
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft
File: z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft (raw, json)
Hash identifier: rSX76ArK448MhW80AoAStkUz5QCuhWGTHRE49uxLWfc=
Subject key identifier: 1E:15:4B:32:04:C5:28:F1:3C:C0:EE:09:CD:FA:4E:7A:58:11:3E:D5
Authority key identifier: CF:E4:7B:C8:C7:48:BE:FD:1B:77:52:4C:C7:9F:FA:B5:4C:17:BD:B3
Certificate issuer: /CN=A91F7D5E/serialNumber=CFE47BC8C748BEFD1B77524CC79FFAB54C17BDB3
Certificate serial: 2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-R7yMdIvv0bd1JMx5_6tUwXvbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft
Manifest number: 2D
Signing time: Sun 05 Apr 2026 08:02:59 +0000
Manifest this update: Sun 05 Apr 2026 08:02:59 +0000
Manifest next update: Sun 12 Apr 2026 08:02:59 +0000
Files and hashes: 1: z-R7yMdIvv0bd1JMx5_6tUwXvbM.crl (hash: PgLk8oJeQ2hJ68WoLCI2/VrPt5blfYqiiTsBOrJJhXA=)
2: 75FA3D56F20311F081D1C5E2496F56BC.roa (hash: iKD/upGNnZX+RaqlnGQMRh+aU9FLucr+XYy9zJq/7P4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.crl
rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-R7yMdIvv0bd1JMx5_6tUwXvbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7D5E, serialNumber=CFE47BC8C748BEFD1B77524CC79FFAB54C17BDB3
Validity
Not Before: Apr 5 08:02:59 2026 GMT
Not After : Apr 12 08:02:59 2026 GMT
Subject: CN=69d21733-a8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:11:ef:76:4c:66:92:0b:c8:89:6f:bc:e8:05:
45:8f:51:5f:87:42:cc:95:a3:4f:1d:36:67:30:58:
e6:c7:02:de:3b:22:77:1c:4a:f5:7a:48:02:9b:b3:
67:22:f9:78:93:5a:0b:65:0d:71:0a:41:e1:21:7b:
ec:ef:d5:da:d7:44:17:0e:ad:6b:c1:19:36:bc:ea:
ef:d1:5d:18:12:06:6c:11:0f:07:c7:eb:e8:cc:d3:
f8:f2:0f:51:db:9f:e5:69:a1:70:e8:53:86:bf:20:
d3:63:c4:63:c4:4f:4d:d0:57:89:7b:8b:f5:6d:7e:
f1:14:eb:19:0e:41:87:45:c4:fc:fd:15:d9:fb:92:
e1:27:3a:d4:ed:22:2c:01:da:f3:e3:c5:f4:4b:89:
5b:2c:fa:7b:65:8e:65:67:54:89:ea:00:21:d8:a0:
c8:69:ca:bc:f5:61:af:c3:ff:1f:6b:3e:b0:ff:ae:
23:cf:fd:69:31:55:2f:a1:2e:8f:38:cb:4e:d2:dd:
af:5b:f5:42:62:d1:22:c8:42:9d:04:20:1e:fd:27:
ae:dd:7c:5c:f6:f0:59:30:23:28:c6:15:47:51:75:
c2:c4:38:01:98:12:77:7d:87:d1:75:b3:43:7a:83:
80:d3:19:4d:9c:57:0a:fc:c2:fc:ac:a7:77:8c:41:
8d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:15:4B:32:04:C5:28:F1:3C:C0:EE:09:CD:FA:4E:7A:58:11:3E:D5
X509v3 Authority Key Identifier:
keyid:CF:E4:7B:C8:C7:48:BE:FD:1B:77:52:4C:C7:9F:FA:B5:4C:17:BD:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-R7yMdIvv0bd1JMx5_6tUwXvbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:61:1f:77:d1:40:da:64:78:b4:d4:06:ea:ea:dd:20:31:37:
a6:cc:02:24:ae:9b:de:3a:4d:ee:c8:51:00:5b:6d:ca:00:2e:
46:79:43:29:a1:0c:13:aa:4d:a2:a6:67:e4:0e:d5:22:f3:2a:
54:99:01:a6:fd:ee:81:44:4e:24:45:40:59:f6:2b:67:84:95:
ac:2d:2e:bf:05:ac:da:8c:96:80:aa:74:9c:48:54:75:8f:36:
ac:9e:57:11:67:ef:60:a7:4b:aa:a7:53:9e:d2:f3:aa:57:28:
ef:56:97:1f:3e:90:b6:63:83:ab:4a:2c:42:aa:35:c6:15:7d:
c0:60:11:bc:13:1c:e2:63:77:54:7d:d6:de:2e:38:ed:9b:5d:
e4:82:58:17:65:9f:55:92:ca:14:ef:ce:ae:4f:50:6a:ce:f2:
4b:9d:18:38:1e:c2:d8:ff:3e:9f:97:c7:0b:68:04:0b:b4:c1:
a4:8d:7d:5c:17:85:9c:16:81:aa:26:1d:3c:98:62:f0:63:7a:
2a:26:a8:89:c4:12:bd:fe:6c:23:28:60:89:e9:60:d1:09:cf:
65:7c:f1:51:6f:17:4f:b1:43:fd:38:3f:e7:ea:2f:55:f9:73:
a5:86:c6:34:87:41:62:38:1d:26:21:0a:3a:f6:a3:86:70:9b:
65:30:8b:88
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
N0Q1RTExMC8GA1UEBRMoQ0ZFNDdCQzhDNzQ4QkVGRDFCNzc1MjRDQzc5RkZBQjU0
QzE3QkRCMzAeFw0yNjA0MDUwODAyNTlaFw0yNjA0MTIwODAyNTlaMBgxFjAUBgNV
BAMTDTY5ZDIxNzMzLWE4ZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCZEe92TGaSC8iJb7zoBUWPUV+HQsyVo08dNmcwWObHAt47InccSvV6SAKbs2ci
+XiTWgtlDXEKQeEhe+zv1drXRBcOrWvBGTa86u/RXRgSBmwRDwfH6+jM0/jyD1Hb
n+VpoXDoU4a/INNjxGPET03QV4l7i/VtfvEU6xkOQYdFxPz9Fdn7kuEnOtTtIiwB
2vPjxfRLiVss+ntljmVnVInqACHYoMhpyrz1Ya/D/x9rPrD/riPP/WkxVS+hLo84
y07S3a9b9UJi0SLIQp0EIB79J67dfFz28FkwIyjGFUdRdcLEOAGYEnd9h9F1s0N6
g4DTGU2cVwr8wvysp3eMQY1jAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHhVLMgTF
KPE8wO4JzfpOelgRPtUwHwYDVR0jBBgwFoAUz+R7yMdIvv0bd1JMx5/6tUwXvbMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3RDVFLzE4QzgzRjQwRjIw
MTExRjBBRDQxOENCQTQ4NkY1NkJDL3otUjd5TWRJdnYwYmQxSk14NV82dFV3WHZi
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvei1SN3lNZEl2djBiZDFKTXg1XzZ0VXdYdmJNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3
RDVFLzE4QzgzRjQwRjIwMTExRjBBRDQxOENCQTQ4NkY1NkJDL3otUjd5TWRJdnYw
YmQxSk14NV82dFV3WHZiTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQANYR930UDaZHi01Abq6t0gMTemzAIkrpveOk3uyFEAW23KAC5GeUMpoQwTqk2i
pmfkDtUi8ypUmQGm/e6BRE4kRUBZ9itnhJWsLS6/BazajJaAqnScSFR1jzasnlcR
Z+9gp0uqp1Oe0vOqVyjvVpcfPpC2Y4OrSixCqjXGFX3AYBG8ExziY3dUfdbeLjjt
m13kglgXZZ9VksoU786uT1BqzvJLnRg4HsLY/z6fl8cLaAQLtMGkjX1cF4WcFoGq
Jh08mGLwY3oqJqiJxBK9/mwjKGCJ6WDRCc9lfPFRbxdPsUP9OD/n6i9V+XOlhsY0
h0FiOB0mIQo69qOGcJtlMIuI
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:23 2026 by rpki-client