
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
File: zUt2FunCVC_hBdTxTq4yFljUSzs.mft (raw, json)
Hash identifier: nSy79YQKmQ9WowrWhCNnDPiXDzjlfS8yK3c4TDf6YTA=
Subject key identifier: 74:CE:FA:40:AF:DD:9B:3D:F3:9D:90:B2:FD:DE:0C:DB:27:25:96:A4
Authority key identifier: CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B
Certificate issuer: /CN=A9141974/serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B
Certificate serial: 0DB6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
Manifest number: 0DAC
Signing time: Tue 06 Oct 2026 17:59:19 +0000
Manifest this update: Tue 06 Oct 2026 17:59:19 +0000
Manifest next update: Tue 13 Oct 2026 17:59:19 +0000
Files and hashes: 1: zUt2FunCVC_hBdTxTq4yFljUSzs.crl (hash: lVz2rQlmf0Q3KWsRZ3MiSXKNAomDearMB/q+d7Q3Z7Q=)
2: DD53E3B8F0B511E98108C962C4F9AE02.roa (hash: s9hmyoej1nfUvRlTuEd/SsO1eziWbeBk+9upM7WYKEI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl
rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 17:59:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3510 (0xdb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141974, serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B
Validity
Not Before: Oct 6 17:59:19 2026 GMT
Not After : Oct 13 17:59:19 2026 GMT
Subject: CN=6ac536f7-ea37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2c:93:6e:74:26:f2:a5:d9:7e:d4:d1:96:db:
b0:b4:0c:56:90:f1:8a:73:c1:14:56:69:b7:1b:b8:
20:4f:ed:3d:3d:7b:cd:f0:73:5e:62:c4:a1:c7:50:
cb:c6:77:07:13:0b:19:ea:b4:83:84:20:83:37:18:
25:66:0f:84:0c:49:90:16:b1:8d:9a:42:da:27:f9:
8d:7f:c5:5d:64:52:14:ec:34:74:63:a3:c3:88:09:
67:75:6e:d0:2c:b7:6c:46:59:41:d7:71:8a:2a:bc:
b8:4f:c0:dd:1a:77:68:56:2e:dc:4c:72:64:36:c7:
c3:15:fb:7b:06:83:3d:0f:a6:cd:22:0f:80:ae:a4:
eb:e6:c0:98:cc:b1:42:0f:12:12:2c:a7:8a:2c:0f:
48:74:b7:f1:6a:07:df:62:88:aa:66:58:57:35:b7:
f0:d7:a3:fc:e0:8b:06:57:80:89:20:6b:e9:19:48:
15:f1:65:3a:c4:3d:db:42:fb:16:36:08:0f:de:d8:
27:dc:af:68:d2:ca:b0:6f:e0:a6:b7:34:3a:6d:91:
90:0a:12:71:08:cb:24:c9:c9:64:0a:7b:81:ba:fd:
97:b9:87:15:38:81:0e:35:02:d5:0d:a9:f6:8d:64:
31:d4:19:32:ba:8b:cc:17:d8:c9:58:40:c8:8d:dc:
cf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CE:FA:40:AF:DD:9B:3D:F3:9D:90:B2:FD:DE:0C:DB:27:25:96:A4
X509v3 Authority Key Identifier:
keyid:CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:81:2e:d4:03:ae:4c:28:c7:32:8a:26:dc:c2:bf:ee:fa:2f:
