
$ rpki-client -vvf rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft
File: ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft (raw, json)
Hash identifier: ZNVygDp5W/pCCa+nli2KdjSx9tSo9Ri5464VrHnPTgs=
Subject key identifier: CD:4C:9D:12:8B:30:C1:D3:0F:2B:29:B2:59:DB:D5:5D:F2:16:E5:FB
Authority key identifier: 64:67:E9:26:C2:14:4E:CD:0F:27:48:F8:49:32:8F:85:F0:28:AE:94
Certificate issuer: /CN=A91410C5/serialNumber=6467E926C2144ECD0F2748F849328F85F028AE94
Certificate serial: 91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft
Manifest number: 91
Signing time: Sun 05 Apr 2026 06:51:35 +0000
Manifest this update: Sun 05 Apr 2026 06:51:35 +0000
Manifest next update: Sun 12 Apr 2026 06:51:35 +0000
Files and hashes: 1: ZGfpJsIUTs0PJ0j4STKPhfAorpQ.crl (hash: UTQazukZjk3OxBsc+fvLfYL0w1cuQbWRPf3ceITd1Ck=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.crl
rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91410C5, serialNumber=6467E926C2144ECD0F2748F849328F85F028AE94
Validity
Not Before: Apr 5 06:51:35 2026 GMT
Not After : Apr 12 06:51:35 2026 GMT
Subject: CN=69d20677-459c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:f8:e9:3f:2b:40:ef:6b:6c:ee:97:15:62:
48:8e:95:1b:c3:c2:54:80:1b:5d:14:8f:54:b4:dc:
0a:c1:b8:99:28:d6:77:9f:6a:66:77:b1:41:26:bf:
f9:ce:0b:04:02:bf:fc:5d:7c:12:b8:c1:05:1f:bc:
35:f7:01:1c:60:46:55:6e:4d:fc:d4:5b:1f:94:59:
2f:ed:b1:65:ec:87:58:b4:7c:7c:64:75:e2:10:e0:
4c:c3:0b:49:dd:8e:b3:46:dc:c9:03:41:88:2e:60:
59:9c:e3:1c:66:83:9f:90:30:e8:0d:7f:c8:da:4a:
6c:e1:f6:12:1f:ec:b2:5d:94:cf:d3:18:fa:2e:7f:
57:34:c8:09:c3:45:cc:16:19:83:dc:36:10:82:99:
43:84:8d:47:fc:67:75:b9:2f:18:1f:a1:40:0f:2c:
d4:7f:fd:26:cc:ff:66:32:b0:d6:02:69:a4:71:5c:
54:2e:e9:49:ce:4f:9a:c7:1e:ef:57:cf:78:06:55:
e2:b0:85:c4:99:af:4a:87:46:02:d8:92:46:d0:7c:
87:ee:8e:4c:db:90:03:08:4c:90:38:64:93:4a:ec:
ac:e4:d7:86:f8:ac:f2:49:ba:24:7a:de:15:70:1c:
a7:fd:0a:16:94:f8:dc:0c:53:86:33:28:8f:5e:55:
7a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4C:9D:12:8B:30:C1:D3:0F:2B:29:B2:59:DB:D5:5D:F2:16:E5:FB
X509v3 Authority Key Identifier:
keyid:64:67:E9:26:C2:14:4E:CD:0F:27:48:F8:49:32:8F:85:F0:28:AE:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:4c:26:a2:7e:80:85:40:14:67:e0:a7:fc:18:b1:c1:a0:4f:
