
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft
File: zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft (raw, json)
Hash identifier: 2brqTvrmt9Q3jHDtAUzG+9ezRuuReyrBYnDOY/k0PM8=
Subject key identifier: 38:57:AE:60:8D:F7:CC:DB:0F:57:F7:86:B9:FE:58:EC:0B:4F:B9:1B
Authority key identifier: CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94
Certificate issuer: /CN=A911E93B/serialNumber=CDF6E5654435B3C84DFA10B9BC8710E9EBB0D594
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft
Manifest number: 95
Signing time: Wed 19 Aug 2026 08:07:01 +0000
Manifest this update: Wed 19 Aug 2026 08:07:00 +0000
Manifest next update: Wed 26 Aug 2026 08:07:00 +0000
Files and hashes: 1: zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl (hash: FnBzHKmJSftAWO/41UVzSYG6+SmjBXd2IIrurfiJoOk=)
2: DEED8FA0BF0111F0A0DE3D62C4F9AE02.roa (hash: jnfPIPnbj8UH8ywNxN8KKwG7Kyd3mOWwDkCemwVHNFc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl
rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E93B, serialNumber=CDF6E5654435B3C84DFA10B9BC8710E9EBB0D594
Validity
Not Before: Aug 19 08:07:00 2026 GMT
Not After : Aug 26 08:07:00 2026 GMT
Subject: CN=6a856425-b755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a2:4f:7c:2d:c1:78:be:03:44:cf:d8:55:a7:
b6:57:d4:f4:0b:1a:64:fc:19:9d:c7:35:fa:70:33:
03:d5:9c:55:9c:ad:28:96:31:f0:a6:0a:2f:01:6c:
51:80:25:34:56:b6:3f:7a:14:0f:4c:ef:d1:89:2b:
a1:c0:61:4a:80:3d:52:ff:29:62:65:b3:d7:95:e9:
44:4b:ef:96:0d:8f:d5:c3:e6:43:62:1c:38:18:42:
17:c2:bf:0c:f5:1b:a6:f5:9e:52:fb:f2:8a:3f:cc:
c0:7d:22:c2:de:c7:81:40:9c:01:d2:d7:17:7c:b7:
35:94:b9:af:c5:1d:be:e8:66:ad:1b:58:13:ff:7f:
7b:ca:07:64:7c:fc:ff:64:50:4e:2b:ab:15:f8:2e:
dc:d1:ec:b3:ef:0c:af:4f:29:14:74:3d:9b:1d:15:
65:42:bd:4e:d4:d6:4f:93:0c:28:63:0b:1a:5d:aa:
06:50:b0:1a:10:e0:bf:d2:be:47:e8:e7:9b:42:82:
dc:cc:8b:d8:46:5b:f1:e6:7b:39:43:05:ad:42:4a:
24:42:7b:79:78:09:55:b1:29:f1:b8:07:69:91:8d:
00:7c:f6:51:91:58:74:aa:bd:95:97:b2:71:6a:47:
62:33:a5:fe:08:ec:e9:6b:2b:05:df:bb:12:c6:c7:
cf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:57:AE:60:8D:F7:CC:DB:0F:57:F7:86:B9:FE:58:EC:0B:4F:B9:1B
X509v3 Authority Key Identifier:
keyid:CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:c3:ef:9c:0d:fd:a1:a9:62:d5:61:51:6e:2d:01:f1:8b:99:
