
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
File: zPKlJcCQFETKePBbk5LABFeVZ2E.mft (raw, json)
Hash identifier: 8Q+Wg5dtbcAshjjUSbTEYwa4O6u1vW4CYrLZ7nnhGeI=
Subject key identifier: F2:77:B1:34:1C:BC:9B:2D:01:9D:90:15:A7:90:87:60:51:6B:22:14
Authority key identifier: CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61
Certificate issuer: /CN=A916A071/serialNumber=CCF2A525C0901444CA78F05B9392C00457956761
Certificate serial: 0AC4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
Manifest number: 0ABA
Signing time: Thu 08 Oct 2026 19:36:01 +0000
Manifest this update: Thu 08 Oct 2026 19:36:00 +0000
Manifest next update: Thu 15 Oct 2026 19:36:00 +0000
Files and hashes: 1: zPKlJcCQFETKePBbk5LABFeVZ2E.crl (hash: xRvYtdJWMviys5jo9bQ/6IFqNWalFwNP6Aig6mbRPaU=)
2: 9BAC68CC83C211EABCB66612C4F9AE02.roa (hash: cZrqWOQatMkIn2VzGfcaWDnVlXfxEpjr06H/3z6i31k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl
rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 19:20:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2756 (0xac4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A071, serialNumber=CCF2A525C0901444CA78F05B9392C00457956761
Validity
Not Before: Oct 8 19:36:00 2026 GMT
Not After : Oct 15 19:36:00 2026 GMT
Subject: CN=6ac7f0a1-707e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b2:8a:7e:b0:5e:31:f5:f5:ea:ac:37:ca:66:
e2:35:40:11:99:e6:d9:86:6c:6d:70:ad:b2:73:0d:
e2:7c:08:53:ba:fb:cc:4a:e1:46:c0:a1:52:8a:bd:
a9:64:50:7f:80:98:6c:78:90:d7:1b:5a:b4:72:66:
0b:cc:8a:ac:36:5d:06:34:3b:2b:df:28:bc:c5:bd:
74:f6:17:11:23:7e:25:00:e9:e8:dc:89:40:58:f1:
95:bd:8b:c2:87:c0:e7:c4:ea:87:04:50:4d:1a:45:
f8:52:60:4c:f2:a8:65:46:89:8f:cd:ce:e2:bd:6e:
cd:f9:7f:ee:d1:76:df:7f:d1:9a:a0:5a:12:f8:05:
11:51:58:f3:07:41:53:6c:6e:c6:bd:8a:f0:80:3c:
86:89:0b:3a:6a:2e:0a:bd:e3:ae:61:74:66:9d:4a:
d4:96:a6:bb:35:d6:35:85:07:b7:1c:8a:4f:e6:36:
e8:2d:31:c3:bb:bb:c5:77:ea:4e:1f:6a:89:40:e5:
8d:08:e9:2f:8e:ae:9d:39:8b:23:82:ed:f5:23:7b:
d2:17:2e:1a:76:89:18:85:9e:0d:01:e9:45:ab:31:
71:b0:6c:c9:cf:0e:cc:f6:8b:c9:6b:fa:3a:50:4f:
7b:d9:65:61:fb:f1:58:c7:16:a5:44:4a:a2:0d:14:
6b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:77:B1:34:1C:BC:9B:2D:01:9D:90:15:A7:90:87:60:51:6B:22:14
X509v3 Authority Key Identifier:
keyid:CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:c2:dc:ca:f0:1f:ca:ff:c3:a5:2a:ba:51:10:96:26:39:db:
