
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
File: _ZFHrvajMNGN1MnP2GQvDtqnuQc.mft (raw, json)
Hash identifier: T3Mp8vK6//XAqx+gL5z7ZVobaQZ4gcrPIO9gLmSPpUg=
Subject key identifier: EF:76:00:92:6F:7E:C5:AE:45:2B:C3:32:59:C0:A9:D7:5D:38:D0:21
Authority key identifier: FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07
Certificate issuer: /CN=A91E1853/serialNumber=FD9147AEF6A330D18DD4C9CFD8642F0EDAA7B907
Certificate serial: 54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
Manifest number: 54
Signing time: Sun 05 Apr 2026 07:34:43 +0000
Manifest this update: Sun 05 Apr 2026 07:34:43 +0000
Manifest next update: Sun 12 Apr 2026 07:34:43 +0000
Files and hashes: 1: _ZFHrvajMNGN1MnP2GQvDtqnuQc.crl (hash: 9yWcWn3P9SOoWD36O9E/hogYUPn7QQVEbKy/oKciwZg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.crl
rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:34:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1853, serialNumber=FD9147AEF6A330D18DD4C9CFD8642F0EDAA7B907
Validity
Not Before: Apr 5 07:34:43 2026 GMT
Not After : Apr 12 07:34:43 2026 GMT
Subject: CN=69d21093-19f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:95:e3:1a:fc:6b:a9:49:b0:ad:c0:8e:73:3d:
9f:03:9b:cc:65:e7:0b:49:b0:86:e4:47:92:ea:44:
ec:73:10:19:ad:75:a2:dc:99:a7:ce:4b:f0:89:26:
12:72:60:62:34:dd:03:f2:56:22:73:d9:7f:b2:7d:
31:20:ea:cb:62:e9:22:db:c6:75:9f:2a:12:42:f8:
d0:b6:d5:24:84:32:63:8b:fe:16:7d:d2:81:07:5b:
58:e0:c6:98:5f:b8:94:48:9a:e5:89:b0:8c:a4:5f:
7c:a5:02:e3:14:29:00:ac:fb:26:17:1e:0f:fd:a5:
b3:8d:13:f8:bb:e3:01:c6:c9:c7:0b:93:30:4c:21:
af:df:c3:50:d8:97:53:37:8e:d0:30:56:6f:f1:19:
30:d2:a5:4e:1e:98:9b:56:1e:6a:3f:8b:b2:4a:6e:
d6:0b:86:76:c8:fd:83:a4:df:f2:54:e1:85:6c:49:
cf:94:5b:98:a2:86:21:a8:60:96:eb:51:f6:38:57:
48:b7:96:24:28:b7:0f:41:b1:14:4f:87:a6:6a:a4:
07:a7:84:65:4c:7d:e9:89:8a:93:81:bb:0a:bd:d5:
54:39:71:0b:4e:5b:9e:6c:48:a5:22:9c:f5:28:8e:
17:3f:82:4a:58:3a:4a:29:8a:58:89:36:43:c7:77:
5a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:76:00:92:6F:7E:C5:AE:45:2B:C3:32:59:C0:A9:D7:5D:38:D0:21
X509v3 Authority Key Identifier:
keyid:FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:0b:7f:c1:75:04:c4:fa:d4:cc:c5:45:70:1f:d0:42:81:73:
54:a9:a1:58:15:42:4d:a7:d7:fa:39:e6:03:ab:3c:d9:0e:8f:
5f:2f:15:02:d5:17:c3:a4:e0:7e:10:02:0c:7c:6e:e4:08:62:
af:68:73:68:21:cc:34:de:a1:ca:fb:53:1a:65:98:10:55:e1:
d7:fd:8a:aa:c6:38:2f:d1:af:24:7d:b9:28:1b:21:a1:61:41:
cb:18:a9:dc:1f:92:00:4a:4f:e6:32:32:db:e8:c9:ed:24:fc:
d2:82:d5:49:69:18:a3:cb:7b:63:86:c3:1d:93:a5:e6:87:87:
bc:01:cc:9c:39:29:fb:db:ae:64:d9:55:63:21:c7:6c:6b:28:
e9:a8:a0:35:39:31:72:0e:53:70:7f:3c:c0:ae:58:db:c1:03:
6c:a7:b1:fa:66:24:25:0e:bc:24:01:b7:ca:cb:6b:66:ff:ef:
a4:b5:94:c6:07:35:16:8a:40:e3:88:db:ef:d5:0b:71:ef:d3:
09:a6:ac:cb:54:6f:24:2b:1d:31:4b:de:c0:ae:fb:c8:4a:5c:
23:e4:b9:9e:bc:b5:1b:74:e0:9c:a4:e7:e9:b5:e3:61:5d:30:
5c:ab:a3:94:9d:60:4f:c6:00:b0:6e:d4:61:d7:2d:0a:1e:7d:
bc:2b:62:b7
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MTg1MzExMC8GA1UEBRMoRkQ5MTQ3QUVGNkEzMzBEMThERDRDOUNGRDg2NDJGMEVE
QUE3QjkwNzAeFw0yNjA0MDUwNzM0NDNaFw0yNjA0MTIwNzM0NDNaMBgxFjAUBgNV
BAMTDTY5ZDIxMDkzLTE5ZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJleMa/GupSbCtwI5zPZ8Dm8xl5wtJsIbkR5LqROxzEBmtdaLcmafOS/CJJhJy
YGI03QPyViJz2X+yfTEg6sti6SLbxnWfKhJC+NC21SSEMmOL/hZ90oEHW1jgxphf
uJRImuWJsIykX3ylAuMUKQCs+yYXHg/9pbONE/i74wHGyccLkzBMIa/fw1DYl1M3
jtAwVm/xGTDSpU4emJtWHmo/i7JKbtYLhnbI/YOk3/JU4YVsSc+UW5iihiGoYJbr
UfY4V0i3liQotw9BsRRPh6ZqpAenhGVMfemJipOBuwq91VQ5cQtOW55sSKUinPUo
jhc/gkpYOkopiliJNkPHd1rfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU73YAkm9+
xa5FK8MyWcCp11040CEwHwYDVR0jBBgwFoAU/ZFHrvajMNGN1MnP2GQvDtqnuQcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxODUzLzFBQjE1QjhDQkRC
MDExRjA4N0VERTkyOUM0RjlBRTAyL19aRkhydmFqTU5HTjFNblAyR1F2RHRxbnVR
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvX1pGSHJ2YWpNTkdOMU1uUDJHUXZEdHFudVFjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx
ODUzLzFBQjE1QjhDQkRCMDExRjA4N0VERTkyOUM0RjlBRTAyL19aRkhydmFqTU5H
TjFNblAyR1F2RHRxbnVRYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBzC3/BdQTE+tTMxUVwH9BCgXNUqaFYFUJNp9f6OeYDqzzZDo9fLxUC1RfDpOB+
EAIMfG7kCGKvaHNoIcw03qHK+1MaZZgQVeHX/Yqqxjgv0a8kfbkoGyGhYUHLGKnc
H5IASk/mMjLb6MntJPzSgtVJaRijy3tjhsMdk6Xmh4e8AcycOSn7265k2VVjIcds
ayjpqKA1OTFyDlNwfzzArljbwQNsp7H6ZiQlDrwkAbfKy2tm/++ktZTGBzUWikDj
iNvv1Qtx79MJpqzLVG8kKx0xS97ArvvISlwj5LmevLUbdOCcpOfpteNhXTBcq6OU
nWBPxgCwbtRh1y0KHn28K2K3
-----END CERTIFICATE-----
Generated at Sun Apr 5 22:24:52 2026 by rpki-client