
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft
File: zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft (raw, json)
Hash identifier: vTg+gXxftJDXJyljYjS2KdBBbWEGUxcLesXnco/CrKk=
Subject key identifier: 91:58:FC:84:06:D1:F5:94:E9:EC:63:A1:0B:09:36:08:56:A5:69:18
Authority key identifier: CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94
Certificate issuer: /CN=A911E93B/serialNumber=CDF6E5654435B3C84DFA10B9BC8710E9EBB0D594
Certificate serial: 77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft
Manifest number: 73
Signing time: Sat 13 Jun 2026 07:54:06 +0000
Manifest this update: Sat 13 Jun 2026 07:54:06 +0000
Manifest next update: Sat 20 Jun 2026 07:54:06 +0000
Files and hashes: 1: zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl (hash: A6evzSUSrNTmaV0tRCrMpDAYMCzmreq9BxqvkF0Gn0M=)
2: DEED8FA0BF0111F0A0DE3D62C4F9AE02.roa (hash: jnfPIPnbj8UH8ywNxN8KKwG7Kyd3mOWwDkCemwVHNFc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl
rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:54:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E93B, serialNumber=CDF6E5654435B3C84DFA10B9BC8710E9EBB0D594
Validity
Not Before: Jun 13 07:54:06 2026 GMT
Not After : Jun 20 07:54:06 2026 GMT
Subject: CN=6a2d0c9e-fc51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:25:75:18:f0:6c:e5:b8:6f:2e:5d:4b:32:
a3:6f:8d:29:8e:08:31:34:be:67:2b:b0:ef:41:85:
6e:ca:fb:c4:54:c3:04:27:59:1c:74:db:1b:cf:59:
36:eb:d4:88:3a:2f:03:7e:f7:d8:af:f4:35:60:e8:
40:b6:78:bb:a0:1e:75:e4:b3:72:5a:73:f6:57:6f:
da:d8:60:e5:38:86:0c:48:ba:d8:ec:ec:55:0d:da:
f7:ef:87:70:b7:f1:a8:e2:94:99:25:24:96:8d:08:
91:05:55:71:c0:04:85:91:a8:41:18:47:b6:81:db:
30:86:a8:90:b2:4b:9a:8c:4f:6e:35:80:27:5f:83:
a7:56:85:4c:1d:7b:38:3d:01:f0:21:68:a7:56:34:
a6:c4:b0:40:1b:2d:5d:c0:d1:d1:28:68:79:e9:24:
6a:de:90:d9:ba:66:37:ac:14:e2:2d:47:16:45:f1:
7d:15:b7:63:e4:46:82:96:3e:23:97:13:f7:79:42:
f3:f4:20:f6:5b:09:9d:bc:60:e1:44:f6:03:91:f6:
85:09:72:04:e6:84:39:72:a1:c5:5a:18:2e:05:bc:
30:54:d6:c5:5e:50:f8:36:57:ae:a1:9c:32:5d:be:
88:56:0b:e0:c3:e2:58:cc:40:b2:09:ab:0c:24:a5:
9f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:58:FC:84:06:D1:F5:94:E9:EC:63:A1:0B:09:36:08:56:A5:69:18
X509v3 Authority Key Identifier:
keyid:CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:bd:a4:33:ae:8b:1b:9d:8c:a1:80:a4:df:f9:84:87:1f:97:
77:d6:43:de:f6:26:25:a6:d1:2a:18:10:52:68:04:fd:26:69:
75:d0:5f:64:e2:c3:20:b6:79:3c:80:4b:eb:63:eb:c4:97:03:
23:e8:8c:b9:f7:ec:78:df:20:f7:a8:d3:c0:aa:b1:da:8e:be:
1c:f4:e2:f1:01:5d:a6:ef:f8:e4:ed:29:fa:d8:d7:84:e6:d1:
05:bb:32:74:70:53:8f:13:a3:f8:91:e3:51:97:36:62:7a:22:
49:23:90:92:f6:50:f6:f2:cc:ce:3f:0b:99:ff:0d:c8:ca:8c:
07:3d:90:80:f2:0a:60:07:5c:7a:60:80:bd:fe:d6:37:4b:b6:
49:1c:b7:25:a5:d8:b2:2a:c5:26:0c:b3:c1:21:d3:bf:b1:40:
bc:69:68:f8:e3:00:5b:c2:70:20:15:25:5c:ff:49:c4:90:5a:
d0:ee:19:d3:b2:9d:4e:65:a8:2e:cf:51:f8:46:f9:3e:4d:17:
2a:4b:b1:3d:a2:4b:c2:36:68:a1:51:e7:ed:71:b9:0d:dc:fe:
1f:af:65:17:30:68:03:2d:1c:bd:bb:c1:c8:9c:41:f0:48:b4:
22:08:4d:78:fa:a0:cd:b3:7b:d4:34:19:c6:3a:c6:7c:ef:b3:
75:3e:b0:16
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
RTkzQjExMC8GA1UEBRMoQ0RGNkU1NjU0NDM1QjNDODRERkExMEI5QkM4NzEwRTlF
QkIwRDU5NDAeFw0yNjA2MTMwNzU0MDZaFw0yNjA2MjAwNzU0MDZaMBgxFjAUBgNV
BAMTDTZhMmQwYzllLWZjNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5XiV1GPBs5bhvLl1LMqNvjSmOCDE0vmcrsO9BhW7K+8RUwwQnWRx02xvPWTbr
1Ig6LwN+99iv9DVg6EC2eLugHnXks3Jac/ZXb9rYYOU4hgxIutjs7FUN2vfvh3C3
8ajilJklJJaNCJEFVXHABIWRqEEYR7aB2zCGqJCyS5qMT241gCdfg6dWhUwdezg9
AfAhaKdWNKbEsEAbLV3A0dEoaHnpJGrekNm6ZjesFOItRxZF8X0Vt2PkRoKWPiOX
E/d5QvP0IPZbCZ28YOFE9gOR9oUJcgTmhDlyocVaGC4FvDBU1sVeUPg2V66hnDJd
vohWC+DD4ljMQLIJqwwkpZ+dAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUkVj8hAbR
9ZTp7GOhCwk2CFalaRgwHwYDVR0jBBgwFoAUzfblZUQ1s8hN+hC5vIcQ6euw1ZQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFOTNCLzdEQkFEMUVFQkYw
MDExRjBCQ0MxNUQ1REM0RjlBRTAyL3pmYmxaVVExczhoTi1oQzV2SWNRNmV1dzFa
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvemZibFpVUTFzOGhOLWhDNXZJY1E2ZXV3MVpRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF
OTNCLzdEQkFEMUVFQkYwMDExRjBCQ0MxNUQ1REM0RjlBRTAyL3pmYmxaVVExczho
Ti1oQzV2SWNRNmV1dzFaUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBTvaQzrosbnYyhgKTf+YSHH5d31kPe9iYlptEqGBBSaAT9Jml10F9k4sMgtnk8
gEvrY+vElwMj6Iy59+x43yD3qNPAqrHajr4c9OLxAV2m7/jk7Sn62NeE5tEFuzJ0
cFOPE6P4keNRlzZieiJJI5CS9lD28szOPwuZ/w3IyowHPZCA8gpgB1x6YIC9/tY3
S7ZJHLclpdiyKsUmDLPBIdO/sUC8aWj44wBbwnAgFSVc/0nEkFrQ7hnTsp1OZagu
z1H4Rvk+TRcqS7E9okvCNmihUeftcbkN3P4fr2UXMGgDLRy9u8HInEHwSLQiCE14
+qDNs3vUNBnGOsZ877N1PrAW
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:12:19 2026 by rpki-client