49:f1:19:4c:8c:7c:25:90:95:80:29:18:65:71:f8:d0:0d:6d:
0c:25:84:ed:ea:03:a3:59:f6:2d:07:00:6b:51:79:1d:a6:0e:
55:8a:d2:f0:e6:2a:e7:23:01:b5:48:f4:1c:c3:84:58:16:9d:
26:1e:1a:d7:a3:f3:47:3c:43:15:da:f4:f2:34:e9:7e:8f:cf:
10:49:45:61:ac:c0:2f:08:c0:6d:17:de:ee:d7:10:95:de:41:
6c:5a:2b:96:c8:95:a1:5d:9c:09:98:ea:4f:e1:b2:a8:42:2e:
63:80:dd:22:09:bd:7f:26:e1:a2:aa:eb:1c:27:da:0c:95:af:
09:07:2b:58:49:39:0a:2b:dc:ee:89:b6:28:92:de:b1:48:98:
b8:cd:f4:b9:fa:d2:9e:64:4e:e7:ba:20:42:ce:80:33:98:a6:
57:09:33:57:16:a3:39:6e:3c:2d:85:ea:f3:4b:ad:cf:d4:2f:
16:bb:3b:e2:3b:67:50:b4:6e:6b:ee:9d:6f:30:08:6d:dc:2d:
9b:0c:fe:ea:32:26:06:bb:d4:62:4c:d1:7d:86:18:a3:b0:97:
81:44:1e:60:9e:ab:2c:aa:68:cd:c7:d3:c6:a0:11:ce:b3:88:
1e:6a:5c:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDEwQzUxMTAvBgNVBAUTKDY0NjdFOTI2QzIxNDRFQ0QwRjI3NDhGODQ5MzI4Rjg1
RjAyOEFFOTQwHhcNMjYwNDA1MDY1MTM1WhcNMjYwNDEyMDY1MTM1WjAYMRYwFAYD
VQQDEw02OWQyMDY3Ny00NTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1gz46T8rQO9rbO6XFWJIjpUbw8JUgBtdFI9UtNwKwbiZKNZ3n2pmd7FBJr/5
zgsEAr/8XXwSuMEFH7w19wEcYEZVbk381FsflFkv7bFl7IdYtHx8ZHXiEOBMwwtJ
3Y6zRtzJA0GILmBZnOMcZoOfkDDoDX/I2kps4fYSH+yyXZTP0xj6Ln9XNMgJw0XM
FhmD3DYQgplDhI1H/Gd1uS8YH6FADyzUf/0mzP9mMrDWAmmkcVxULulJzk+axx7v
V894BlXisIXEma9Kh0YC2JJG0HyH7o5M25ADCEyQOGSTSuys5NeG+KzySboket4V
cByn/QoWlPjcDFOGMyiPXlV64QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM1MnRKL
MMHTDyspslnb1V3yFuX7MB8GA1UdIwQYMBaAFGRn6SbCFE7NDydI+Ekyj4XwKK6U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTBDNS9EQjBBRTQzNjU3
MkUxMUYwOTVGN0ZFNDhDNEY5QUUwMi9aR2ZwSnNJVVRzMFBKMGo0U1RLUGhmQW9y
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pHZnBKc0lVVHMwUEowajRTVEtQaGZBb3JwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MTBDNS9EQjBBRTQzNjU3MkUxMUYwOTVGN0ZFNDhDNEY5QUUwMi9aR2ZwSnNJVVRz
MFBKMGo0U1RLUGhmQW9ycFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANEwmon6AhUAUZ+Cn/BixwaBPSfEZTIx8JZCVgCkYZXH40A1tDCWE7eoDo1n2
LQcAa1F5HaYOVYrS8OYq5yMBtUj0HMOEWBadJh4a16PzRzxDFdr08jTpfo/PEElF
YazALwjAbRfe7tcQld5BbForlsiVoV2cCZjqT+GyqEIuY4DdIgm9fybhoqrrHCfa
DJWvCQcrWEk5Civc7om2KJLesUiYuM30ufrSnmRO57ogQs6AM5imVwkzVxajOW48
LYXq80utz9QvFrs74jtnULRua+6dbzAIbdwtmwz+6jImBrvUYkzRfYYYo7CXgUQe
YJ6rLKpozcfTxqARzrOIHmpcFQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:25:33 2026 by rpki-client