
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft
File: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft (raw, json)
Hash identifier: QJcRhCZm7xRGbM4OBDPbwdj2LD60ZYFqYI5i4MAzXH4=
Subject key identifier: 85:10:9F:4D:8D:C6:4C:2C:6C:51:10:92:82:5C:EF:95:45:F0:F9:50
Authority key identifier: CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88
Certificate issuer: /CN=A9172951/serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088
Certificate serial: 074B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft
Manifest number: 073C
Signing time: Mon 26 Oct 2026 21:52:11 +0000
Manifest this update: Mon 26 Oct 2026 21:52:11 +0000
Manifest next update: Mon 02 Nov 2026 21:52:11 +0000
Files and hashes: 1: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl (hash: qkyY3ZYgdotXLbFdyzbCXl8/ulgBlF8jZ4RLunjWKdo=)
2: 8C3B5858B6BD11EEB6F43F4CC4F9AE02.roa (hash: NZqz6oA1XjP25H0xN/7h1ikyMSJoG4sEZFNjD+Tx104=)
3: 8D013D48B6BD11EEB6F43F4CC4F9AE02.roa (hash: QLNVThMGPv9nYpciTJEsDCXQ9zwBwHbCc7U8jrdlasA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl
rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 21:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1867 (0x74b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172951, serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088
Validity
Not Before: Oct 26 21:52:11 2026 GMT
Not After : Nov 2 21:52:11 2026 GMT
Subject: CN=6adfcb8b-739e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8e:90:78:df:ce:2a:e3:31:d1:d2:a5:8c:09:
2f:08:dc:78:5d:52:3e:2e:6b:be:25:1d:c8:2c:ba:
38:b7:70:5d:15:fe:8f:ad:d5:45:7a:0f:6a:be:dc:
36:e3:7a:a4:07:48:9d:14:47:ef:cb:78:93:95:30:
19:a5:c9:3d:a1:8a:ff:f0:3a:31:1a:fd:95:35:26:
2f:8f:35:c7:0c:91:fd:f9:c0:9a:98:7f:9a:c0:0d:
2c:8b:d4:42:f0:4a:88:d7:62:10:f9:7a:c4:79:49:
e0:8f:93:3d:c5:5c:b8:2d:45:a7:75:b5:35:cf:af:
95:fe:ec:84:6f:20:18:56:97:0b:79:58:45:eb:65:
21:1b:d5:6c:0d:35:23:c9:3f:0b:50:42:23:89:bd:
d9:29:c6:dc:5c:79:a8:b6:88:60:fa:e9:b6:9a:c1:
5d:8c:fa:df:21:ce:6a:ee:d2:11:36:76:55:04:7d:
57:59:ff:ed:b1:34:93:94:56:a0:0f:3d:c1:5e:e8:
cb:28:32:b7:ef:c2:00:fe:84:e6:20:8e:6e:67:24:
ac:29:ed:3e:90:cd:b2:e8:23:92:6c:7a:e3:6d:25:
35:15:0a:64:00:35:f5:5a:1e:6d:01:a3:05:a2:aa:
c1:2c:9f:e5:6d:0b:df:51:af:c5:f3:a6:f7:65:51:
8c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:10:9F:4D:8D:C6:4C:2C:6C:51:10:92:82:5C:EF:95:45:F0:F9:50
X509v3 Authority Key Identifier:
keyid:CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b6:61:e2:15:77:41:0c:0c:02:e4:de:f3:3f:bb:64:4d:16:
d0:88:f4:77:d5:84:23:4b:c8:e3:6d:55:b6:ef:8d:58:3c:30:
c8:6e:c6:44:ce:2a:c2:fc:9b:64:2f:c5:dd:77:2d:0f:11:d0:
ed:db:0a:b3:10:9a:67:c1:34:e9:fd:9c:b7:39:4a:90:56:fc:
21:8c:73:e8:c2:d1:32:f2:11:1c:20:e0:be:46:26:5d:be:fb:
0d:29:0a:36:b0:68:47:e7:da:3c:ad:10:1d:68:ce:88:7d:82:
41:4e:8d:38:27:21:be:c3:b8:b1:dd:86:35:0b:48:70:47:e0:
90:d0:e5:78:91:44:40:5c:29:3e:0b:79:a0:d8:81:64:b6:06:
ab:ab:12:60:9b:80:0a:29:f0:90:e0:78:09:4d:3c:9a:aa:c5:
e2:11:c0:b4:ae:90:61:f6:ea:af:b0:dd:35:27:63:3e:81:93:
23:c5:bf:d5:9e:20:e7:db:ba:06:1a:2f:02:c0:a9:42:d4:f0:
1a:b1:46:a4:99:ae:d9:a4:7f:43:08:dc:bb:6b:c9:42:ea:d3:
be:c6:75:28:87:84:5f:b2:01:d8:f8:22:1b:0b:d1:77:d3:e4:
50:4b:58:b9:f5:ce:da:dc:8d:a5:81:a1:4c:26:60:7f:3b:5d:
63:82:0f:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzI5NTExMTAvBgNVBAUTKENFRjlDNTdFODRCMkVBNUE2RkEzRDBFNDU2MzMwRkI3
QTU0NkYwODgwHhcNMjYxMDI2MjE1MjExWhcNMjYxMTAyMjE1MjExWjAYMRYwFAYD
VQQDEw02YWRmY2I4Yi03MzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Y6QeN/OKuMx0dKljAkvCNx4XVI+Lmu+JR3ILLo4t3BdFf6PrdVFeg9qvtw2
43qkB0idFEfvy3iTlTAZpck9oYr/8DoxGv2VNSYvjzXHDJH9+cCamH+awA0si9RC
8EqI12IQ+XrEeUngj5M9xVy4LUWndbU1z6+V/uyEbyAYVpcLeVhF62UhG9VsDTUj
yT8LUEIjib3ZKcbcXHmotohg+um2msFdjPrfIc5q7tIRNnZVBH1XWf/tsTSTlFag
Dz3BXujLKDK378IA/oTmII5uZySsKe0+kM2y6COSbHrjbSU1FQpkADX1Wh5tAaMF
oqrBLJ/lbQvfUa/F86b3ZVGMdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIUQn02N
xkwsbFEQkoJc75VF8PlQMB8GA1UdIwQYMBaAFM75xX6Esupab6PQ5FYzD7elRvCI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk1MS85QTA5N0Q4QTk2
MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZscHZvOURrVmpNUHQ2Vkc4
SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3p2bkZmb1N5Nmxwdm85RGtWak1QdDZWRzhJZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Mjk1MS85QTA5N0Q4QTk2MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZs
cHZvOURrVmpNUHQ2Vkc4SWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAs7Zh4hV3QQwMAuTe8z+7ZE0W0Ij0d9WEI0vI421Vtu+NWDwwyG7GRM4qwvyb
ZC/F3XctDxHQ7dsKsxCaZ8E06f2ctzlKkFb8IYxz6MLRMvIRHCDgvkYmXb77DSkK
NrBoR+faPK0QHWjOiH2CQU6NOCchvsO4sd2GNQtIcEfgkNDleJFEQFwpPgt5oNiB
ZLYGq6sSYJuACinwkOB4CU08mqrF4hHAtK6QYfbqr7DdNSdjPoGTI8W/1Z4g59u6
BhovAsCpQtTwGrFGpJmu2aR/Qwjcu2vJQurTvsZ1KIeEX7IB2PgiGwvRd9PkUEtY
ufXO2tyNpYGhTCZgfztdY4IPDw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 04:44:27 2026 by rpki-client