
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft
File: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft (raw, json)
Hash identifier: PYiYkXbtGblh6z6B9erq6dmDQGfLsWdGVPrIA0Jkwu8=
Subject key identifier: 29:79:9F:CE:E7:B4:AA:A1:F0:68:86:50:CF:AD:B5:EC:E1:55:9C:3E
Authority key identifier: CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88
Certificate issuer: /CN=A911E24A/serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88
Certificate serial: 0A04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft
Manifest number: 09FC
Signing time: Thu 20 Aug 2026 19:43:27 +0000
Manifest this update: Thu 20 Aug 2026 19:43:27 +0000
Manifest next update: Thu 27 Aug 2026 19:43:27 +0000
Files and hashes: 1: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl (hash: HsoIZSkanTzngnrRhQqnPetdAvmcAnjDTovK/q/4EyE=)
2: 7B68D8F2A3E811EAB397F675C4F9AE02.roa (hash: b1FfdoGhx5a9SVnzfI7f+c3x30UgLcfNHueh+5jSvgI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl
rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2564 (0xa04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E24A, serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88
Validity
Not Before: Aug 20 19:43:27 2026 GMT
Not After : Aug 27 19:43:27 2026 GMT
Subject: CN=6a8758df-14de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:08:41:61:9d:cf:ce:13:92:be:6c:b1:1e:7e:
89:fc:64:39:14:c2:4c:55:c5:53:34:4d:05:b4:95:
84:af:00:67:a0:a3:4f:64:38:18:cb:51:6a:93:f1:
2b:09:2e:e1:63:97:c8:2e:ff:8a:a0:03:7a:a3:95:
5f:0a:b5:36:36:f0:f2:f3:e7:98:e2:61:fe:98:5d:
ab:47:31:48:96:a7:9a:ad:31:4c:88:99:c2:b3:49:
5c:af:25:88:c5:cc:ba:95:e1:9b:f6:0a:e0:03:95:
1d:57:81:48:91:0a:d5:f6:b5:59:62:65:d7:db:7b:
78:2c:a9:e8:f6:5f:5b:c6:d4:56:4a:de:d6:f5:46:
9a:53:4d:47:9c:7e:b9:29:97:ac:5b:52:c3:e0:f8:
5c:0a:c4:26:ca:c0:eb:ac:bc:14:1b:91:a4:df:c8:
98:25:6a:2d:d8:aa:33:53:10:38:48:b2:1b:98:55:
1a:cf:91:dc:0b:4c:88:8b:65:30:c6:7c:2d:98:f8:
e9:a3:20:1f:62:40:97:cd:80:05:d0:61:dd:c6:1f:
4c:9a:12:3c:fe:5f:6f:49:88:fe:67:10:37:14:5b:
2d:10:d7:f5:19:86:ab:7a:7a:24:63:62:bd:30:42:
53:28:6a:09:b6:69:39:f9:5e:98:09:bd:15:8f:98:
02:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:79:9F:CE:E7:B4:AA:A1:F0:68:86:50:CF:AD:B5:EC:E1:55:9C:3E
X509v3 Authority Key Identifier:
keyid:CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:54:78:a9:7a:ca:2c:a1:a8:9f:ae:2a:29:76:1b:d8:90:fc:
3c:e6:4e:84:cd:ed:9c:78:2d:fa:a3:67:70:25:7c:d3:fd:49:
0b:39:ad:60:84:d0:6f:09:27:dc:a5:df:4c:41:47:7d:02:04:
cc:cd:b3:63:64:07:9d:7c:72:0e:59:16:4a:ad:e5:9c:89:df:
f3:4d:e0:95:d7:e8:1c:e3:b9:01:74:ec:13:4c:db:8b:34:84:
dd:92:96:9e:bd:d1:fa:e7:12:4d:40:c1:53:83:60:03:ad:a7:
a4:20:95:3e:81:f1:3c:18:6b:59:f5:49:27:e9:fb:52:4f:9d:
76:d2:36:37:86:4c:39:37:f2:2f:4e:bd:06:13:de:0a:8d:26:
61:d6:9b:43:0e:71:43:b2:30:5b:73:cf:21:29:31:08:a9:d8:
df:11:95:05:d3:eb:3d:ad:ad:6a:d7:7a:f4:3f:07:67:99:0a:
7f:fa:dc:20:d7:df:ae:3b:51:dc:bf:c4:c5:cd:12:c4:35:f6:
e9:b9:6f:6c:3d:93:16:92:d8:53:9c:38:46:50:7a:fe:15:50:
94:c8:a7:8b:21:50:be:f1:56:aa:c2:da:f5:1f:72:9f:7c:93:
b9:50:01:6a:09:f0:d7:9c:5f:a5:8c:2c:ac:49:fa:b8:a5:87:
b6:d6:93:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUUyNEExMTAvBgNVBAUTKENENEZCOTEwRjNFNkY1OUM1OUNFNUFDQzk0MzhFREQw
OEQ1NkZDODgwHhcNMjYwODIwMTk0MzI3WhcNMjYwODI3MTk0MzI3WjAYMRYwFAYD
VQQDEw02YTg3NThkZi0xNGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvghBYZ3PzhOSvmyxHn6J/GQ5FMJMVcVTNE0FtJWErwBnoKNPZDgYy1Fqk/Er
CS7hY5fILv+KoAN6o5VfCrU2NvDy8+eY4mH+mF2rRzFIlqearTFMiJnCs0lcryWI
xcy6leGb9grgA5UdV4FIkQrV9rVZYmXX23t4LKno9l9bxtRWSt7W9UaaU01HnH65
KZesW1LD4PhcCsQmysDrrLwUG5Gk38iYJWot2KozUxA4SLIbmFUaz5HcC0yIi2Uw
xnwtmPjpoyAfYkCXzYAF0GHdxh9MmhI8/l9vSYj+ZxA3FFstENf1GYarenokY2K9
MEJTKGoJtmk5+V6YCb0Vj5gC+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCl5n87n
tKqh8GiGUM+ttezhVZw+MB8GA1UdIwQYMBaAFM1PuRDz5vWcWc5azJQ47dCNVvyI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTI0QS82MzVDMDExOEEz
RTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTlaeFp6bHJNbERqdDBJMVdf
SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pVLTVFUFBtOVp4Wnpsck1sRGp0MEkxV19JZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RTI0QS82MzVDMDExOEEzRTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTla
eFp6bHJNbERqdDBJMVdfSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmFR4qXrKLKGon64qKXYb2JD8POZOhM3tnHgt+qNncCV80/1JCzmtYITQbwkn
3KXfTEFHfQIEzM2zY2QHnXxyDlkWSq3lnInf803gldfoHOO5AXTsE0zbizSE3ZKW
nr3R+ucSTUDBU4NgA62npCCVPoHxPBhrWfVJJ+n7Uk+ddtI2N4ZMOTfyL069BhPe
Co0mYdabQw5xQ7IwW3PPISkxCKnY3xGVBdPrPa2tatd69D8HZ5kKf/rcINffrjtR
3L/Exc0SxDX26blvbD2TFpLYU5w4RlB6/hVQlMiniyFQvvFWqsLa9R9yn3yTuVAB
agnw15xfpYwsrEn6uKWHttaTQA==
-----END CERTIFICATE-----
Generated at Sat Aug 22 12:02:04 2026 by rpki-client