d5:a1:17:7b:01:53:e9:c0:8e:c6:5b:4c:60:e5:53:49:3e:41:
03:51:6d:99:61:ee:67:2b:b9:06:a3:41:c9:74:98:4d:f0:85:
5f:63:57:34:e7:a2:5a:e0:9c:b3:a2:eb:31:9e:c4:f7:fa:c3:
53:67:3d:2e:08:6e:6f:31:8f:42:ce:76:7c:81:56:5e:a8:9b:
f1:da:5a:1d:75:8e:59:92:3c:d9:30:9f:27:57:2b:c2:d8:97:
75:7a:4e:7d:70:57:b9:f6:72:e9:4c:a1:91:3d:84:78:3d:86:
73:f8:80:6f:0a:64:30:59:f5:cd:a3:9a:96:a4:bf:33:26:cb:
5a:61:fa:28:32:cb:fd:d7:28:15:18:b6:e4:3c:b5:ed:24:99:
24:29:75:d2:53:dc:83:99:5e:81:b4:65:3e:91:33:5c:a4:a5:
cc:51:aa:57:03:2d:c9:0e:25:5e:28:a5:dd:02:5f:d9:55:5e:
77:4f:f8:6d:d9:5a:c7:1e:ca:e9:6d:b0:09:eb:13:ea:0f:26:
d1:ea:e2:ba:eb:4f:94:d6:1b:9a:d7:54:31:70:67:30:d8:5e:
ca:96:03:a8:5a:b4:76:33:8b:8f:5f:28:da:85:1d:7a:c9:9d:
a5:c3:f1:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkEwNzExMTAvBgNVBAUTKENDRjJBNTI1QzA5MDE0NDRDQTc4RjA1QjkzOTJDMDA0
NTc5NTY3NjEwHhcNMjYxMDA4MTkzNjAwWhcNMjYxMDE1MTkzNjAwWjAYMRYwFAYD
VQQDEw02YWM3ZjBhMS03MDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA67KKfrBeMfX16qw3ymbiNUARmebZhmxtcK2ycw3ifAhTuvvMSuFGwKFSir2p
ZFB/gJhseJDXG1q0cmYLzIqsNl0GNDsr3yi8xb109hcRI34lAOno3IlAWPGVvYvC
h8DnxOqHBFBNGkX4UmBM8qhlRomPzc7ivW7N+X/u0Xbff9GaoFoS+AURUVjzB0FT
bG7GvYrwgDyGiQs6ai4KveOuYXRmnUrUlqa7NdY1hQe3HIpP5jboLTHDu7vFd+pO
H2qJQOWNCOkvjq6dOYsjgu31I3vSFy4adokYhZ4NAelFqzFxsGzJzw7M9ovJa/o6
UE972WVh+/FYxxalREqiDRRrzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPJ3sTQc
vJstAZ2QFaeQh2BRayIUMB8GA1UdIwQYMBaAFMzypSXAkBREynjwW5OSwARXlWdh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTA3MS8yODBCMDlBNDgz
QkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZFVEtlUEJiazVMQUJGZVZa
MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pQS2xKY0NRRkVUS2VQQmJrNUxBQkZlVloyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTA3MS8yODBCMDlBNDgzQkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZF
VEtlUEJiazVMQUJGZVZaMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwMLcyvAfyv/DpSq6URCWJjnb1aEXewFT6cCOxltMYOVTST5BA1FtmWHuZyu5
BqNByXSYTfCFX2NXNOeiWuCcs6LrMZ7E9/rDU2c9LghubzGPQs52fIFWXqib8dpa
HXWOWZI82TCfJ1crwtiXdXpOfXBXufZy6UyhkT2EeD2Gc/iAbwpkMFn1zaOalqS/
MybLWmH6KDLL/dcoFRi25Dy17SSZJCl10lPcg5legbRlPpEzXKSlzFGqVwMtyQ4l
Xiil3QJf2VVed0/4bdlaxx7K6W2wCesT6g8m0eriuutPlNYbmtdUMXBnMNheypYD
qFq0djOLj18o2oUdesmdpcPx2Q==
-----END CERTIFICATE-----
Generated at Thu Oct 8 23:29:40 2026 by rpki-client