
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft
File: zURUsk4_99x1y76Rm92nnEe5Xqc.mft (raw, json)
Hash identifier: QJvQEoD7v/Xiuthn2OIlkp66sXF/7Yp8iB9flITftLc=
Subject key identifier: B3:52:E4:CF:11:72:1A:2A:CB:21:80:F5:DD:A6:B0:2B:73:A7:4A:9F
Authority key identifier: CD:44:54:B2:4E:3F:F7:DC:75:CB:BE:91:9B:DD:A7:9C:47:B9:5E:A7
Certificate issuer: /CN=A9172999/serialNumber=CD4454B24E3FF7DC75CBBE919BDDA79C47B95EA7
Certificate serial: 58
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft
Manifest number: 52
Signing time: Wed 07 Oct 2026 00:49:55 +0000
Manifest this update: Wed 07 Oct 2026 00:49:55 +0000
Manifest next update: Wed 14 Oct 2026 00:49:55 +0000
Files and hashes: 1: zURUsk4_99x1y76Rm92nnEe5Xqc.crl (hash: Qq8PPTrjZ8MhkqCWawKFy+qXxd+L+dG1GW2ymq6fP+s=)
2: 4BA0B918AA8611F1B5EFA27B6B11F970.roa (hash: cFZoTrSbsgmWIouraR3onH4yiL+HtgAYY6VVqfkArtw=)
3: BC0F1A48A67911F1932095496A11F970.roa (hash: o1LDxCSAZOslL3FS+wqhWw7kZhVq2twAD8H5vbfybgY=)
4: A53F1E96647311F1BC2A35D47947A888.roa (hash: aWkLi47uIb9GIJOKXHkRTH7Cyo2StRxOnkwZBq2MqlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.crl
rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 00:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172999, serialNumber=CD4454B24E3FF7DC75CBBE919BDDA79C47B95EA7
Validity
Not Before: Oct 7 00:49:55 2026 GMT
Not After : Oct 14 00:49:55 2026 GMT
Subject: CN=6ac59733-9e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6e:a2:73:37:b4:46:c5:af:ad:92:19:ad:94:
97:3e:db:f1:83:f0:03:8d:c0:c7:ce:d5:58:50:12:
23:79:c7:1c:4c:d4:26:66:85:6d:8f:05:6f:f7:7d:
b4:2c:aa:05:aa:e2:fe:c6:73:ba:52:d7:5c:39:d0:
64:a5:f0:37:54:52:a2:e7:f8:17:e9:51:0c:a0:e4:
5a:38:d2:56:50:58:63:3b:0a:c5:ce:23:e9:0d:5d:
18:98:e5:2e:1b:77:c1:5d:fd:9b:98:89:96:2b:5c:
3d:79:92:39:5d:a3:b1:e7:9f:75:4e:f4:c7:a4:10:
02:33:3f:96:8d:0d:06:65:1a:1a:58:e5:1b:c0:d9:
dd:26:e4:db:e1:84:47:79:ce:42:ec:b9:be:6b:0f:
55:67:dd:8f:d1:fd:c1:cf:26:05:5f:cd:27:5a:0a:
02:83:85:53:f5:6a:8d:af:43:e6:71:a3:13:52:43:
3c:a4:67:6e:8b:bb:fc:c1:ff:0a:1c:c9:af:f8:22:
5c:36:df:53:aa:59:53:ea:1a:01:00:87:df:82:0e:
16:01:7e:9d:60:d4:16:b2:e5:89:8e:87:43:b5:8c:
ab:66:7c:3c:75:2b:bf:9f:bb:73:98:f8:0f:93:9f:
7e:ed:7b:43:36:87:28:b6:b7:57:43:a1:b2:46:06:
b0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:52:E4:CF:11:72:1A:2A:CB:21:80:F5:DD:A6:B0:2B:73:A7:4A:9F
X509v3 Authority Key Identifier:
