99:9d:6e:8c:66:63:17:6a:
dc:8c:b0:c1:84:8a:7d:b9:63:dc:12:c5:78:78:0d:fe:1a:ba:
9c:41:62:e9:1e:15:5c:ae:4e:cd:53:da:f7:dc:a1:44:1d:10:
fa:9b:29:1b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
Qzc2RTExMC8GA1UEBRMoNjU4QTU5MDEwMjVFMjZCNzE3NkREMkFEQUVBQkI2N0NG
MEExRUQxRDAeFw0yNjA0MDUwODIzNTdaFw0yNjA0MTIwODIzNTdaMBgxFjAUBgNV
BAMTDTY5ZDIxYzFkLWQxYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCDMlf7KNy5YFFsZz46vkqMmha8jyD7YfKY5+C7tcyNg68xGTkxcxAksVTSj6OL
6YSLqyoglfdHLhHAdMVQroPXbSVSmIJYsD4aJr3HmPx42H2bepf0Fz95+oU8jyQN
yGoUfRhHWMN/lGubT7EaTeVQQrOacxsc3hbyvj3Bw8DBff8H1QXcsAxvUY/Fd5gX
Pj3cofNRvsVXJvrM9Oa+HZ6GH/KeT4+PjhliByDkYgNMdY2bdOmeX/RJWVmlwA7i
2slyTtiGwJu1ey3QtZYHEIZK/MmDpAXpdA0upuVlID7HpyAykOA27QwS8G9J1Bw0
tindI21KbZGgrP1o8bP1lI1RAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1eNOQSq0
uRs8cVCcmrKlf+WKrzswHwYDVR0jBBgwFoAUZYpZAQJeJrcXbdKtrqu2fPCh7R0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDNzZFL0Q1QjA0REYyMUNG
QzExRjFBOTA4NzlEODQxM0Q4QzY3L1pZcFpBUUplSnJjWGJkS3RycXUyZlBDaDdS
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWllwWkFRSmVKcmNYYmRLdHJxdTJmUENoN1IwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD
NzZFL0Q1QjA0REYyMUNGQzExRjFBOTA4NzlEODQxM0Q4QzY3L1pZcFpBUUplSnJj
WGJkS3RycXUyZlBDaDdSMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBCnQvfjgd2KoyKa7DKCdcigYvbDS3skgtyKPcX3WWQ3jvTXLae1DmMjRhS/naa
XV6NL9C1S74woiruyHcA1o8mKHWir3SVQZM7b2/76eLo554DpU3QulPFepeLCN8H
i7SnKcydPDxeFmUiFaIwODXiXH0qQaNxk2d2dUtUGTotFQCgfbqQ9F2Vx63FKGJE
0aN5O02QaLPl0aeYgZJ9Rq7jLPkKC6oFHcGVZYw+NOn6pQKSsANXJD3WumE5kIzW
vZh9ZGnwdNTXvrCrvKNWsWVUmZ1ujGZjF2rcjLDBhIp9uWPcEsV4eA3+GrqcQWLp
HhVcrk7NU9r33KFEHRD6mykb
-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:45 2026 by rpki-client