
$ rpki-client -vvf rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft
File: zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft (raw, json)
Hash identifier: YPkwFVZ3dDvGUrF4KhiaMOWRDErFXj+OkXSMVjy1imQ=
Subject key identifier: 07:15:28:ED:E0:51:45:BA:86:AA:E9:8D:1B:C1:B8:1E:C6:75:8C:BF
Authority key identifier: CD:A4:7E:0A:1E:EB:52:5F:3B:5A:0F:AF:B2:FA:0D:BB:36:3B:FA:4D
Certificate issuer: /CN=A91594AE/serialNumber=CDA47E0A1EEB525F3B5A0FAFB2FA0DBB363BFA4D
Certificate serial: 0BA6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft
Manifest number: 0B9C
Signing time: Tue 18 Aug 2026 19:22:29 +0000
Manifest this update: Tue 18 Aug 2026 19:22:28 +0000
Manifest next update: Tue 25 Aug 2026 19:22:28 +0000
Files and hashes: 1: zaR-Ch7rUl87Wg-vsvoNuzY7-k0.crl (hash: d1I3wQ0dbKihnXpSK/qLAxSh6OsjrHD9zfNSACxisn8=)
2: 38CAF4EC52B911EAACE8041BC4F9AE02.roa (hash: ujeUTP56Z66beEqAmdIwzEcYV4pQg/db+qJ48FDN5s0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.crl
rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:22:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2982 (0xba6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91594AE, serialNumber=CDA47E0A1EEB525F3B5A0FAFB2FA0DBB363BFA4D
Validity
Not Before: Aug 18 19:22:28 2026 GMT
Not After : Aug 25 19:22:28 2026 GMT
Subject: CN=6a84b0f5-bcb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:49:48:8a:39:32:92:6a:30:23:2b:fa:61:77:
e6:6d:7e:20:b0:58:1a:d7:82:63:a2:ce:26:07:39:
34:e7:3a:c1:e0:f2:24:8a:07:c1:78:87:5b:a3:26:
7a:94:e0:7c:ea:d5:c0:70:50:14:a3:ba:e9:da:f1:
b7:03:e0:df:08:2e:2b:5d:f2:9a:37:ed:3d:78:fd:
a6:96:31:10:d2:fc:2d:16:18:6b:94:bb:53:80:f4:
ac:0b:75:13:28:86:22:70:c5:6b:52:05:6e:b9:62:
06:8e:d3:e6:30:a7:2b:85:ee:b8:1b:dc:c3:56:f8:
fc:fb:e2:22:f0:36:44:2d:0d:22:68:4a:c3:27:ce:
5e:55:cf:0e:67:61:99:26:6d:aa:10:f3:4c:ff:a2:
b6:45:de:ef:11:fd:7a:36:7e:08:14:02:b1:f5:1d:
18:02:9d:42:f3:0a:3e:ab:33:33:6b:03:83:9a:ce:
2b:43:10:36:0d:15:bb:db:d6:c9:e2:72:6b:aa:83:
6c:f7:05:a2:91:24:6d:24:1b:09:71:63:00:0d:b1:
22:15:97:f6:41:62:45:33:65:c1:00:f5:ee:92:f7:
4b:85:19:7c:b6:42:1e:19:4a:ca:7a:e3:09:83:aa:
58:64:1b:62:45:d1:be:80:7b:c0:47:ed:c2:01:71:
5f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:15:28:ED:E0:51:45:BA:86:AA:E9:8D:1B:C1:B8:1E:C6:75:8C:BF
X509v3 Authority Key Identifier:
keyid:CD:A4:7E:0A:1E:EB:52:5F:3B:5A:0F:AF:B2:FA:0D:BB:36:3B:FA:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:81:7d:e3:8e:bd:8a:4a:10:a0:b2:f2:1f:c4:bb:78:ca:f0:
ef:92:34:75:e5:e7:b8:ad:00:1e:da:a8:89:85:0a:8d:79:79:
1d:d0:da:af:59:20:bf:43:72:45:55:85:32:dd:11:38:6d:95:
65:d3:ee:ef:ed:40:5c:92:e4:2a:31:93:c8:54:92:5d:c0:7c:
8a:a3:e4:e8:8f:50:11:10:f9:8e:5f:a2:6a:a8:7e:8d:6a:dc:
77:d8:6a:28:96:71:66:b2:1e:26:cc:5c:45:f8:57:0f:08:56:
ae:48:0d:c6:a8:fa:b6:7a:18:cc:07:9c:24:1c:d6:80:7f:36:
f8:84:fe:eb:d4:66:c3:78:1d:cc:04:6e:f2:b0:d9:6a:d1:da:
1d:ba:d0:83:e8:9c:9c:dc:1c:87:a0:c5:e1:d0:5c:7d:1a:c5:
6f:a1:47:26:f0:7f:a9:3d:11:ff:c6:c3:73:9e:93:20:32:26:
30:22:a4:e8:10:ee:2d:84:0e:13:19:3b:89:6a:24:e1:d9:d5:
ae:d7:1d:27:59:5c:7a:df:83:39:ce:44:1a:d3:2e:c1:df:47:
c3:4e:ad:1f:34:2d:c4:24:06:85:53:4c:3d:79:e9:d6:d8:17:
86:87:bd:5a:78:db:97:39:cf:25:fc:bb:ba:c3:35:c8:41:a9:
14:1a:bd:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTk0QUUxMTAvBgNVBAUTKENEQTQ3RTBBMUVFQjUyNUYzQjVBMEZBRkIyRkEwREJC
MzYzQkZBNEQwHhcNMjYwODE4MTkyMjI4WhcNMjYwODI1MTkyMjI4WjAYMRYwFAYD
VQQDEw02YTg0YjBmNS1iY2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzklIijkykmowIyv6YXfmbX4gsFga14Jjos4mBzk05zrB4PIkigfBeIdboyZ6
lOB86tXAcFAUo7rp2vG3A+DfCC4rXfKaN+09eP2mljEQ0vwtFhhrlLtTgPSsC3UT
KIYicMVrUgVuuWIGjtPmMKcrhe64G9zDVvj8++Ii8DZELQ0iaErDJ85eVc8OZ2GZ
Jm2qEPNM/6K2Rd7vEf16Nn4IFAKx9R0YAp1C8wo+qzMzawODms4rQxA2DRW729bJ
4nJrqoNs9wWikSRtJBsJcWMADbEiFZf2QWJFM2XBAPXukvdLhRl8tkIeGUrKeuMJ
g6pYZBtiRdG+gHvAR+3CAXFfMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAcVKO3g
UUW6hqrpjRvBuB7GdYy/MB8GA1UdIwQYMBaAFM2kfgoe61JfO1oPr7L6Dbs2O/pN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTRBRS8zRDhCOEM0ODUy
QjUxMUVBQTRBOUQyMEVDNEY5QUUwMi96YVItQ2g3clVsODdXZy12c3ZvTnV6WTct
azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3phUi1DaDdyVWw4N1dnLXZzdm9OdXpZNy1rMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OTRBRS8zRDhCOEM0ODUyQjUxMUVBQTRBOUQyMEVDNEY5QUUwMi96YVItQ2g3clVs
ODdXZy12c3ZvTnV6WTctazAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJYF94469ikoQoLLyH8S7eMrw75I0deXnuK0AHtqoiYUKjXl5HdDar1kgv0Ny
RVWFMt0ROG2VZdPu7+1AXJLkKjGTyFSSXcB8iqPk6I9QERD5jl+iaqh+jWrcd9hq
KJZxZrIeJsxcRfhXDwhWrkgNxqj6tnoYzAecJBzWgH82+IT+69Rmw3gdzARu8rDZ
atHaHbrQg+icnNwch6DF4dBcfRrFb6FHJvB/qT0R/8bDc56TIDImMCKk6BDuLYQO
Exk7iWok4dnVrtcdJ1lcet+DOc5EGtMuwd9Hw06tHzQtxCQGhVNMPXnp1tgXhoe9
WnjblznPJfy7usM1yEGpFBq9Yg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:47:07 2026 by rpki-client