keyid:CD:44:54:B2:4E:3F:F7:DC:75:CB:BE:91:9B:DD:A7:9C:47:B9:5E:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:b6:40:b4:db:b2:d1:8b:1f:31:ea:fa:d0:70:c3:b6:0d:98:
a7:56:a6:c8:75:d8:02:1c:f5:23:05:77:57:c9:df:e4:26:00:
eb:8e:ac:fc:9a:90:2e:ef:6e:f1:26:a3:e8:80:4c:47:51:4f:
40:97:a5:63:9b:86:d8:a4:5d:77:fd:36:01:bd:50:4e:3a:7c:
02:d3:3d:85:92:38:d0:f6:b9:aa:0a:a3:da:35:f5:f2:42:80:
42:fd:5c:fc:98:8c:13:df:b0:2b:df:e5:a2:50:1a:71:47:20:
bf:34:22:7f:63:2b:09:7a:05:c2:ba:e3:2c:a5:01:23:a9:5f:
c8:66:f5:de:0a:9f:e0:d9:be:f5:26:f0:6f:ac:0e:38:08:e4:
de:5d:51:7d:76:96:2a:a9:2b:56:9c:16:42:94:5b:79:a3:28:
c4:1e:f1:85:56:9e:d6:dd:96:99:b1:ed:38:d4:89:ab:90:da:
93:02:38:16:66:62:bb:01:06:78:e2:6c:d7:85:9c:66:7c:0d:
41:de:fb:54:d3:38:43:a5:f3:30:a6:0e:9d:b6:37:28:14:c0:
71:73:95:13:a1:6e:a4:de:c4:cc:f1:cb:b3:20:0f:2e:48:7d:
f2:54:15:86:59:c6:74:9e:62:b7:c1:a0:ac:c4:48:d7:20:02:
88:a4:a9:26
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
Mjk5OTExMC8GA1UEBRMoQ0Q0NDU0QjI0RTNGRjdEQzc1Q0JCRTkxOUJEREE3OUM0
N0I5NUVBNzAeFw0yNjEwMDcwMDQ5NTVaFw0yNjEwMTQwMDQ5NTVaMBgxFjAUBgNV
BAMTDTZhYzU5NzMzLTllOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDmbqJzN7RGxa+tkhmtlJc+2/GD8AONwMfO1VhQEiN5xxxM1CZmhW2PBW/3fbQs
qgWq4v7Gc7pS11w50GSl8DdUUqLn+BfpUQyg5Fo40lZQWGM7CsXOI+kNXRiY5S4b
d8Fd/ZuYiZYrXD15kjldo7Hnn3VO9MekEAIzP5aNDQZlGhpY5RvA2d0m5NvhhEd5
zkLsub5rD1Vn3Y/R/cHPJgVfzSdaCgKDhVP1ao2vQ+ZxoxNSQzykZ26Lu/zB/woc
ya/4Ilw231OqWVPqGgEAh9+CDhYBfp1g1Bay5YmOh0O1jKtmfDx1K7+fu3OY+A+T
n37te0M2hyi2t1dDobJGBrCTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUs1LkzxFy
GirLIYD13aawK3OnSp8wHwYDVR0jBBgwFoAUzURUsk4/99x1y76Rm92nnEe5Xqcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyOTk5L0FFRkM1NUIwNEZG
MjExRjE5QjEyN0RGMTlFRUU1MjhFL3pVUlVzazRfOTl4MXk3NlJtOTJubkVlNVhx
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG
RDFGRjIvelVSVXNrNF85OXgxeTc2Um05Mm5uRWU1WHFjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy
OTk5L0FFRkM1NUIwNEZGMjExRjE5QjEyN0RGMTlFRUU1MjhFL3pVUlVzazRfOTl4
MXk3NlJtOTJubkVlNVhxYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAJtkC027LRix8x6vrQcMO2DZinVqbIddgCHPUjBXdXyd/kJgDrjqz8mpAu727x
JqPogExHUU9Al6Vjm4bYpF13/TYBvVBOOnwC0z2FkjjQ9rmqCqPaNfXyQoBC/Vz8
mIwT37Ar3+WiUBpxRyC/NCJ/YysJegXCuuMspQEjqV/IZvXeCp/g2b71JvBvrA44
COTeXVF9dpYqqStWnBZClFt5oyjEHvGFVp7W3ZaZse041ImrkNqTAjgWZmK7AQZ4
4mzXhZxmfA1B3vtU0zhDpfMwpg6dtjcoFMBxc5UToW6k3sTM8cuzIA8uSH3yVBWG
WcZ0nmK3waCsxEjXIAKIpKkm
-----END CERTIFICATE-----
Generated at Thu Oct 8 14:10:24 2026 by rpki-client