69:c8:26:61:c2:ac:20:5a:73:98:c6:c7:3f:32:ed:ca:a1:22:
c2:f4:1e:34:fb:a1:c5:97:23:ed:41:ad:5a:20:34:42:be:f3:
86:3d:63:d6:27:e4:42:dc:2e:e6:a1:1e:7f:a8:ad:66:92:81:
ef:d3:e4:3a:fa:06:9a:43:40:a1:2d:7f:a9:8b:75:49:04:e7:
0d:66:5d:d1:43:05:b0:57:65:6a:16:8f:2e:fb:a4:34:9d:20:
45:56:28:3c:f7:ef:2a:fc:a3:83:75:3d:9e:1d:ee:1b:59:84:
5d:a2:e9:e0:5d:71:ea:5c:86:6a:84:92:fc:78:15:f7:b5:31:
86:71:a7:88:b7:35:bf:16:1c:62:a0:76:c4:9c:e3:a9:2c:6b:
aa:74:32:99:ae:4e:ed:39:81:34:25:d3:7a:a6:ae:2f:13:f2:
62:de:14:28:b5:20:e8:90:8d:25:cd:6f:65:e4:f0:ad:01:af:
3c:09:69:7c:e4:3f:6d:79:a3:6d:99:71:3e:0e:a4:01:13:93:
27:db:62:e1:51:f8:9e:2a:30:b1:90:90:e9:00:70:30:1e:6b:
a0:9b:d4:78:6d:7a:70:ab:fb:fd:e3:e0:d6:ce:61:51:ec:5c:
4c:a9:34:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDE5NzQxMTAvBgNVBAUTKENENEI3NjE2RTlDMjU0MkZFMTA1RDRGMTRFQUUzMjE2
NThENDRCM0IwHhcNMjYxMDA2MTc1OTE5WhcNMjYxMDEzMTc1OTE5WjAYMRYwFAYD
VQQDEw02YWM1MzZmNy1lYTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApCyTbnQm8qXZftTRltuwtAxWkPGKc8EUVmm3G7ggT+09PXvN8HNeYsShx1DL
xncHEwsZ6rSDhCCDNxglZg+EDEmQFrGNmkLaJ/mNf8VdZFIU7DR0Y6PDiAlndW7Q
LLdsRllB13GKKry4T8DdGndoVi7cTHJkNsfDFft7BoM9D6bNIg+ArqTr5sCYzLFC
DxISLKeKLA9IdLfxagffYoiqZlhXNbfw16P84IsGV4CJIGvpGUgV8WU6xD3bQvsW
NggP3tgn3K9o0sqwb+CmtzQ6bZGQChJxCMskyclkCnuBuv2XuYcVOIEONQLVDan2
jWQx1BkyuovMF9jJWEDIjdzPzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHTO+kCv
3Zs9852Qsv3eDNsnJZakMB8GA1UdIwQYMBaAFM1LdhbpwlQv4QXU8U6uMhZY1Es7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTk3NC8yRTZCNjlFRUYw
QjQxMUU5QkNDNkZFNURDNEY5QUUwMi96VXQyRnVuQ1ZDX2hCZFR4VHE0eUZsalVT
enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pVdDJGdW5DVkNfaEJkVHhUcTR5RmxqVVN6cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MTk3NC8yRTZCNjlFRUYwQjQxMUU5QkNDNkZFNURDNEY5QUUwMi96VXQyRnVuQ1ZD
X2hCZFR4VHE0eUZsalVTenMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALYEu1AOuTCjHMoom3MK/7vovacgmYcKsIFpzmMbHPzLtyqEiwvQeNPuhxZcj
7UGtWiA0Qr7zhj1j1ifkQtwu5qEef6itZpKB79PkOvoGmkNAoS1/qYt1SQTnDWZd
0UMFsFdlahaPLvukNJ0gRVYoPPfvKvyjg3U9nh3uG1mEXaLp4F1x6lyGaoSS/HgV
97UxhnGniLc1vxYcYqB2xJzjqSxrqnQyma5O7TmBNCXTeqauLxPyYt4UKLUg6JCN
Jc1vZeTwrQGvPAlpfOQ/bXmjbZlxPg6kAROTJ9ti4VH4niowsZCQ6QBwMB5roJvU
eG16cKv7/ePg1s5hUexcTKk0Og==
-----END CERTIFICATE-----
Generated at Wed Oct 7 06:19:49 2026 by rpki-client