
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft
File: zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft (raw, json)
Hash identifier: SODTJTCW2hJ+Sb7ovdloYSY0h1fhaV7FMP1nzdbbX+g=
Subject key identifier: EA:AA:14:4E:92:4C:3C:1B:4B:67:3B:3F:A8:13:93:AE:9A:8B:D2:92
Authority key identifier: CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84
Certificate issuer: /CN=A9112407/serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084
Certificate serial: 0748
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft
Manifest number: 073D
Signing time: Mon 14 Sep 2026 21:46:27 +0000
Manifest this update: Mon 14 Sep 2026 21:46:26 +0000
Manifest next update: Mon 21 Sep 2026 21:46:26 +0000
Files and hashes: 1: zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl (hash: WTCCuiPyfyIVu4c4OuTMjFp4aS0ZvEfOIV9H8STi6ig=)
2: 3DF2A2EC3AB311EC977A5D60C4F9AE02.roa (hash: y4QF6Zzf/preGT5Q9leQWLrm++JWhs0vBjGPZhanPmQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl
rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 21:46:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1864 (0x748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112407, serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084
Validity
Not Before: Sep 14 21:46:26 2026 GMT
Not After : Sep 21 21:46:26 2026 GMT
Subject: CN=6aa86b33-00fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:81:c2:68:69:a8:a3:93:0e:5b:ae:0a:b0:
20:92:0e:48:81:23:40:ed:52:a2:76:e4:e5:6b:c3:
3b:1a:fd:63:ee:fb:af:87:8b:d1:fa:26:85:74:6a:
59:b5:fc:f7:d5:f4:c6:f7:38:76:0d:9d:6f:c4:1f:
0d:3a:d6:08:3d:9e:88:b6:9e:64:f1:ee:aa:73:ea:
3c:9e:f0:03:14:2e:1f:c2:50:5d:86:64:9d:99:e2:
b5:d5:31:e4:5e:6c:4e:db:4b:f5:d9:e8:41:59:e8:
63:87:90:85:41:81:e6:1c:76:58:92:06:09:5c:9d:
53:a3:75:e1:81:07:f4:c9:36:dd:19:2b:22:2f:15:
5a:37:d5:13:bd:21:40:90:0c:95:95:28:89:43:1b:
06:1e:1f:d0:ce:75:bb:64:85:cc:0b:49:e5:43:b3:
d9:7a:ea:d0:c8:c8:ba:7d:0c:f6:2f:47:cd:6a:a4:
de:20:c7:f5:75:61:2a:35:ec:5e:06:09:aa:80:e4:
6d:13:b8:d3:a8:b6:d3:2e:d6:ef:f3:fd:93:c2:69:
71:35:79:3b:7e:0d:b4:c2:bf:f9:47:98:04:9b:64:
03:b2:6a:28:d1:cb:c0:58:c9:c9:e5:da:fd:71:94:
be:1b:04:08:8a:e2:ed:af:42:e1:57:7d:06:0a:d0:
e4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AA:14:4E:92:4C:3C:1B:4B:67:3B:3F:A8:13:93:AE:9A:8B:D2:92
X509v3 Authority Key Identifier:
keyid:CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:1c:3b:42:77:0b:e1:c3:a4:5b:27:ab:59:74:ef:34:ff:75:
e6:ae:d6:ed:1d:d8:2f:7f:99:0a:62:5c:84:da:81:54:e9:5a:
82:44:3c:b6:72:6c:55:69:12:fa:b5:ad:eb:0a:a8:f9:5b:de:
25:de:21:5b:86:47:68:ea:43:f1:b2:15:3d:2d:78:5d:8b:7e:
9c:fa:ab:8b:3f:b9:02:bf:db:7a:db:96:30:62:ee:0c:c3:c4:
46:cb:10:13:b5:6b:70:25:24:af:a4:4f:a8:e3:29:34:a7:35:
5b:da:c3:19:52:fe:65:5a:c6:81:2f:76:a1:22:6d:03:e7:14:
55:a9:9a:2a:db:2b:58:25:c9:9f:66:b5:c2:f7:e3:1c:fc:d2:
1e:88:c2:30:0f:66:83:6b:72:74:76:e2:11:43:1d:d0:e2:13:
2d:ff:cc:2a:41:af:0c:ae:d0:de:e3:c5:9d:8d:25:61:df:f1:
68:f4:10:65:8d:46:cf:ee:22:2c:81:c3:38:4f:b0:28:ab:e6:
62:ee:e5:37:93:b0:95:68:9e:87:5f:a9:8b:cd:9b:c0:db:25:
14:d7:e6:d0:c9:ad:b3:e1:40:79:dc:67:12:2d:0d:95:7c:9d:
5d:18:93:39:fc:e5:ec:e9:8a:ec:39:bb:29:dd:08:89:21:95:
89:45:96:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTI0MDcxMTAvBgNVBAUTKENGMjE1MjZEOTI2Q0I4MzIzNzRDOEU5QkQ1Q0UxRDVC
QkNENjYwODQwHhcNMjYwOTE0MjE0NjI2WhcNMjYwOTIxMjE0NjI2WjAYMRYwFAYD
VQQDEw02YWE4NmIzMy0wMGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp5iBwmhpqKOTDluuCrAgkg5IgSNA7VKiduTla8M7Gv1j7vuvh4vR+iaFdGpZ
tfz31fTG9zh2DZ1vxB8NOtYIPZ6Itp5k8e6qc+o8nvADFC4fwlBdhmSdmeK11THk
XmxO20v12ehBWehjh5CFQYHmHHZYkgYJXJ1To3XhgQf0yTbdGSsiLxVaN9UTvSFA
kAyVlSiJQxsGHh/QznW7ZIXMC0nlQ7PZeurQyMi6fQz2L0fNaqTeIMf1dWEqNexe
BgmqgORtE7jTqLbTLtbv8/2TwmlxNXk7fg20wr/5R5gEm2QDsmoo0cvAWMnJ5dr9
cZS+GwQIiuLtr0LhV30GCtDkFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOqqFE6S
TDwbS2c7P6gTk66ai9KSMB8GA1UdIwQYMBaAFM8hUm2SbLgyN0yOm9XOHVu81mCE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjQwNy85MDBERkY1RTkw
NTkxMUVCOEYxRUVFMTBDNEY5QUUwMi96eUZTYlpKc3VESTNUSTZiMWM0ZFc3eldZ
SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3p5RlNiWkpzdURJM1RJNmIxYzRkVzd6V1lJUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MjQwNy85MDBERkY1RTkwNTkxMUVCOEYxRUVFMTBDNEY5QUUwMi96eUZTYlpKc3VE
STNUSTZiMWM0ZFc3eldZSVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiBw7QncL4cOkWyerWXTvNP915q7W7R3YL3+ZCmJchNqBVOlagkQ8tnJsVWkS
+rWt6wqo+VveJd4hW4ZHaOpD8bIVPS14XYt+nPqriz+5Ar/betuWMGLuDMPERssQ
E7VrcCUkr6RPqOMpNKc1W9rDGVL+ZVrGgS92oSJtA+cUVamaKtsrWCXJn2a1wvfj
HPzSHojCMA9mg2tydHbiEUMd0OITLf/MKkGvDK7Q3uPFnY0lYd/xaPQQZY1Gz+4i
LIHDOE+wKKvmYu7lN5OwlWieh1+pi82bwNslFNfm0Mmts+FAedxnEi0NlXydXRiT
Ofzl7OmK7Dm7Kd0IiSGViUWWzA==
-----END CERTIFICATE-----
Generated at Tue Sep 15 14:06:20 2026 by rpki-client