
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft
File: A0ZyQIbx848yyqFygmhZGcfIu28.mft (raw, json)
Hash identifier: xPmhkqMQ6CO1AXtiQDOCNBdyYBElBmOR7icQefcFRpI=
Subject key identifier: 71:B9:65:03:90:EA:DA:75:64:8D:92:85:EA:D1:BC:E9:1C:4B:FE:DF
Authority key identifier: 03:46:72:40:86:F1:F3:8F:32:CA:A1:72:82:68:59:19:C7:C8:BB:6F
Certificate issuer: /CN=A9173591/serialNumber=0346724086F1F38F32CAA17282685919C7C8BB6F
Certificate serial: 0CA9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0ZyQIbx848yyqFygmhZGcfIu28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft
Manifest number: 0CA7
Signing time: Tue 18 Aug 2026 18:49:20 +0000
Manifest this update: Tue 18 Aug 2026 18:49:19 +0000
Manifest next update: Tue 25 Aug 2026 18:49:19 +0000
Files and hashes: 1: A0ZyQIbx848yyqFygmhZGcfIu28.crl (hash: kiczQvGVmfSpAjskghy4c1hevRC3lD5QpHvApjJI1H8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.crl
rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0ZyQIbx848yyqFygmhZGcfIu28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3241 (0xca9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173591, serialNumber=0346724086F1F38F32CAA17282685919C7C8BB6F
Validity
Not Before: Aug 18 18:49:19 2026 GMT
Not After : Aug 25 18:49:19 2026 GMT
Subject: CN=6a84a930-4759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:fc:d4:20:24:92:ad:87:6f:78:ed:9b:1d:
19:4e:d4:39:21:96:c0:71:87:70:96:ba:75:39:a6:
24:72:04:58:3f:06:6a:76:47:36:2b:bd:87:b9:9b:
51:6b:d6:79:df:97:6b:9f:5a:14:f0:e3:bc:ae:4b:
e5:b2:8e:93:b5:60:74:99:72:b0:92:91:cd:84:ff:
39:a5:a9:31:4c:1d:7b:25:91:b2:aa:79:e6:d7:9e:
d0:2f:33:7e:cf:cb:21:16:9c:c6:c6:7b:89:ca:59:
f5:7f:9a:9a:1e:e6:00:3b:03:68:0a:72:df:c0:e6:
82:2d:f4:76:42:35:c9:be:ee:c0:91:4f:fe:9c:c0:
de:9a:1a:89:05:7d:61:bd:a4:49:91:7f:85:79:7a:
cc:f7:71:39:8c:a5:2d:d0:37:d9:01:9b:41:70:78:
c5:a1:c3:87:c8:03:e8:94:4f:87:54:85:64:5d:26:
2c:21:a0:4e:4a:00:49:8a:9f:2b:60:8d:e8:9e:fa:
bf:77:2c:1c:80:36:66:9e:cb:29:ca:4c:28:50:12:
8c:7a:e4:ac:67:e7:f4:95:0e:1f:de:07:16:ae:5d:
2c:6a:99:75:2b:22:50:d5:90:9e:0c:e8:24:52:31:
10:a6:4c:4e:ce:ae:97:19:17:09:52:67:2e:1a:5d:
58:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B9:65:03:90:EA:DA:75:64:8D:92:85:EA:D1:BC:E9:1C:4B:FE:DF
X509v3 Authority Key Identifier:
keyid:03:46:72:40:86:F1:F3:8F:32:CA:A1:72:82:68:59:19:C7:C8:BB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0ZyQIbx848yyqFygmhZGcfIu28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:d3:8a:3a:4d:84:76:ae:b0:dc:c7:82:63:80:34:af:21:d1:
f1:1d:84:1f:1b:a4:c0:8d:8d:58:1d:7d:de:f8:49:2b:ba:db:
06:2b:0a:df:c8:3e:ab:c6:05:23:8b:22:1e:d0:9c:38:8f:5e:
58:79:d6:d7:8d:17:3e:b1:ae:cb:d0:67:17:75:11:ff:43:87:
4a:78:29:01:e8:46:25:8c:90:6e:8b:f0:05:fd:f4:0f:0f:09:
8e:97:ed:f6:45:a8:80:a9:56:d8:87:27:b1:cf:86:20:e7:33:
39:8f:5d:4b:9f:43:ef:bc:4c:6b:33:67:d4:13:bc:4f:09:91:
10:c8:37:9d:55:d9:d2:4d:22:a6:47:d9:62:88:27:fb:bb:17:
b9:51:13:41:b7:23:be:ed:b6:d8:7d:9d:ea:54:31:c5:8c:0c:
6a:13:7d:c3:77:50:8a:9e:e7:f9:76:74:80:e5:11:b8:4f:5a:
8c:94:54:5b:9d:c6:34:32:8e:00:14:6d:d9:9d:52:d4:47:c3:
9f:f0:80:9d:95:c5:71:91:51:e1:1f:54:4a:38:d6:59:05:8c:
d5:0e:f5:68:6e:fc:03:7e:01:b6:75:bd:bb:e9:e3:f8:4f:16:
02:e3:d0:37:7e:30:74:17:ac:14:5f:c4:52:2f:fa:74:98:50:
c3:d8:e6:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzM1OTExMTAvBgNVBAUTKDAzNDY3MjQwODZGMUYzOEYzMkNBQTE3MjgyNjg1OTE5
QzdDOEJCNkYwHhcNMjYwODE4MTg0OTE5WhcNMjYwODI1MTg0OTE5WjAYMRYwFAYD
VQQDEw02YTg0YTkzMC00NzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwLb81CAkkq2Hb3jtmx0ZTtQ5IZbAcYdwlrp1OaYkcgRYPwZqdkc2K72HuZtR
a9Z535drn1oU8OO8rkvlso6TtWB0mXKwkpHNhP85pakxTB17JZGyqnnm157QLzN+
z8shFpzGxnuJyln1f5qaHuYAOwNoCnLfwOaCLfR2QjXJvu7AkU/+nMDemhqJBX1h
vaRJkX+FeXrM93E5jKUt0DfZAZtBcHjFocOHyAPolE+HVIVkXSYsIaBOSgBJip8r
YI3onvq/dywcgDZmnsspykwoUBKMeuSsZ+f0lQ4f3gcWrl0sapl1KyJQ1ZCeDOgk
UjEQpkxOzq6XGRcJUmcuGl1YaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHG5ZQOQ
6tp1ZI2SherRvOkcS/7fMB8GA1UdIwQYMBaAFANGckCG8fOPMsqhcoJoWRnHyLtv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzU5MS8yNzY4RkJBNjFE
NkYxMUVBOUI1NkU3MjZDNEY5QUUwMi9BMFp5UUlieDg0OHl5cUZ5Z21oWkdjZkl1
MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0EwWnlRSWJ4ODQ4eXlxRnlnbWhaR2NmSXUyOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzU5MS8yNzY4RkJBNjFENkYxMUVBOUI1NkU3MjZDNEY5QUUwMi9BMFp5UUlieDg0
OHl5cUZ5Z21oWkdjZkl1MjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdtOKOk2Edq6w3MeCY4A0ryHR8R2EHxukwI2NWB193vhJK7rbBisK38g+q8YF
I4siHtCcOI9eWHnW140XPrGuy9BnF3UR/0OHSngpAehGJYyQbovwBf30Dw8Jjpft
9kWogKlW2Icnsc+GIOczOY9dS59D77xMazNn1BO8TwmREMg3nVXZ0k0ipkfZYogn
+7sXuVETQbcjvu222H2d6lQxxYwMahN9w3dQip7n+XZ0gOURuE9ajJRUW53GNDKO
ABRt2Z1S1EfDn/CAnZXFcZFR4R9USjjWWQWM1Q71aG78A34BtnW9u+nj+E8WAuPQ
N34wdBesFF/EUi/6dJhQw9jm3w==
-----END CERTIFICATE-----
Generated at Wed Aug 19 14:31:32 2026 by rpki-client