59:73:34:a2:8d:eb:35:9b:50:b8:31:b4:67:04:dd:68:1c:a0:
63:74:55:34:7d:32:f2:f4:9b:3d:5f:64:02:e6:0d:b8:e2:d7:
d7:33:ee:3a:b5:c2:25:d1:fc:2a:ce:89:84:8e:2e:77:1c:21:
95:8e:62:55:48:7d:4b:6c:1c:f4:94:8d:2b:9a:7e:ac:63:57:
ef:0c:03:56:cd:4d:8f:4e:fa:4b:c9:09:28:eb:56:ae:2c:98:
cf:9a:7c:5e:06:93:01:ce:cd:93:61:a7:08:58:14:2a:2c:45:
cd:c3:7e:5f:27:6d:80:1a:0c:fc:55:a3:d7:35:b1:86:a2:96:
09:25:63:91:6e:f0:ef:76:b2:44:46:f4:d8:e2:14:22:17:a3:
c8:d0:4d:40:66:0c:20:ec:4d:21:80:b9:3b:99:cb:19:ff:a5:
47:04:80:96:fa:b4:f6:ce:c4:3c:ca:12:21:5f:b6:45:d5:13:
3f:68:87:e9:ce:6f:ee:65:91:79:57:86:39:40:57:ab:c2:ec:
bf:bd:fa:4d:4c:a5:43:3c:04:4e:7d:6f:c1:b4:fc:75:40:5e:
28:90:b0:d0:43:ae:7c:b8:80:30:c7:c1:2a:ec:6c:a7:d2:89:
4e:88:cc:30
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUU5M0IxMTAvBgNVBAUTKENERjZFNTY1NDQzNUIzQzg0REZBMTBCOUJDODcxMEU5
RUJCMEQ1OTQwHhcNMjYwODE5MDgwNzAwWhcNMjYwODI2MDgwNzAwWjAYMRYwFAYD
VQQDEw02YTg1NjQyNS1iNzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuqJPfC3BeL4DRM/YVae2V9T0Cxpk/BmdxzX6cDMD1ZxVnK0oljHwpgovAWxR
gCU0VrY/ehQPTO/RiSuhwGFKgD1S/yliZbPXlelES++WDY/Vw+ZDYhw4GEIXwr8M
9Rum9Z5S+/KKP8zAfSLC3seBQJwB0tcXfLc1lLmvxR2+6GatG1gT/397ygdkfPz/
ZFBOK6sV+C7c0eyz7wyvTykUdD2bHRVlQr1O1NZPkwwoYwsaXaoGULAaEOC/0r5H
6OebQoLczIvYRlvx5ns5QwWtQkokQnt5eAlVsSnxuAdpkY0AfPZRkVh0qr2Vl7Jx
akdiM6X+COzpaysF37sSxsfPnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDhXrmCN
98zbD1f3hrn+WOwLT7kbMB8GA1UdIwQYMBaAFM325WVENbPITfoQubyHEOnrsNWU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTkzQi83REJBRDFFRUJG
MDAxMUYwQkNDMTVENURDNEY5QUUwMi96ZmJsWlVRMXM4aE4taEM1dkljUTZldXcx
WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pmYmxaVVExczhoTi1oQzV2SWNRNmV1dzFaUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RTkzQi83REJBRDFFRUJGMDAxMUYwQkNDMTVENURDNEY5QUUwMi96ZmJsWlVRMXM4
aE4taEM1dkljUTZldXcxWlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYcPvnA39oali1WFRbi0B8YuZWXM0oo3rNZtQuDG0ZwTdaBygY3RVNH0y8vSb
PV9kAuYNuOLX1zPuOrXCJdH8Ks6JhI4udxwhlY5iVUh9S2wc9JSNK5p+rGNX7wwD
Vs1Nj076S8kJKOtWriyYz5p8XgaTAc7Nk2GnCFgUKixFzcN+XydtgBoM/FWj1zWx
hqKWCSVjkW7w73ayREb02OIUIhejyNBNQGYMIOxNIYC5O5nLGf+lRwSAlvq09s7E
PMoSIV+2RdUTP2iH6c5v7mWReVeGOUBXq8Lsv736TUylQzwETn1vwbT8dUBeKJCw
0EOufLiAMMfBKuxsp9KJTojMMA==
-----END CERTIFICATE-----
Generated at Fri Aug 21 05:13:14 2026 by rpki-client