
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
File: zPKlJcCQFETKePBbk5LABFeVZ2E.mft (raw, json)
Hash identifier: IjUJBZsf3GV3TOK3DeysgUwQo5PV+e8wO2APN9XhPoc=
Subject key identifier: CD:84:BB:D7:AC:CA:2F:77:E8:1E:8A:ED:C7:F8:E4:42:7C:20:24:38
Authority key identifier: CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61
Certificate issuer: /CN=A916A071/serialNumber=CCF2A525C0901444CA78F05B9392C00457956761
Certificate serial: 0A7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
Manifest number: 0A70
Signing time: Sat 16 May 2026 19:35:15 +0000
Manifest this update: Sat 16 May 2026 19:35:14 +0000
Manifest next update: Sat 23 May 2026 19:35:14 +0000
Files and hashes: 1: zPKlJcCQFETKePBbk5LABFeVZ2E.crl (hash: Xz0TSYJctk2RJrKowHpSvzIiFggKbqPekgSTg2gK7ro=)
2: 9BAC68CC83C211EABCB66612C4F9AE02.roa (hash: cZrqWOQatMkIn2VzGfcaWDnVlXfxEpjr06H/3z6i31k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl
rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2682 (0xa7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A071, serialNumber=CCF2A525C0901444CA78F05B9392C00457956761
Validity
Not Before: May 16 19:35:14 2026 GMT
Not After : May 23 19:35:14 2026 GMT
Subject: CN=6a08c6f3-2dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:44:e8:0a:33:27:f7:95:25:0d:a2:3d:60:3a:
eb:a9:8f:c0:28:d3:f9:04:b2:29:52:1d:18:82:db:
57:94:3c:6e:1b:33:b8:13:da:d7:f0:60:b6:6a:47:
e3:c7:46:34:9d:9e:0c:b9:ff:49:af:cc:0a:bf:07:
6d:6f:29:e6:86:31:3a:d3:ca:5e:39:55:46:02:52:
c2:8c:17:82:8b:64:44:98:c6:72:24:15:2d:d2:cf:
8e:7f:ae:ac:0e:05:5b:e6:da:0a:96:62:d0:fd:8a:
c5:20:66:db:ab:c8:6f:ab:73:54:86:ce:15:88:38:
25:19:15:56:94:99:0b:45:1a:14:2c:c6:0e:ed:34:
59:1a:d0:31:7c:8a:7b:7c:95:69:80:36:ce:95:46:
66:4c:8b:04:85:53:69:91:27:58:cf:ae:a0:31:6e:
21:e5:17:8e:d5:32:b9:80:7f:e8:01:89:52:01:6e:
66:1f:5e:7f:a9:9c:79:5c:64:8b:44:65:1d:17:88:
23:ab:a1:06:77:19:31:b4:4a:f3:56:b5:54:76:e2:
4a:6e:ee:0e:db:79:a2:f9:84:f6:fc:ce:94:5a:03:
f2:a8:a2:1d:97:55:21:1f:48:a7:3b:1a:fc:d7:0f:
71:bd:e2:bc:55:1c:3e:92:81:23:71:33:7d:9b:82:
87:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:84:BB:D7:AC:CA:2F:77:E8:1E:8A:ED:C7:F8:E4:42:7C:20:24:38
X509v3 Authority Key Identifier:
keyid:CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ed:26:6d:ae:13:15:54:7e:49:f2:f8:96:a8:e2:cd:c5:68:
b7:4e:36:ef:67:c4:0c:27:c0:5a:56:dc:be:26:fe:02:1c:03:
d3:0e:97:96:a7:ee:22:92:03:90:a8:0c:e4:df:2e:31:f2:cd:
ce:db:11:86:04:06:5e:1a:3e:65:e2:c5:12:26:38:12:07:a1:
85:0c:c3:71:bf:6d:a3:c0:81:ea:7a:f7:c5:61:04:4c:98:77:
13:76:37:0a:98:28:07:a5:a2:df:c5:e8:c2:70:5b:28:47:88:
6e:4e:fa:5c:77:dc:bd:a1:e5:22:d2:5d:ad:c7:9a:c1:3a:d9:
b5:cf:19:6b:dd:39:c6:76:59:f3:cf:d4:d9:ac:b3:45:1b:e4:
14:ae:03:f3:f0:26:47:7b:35:78:b8:38:c5:e3:89:2a:dd:cc:
2a:87:09:1b:c8:a7:4b:cd:ee:6a:22:68:f9:bf:4a:68:ed:3c:
b9:38:a1:6b:8f:e7:dd:33:4c:d3:8c:af:64:6e:ab:b9:2e:c2:
6e:93:db:16:e2:40:f9:e2:b4:a3:cb:4b:52:93:d5:a1:15:83:
2f:c4:41:2b:76:ab:31:5a:54:51:23:24:82:12:4c:ed:df:4b:
2b:8f:11:c5:d1:ba:d6:40:4f:69:2b:56:aa:b9:3d:c4:72:c9:
e5:21:a2:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkEwNzExMTAvBgNVBAUTKENDRjJBNTI1QzA5MDE0NDRDQTc4RjA1QjkzOTJDMDA0
NTc5NTY3NjEwHhcNMjYwNTE2MTkzNTE0WhcNMjYwNTIzMTkzNTE0WjAYMRYwFAYD
VQQDEw02YTA4YzZmMy0yZGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoUToCjMn95UlDaI9YDrrqY/AKNP5BLIpUh0YgttXlDxuGzO4E9rX8GC2akfj
x0Y0nZ4Muf9Jr8wKvwdtbynmhjE608peOVVGAlLCjBeCi2REmMZyJBUt0s+Of66s
DgVb5toKlmLQ/YrFIGbbq8hvq3NUhs4ViDglGRVWlJkLRRoULMYO7TRZGtAxfIp7
fJVpgDbOlUZmTIsEhVNpkSdYz66gMW4h5ReO1TK5gH/oAYlSAW5mH15/qZx5XGSL
RGUdF4gjq6EGdxkxtErzVrVUduJKbu4O23mi+YT2/M6UWgPyqKIdl1UhH0inOxr8
1w9xveK8VRw+koEjcTN9m4KHtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM2Eu9es
yi936B6K7cf45EJ8ICQ4MB8GA1UdIwQYMBaAFMzypSXAkBREynjwW5OSwARXlWdh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTA3MS8yODBCMDlBNDgz
QkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZFVEtlUEJiazVMQUJGZVZa
MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pQS2xKY0NRRkVUS2VQQmJrNUxBQkZlVloyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTA3MS8yODBCMDlBNDgzQkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZF
VEtlUEJiazVMQUJGZVZaMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASu0mba4TFVR+SfL4lqjizcVot04272fEDCfAWlbcvib+AhwD0w6XlqfuIpID
kKgM5N8uMfLNztsRhgQGXho+ZeLFEiY4EgehhQzDcb9to8CB6nr3xWEETJh3E3Y3
CpgoB6Wi38XownBbKEeIbk76XHfcvaHlItJdrceawTrZtc8Za905xnZZ88/U2ayz
RRvkFK4D8/AmR3s1eLg4xeOJKt3MKocJG8inS83uaiJo+b9KaO08uTiha4/n3TNM
04yvZG6ruS7CbpPbFuJA+eK0o8tLUpPVoRWDL8RBK3arMVpUUSMkghJM7d9LK48R
xdG61kBPaStWqrk9xHLJ5SGitg==
-----END CERTIFICATE-----
Generated at Sun May 17 01:13:52 2026 by rpki-client