
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
File: ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft (raw, json)
Hash identifier: G9xA4yJW0NubvApIOxVWK2M8FnuXBpESai9wgy/lKLk=
Subject key identifier: F9:81:C3:44:7C:04:D0:77:C5:C9:7B:52:55:7E:27:2B:49:F2:EF:59
Authority key identifier: 65:F6:16:1C:73:6D:1A:9C:41:91:FD:FC:C7:A4:F8:24:CE:11:23:2D
Certificate issuer: /CN=A91899BB/serialNumber=65F6161C736D1A9C4191FDFCC7A4F824CE11232D
Certificate serial: 0751
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
Manifest number: 074C
Signing time: Fri 02 Oct 2026 22:07:34 +0000
Manifest this update: Fri 02 Oct 2026 22:07:33 +0000
Manifest next update: Fri 09 Oct 2026 22:07:33 +0000
Files and hashes: 1: ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl (hash: IwSFExwH0618suV/seIWgEztqbcFC5BYAA0sP5762lM=)
2: 54CB555C57A311F09664E82DC4F9AE02.roa (hash: 8zSq/rqaKjpysVvvXWgHeKeayL3TVMK2Emf1uVmygFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl
rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 22:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1873 (0x751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91899BB, serialNumber=65F6161C736D1A9C4191FDFCC7A4F824CE11232D
Validity
Not Before: Oct 2 22:07:33 2026 GMT
Not After : Oct 9 22:07:33 2026 GMT
Subject: CN=6ac02b26-682a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:b6:46:4f:c8:71:9d:57:a7:c7:57:9e:65:
95:8e:ab:62:20:3f:a4:cd:89:e5:52:29:0e:bd:11:
e7:52:5f:bc:4e:c0:aa:86:f0:f9:a6:f1:3c:1f:7c:
81:17:1f:0f:bf:83:17:20:1e:b0:7e:ab:dd:ce:d1:
8f:e1:40:f8:d9:cc:f8:7a:3a:2d:a1:ff:48:dd:57:
98:d9:6d:a2:86:bc:ec:89:02:2f:77:17:50:0a:7e:
ab:53:d3:b9:33:4e:df:cc:a0:be:3c:36:3e:0b:d7:
d5:c9:df:71:d8:ee:7c:86:ae:1d:b7:88:b5:da:65:
b1:67:00:02:83:dd:03:41:9c:e2:46:74:70:24:ad:
e0:e5:64:1d:47:e2:31:42:25:92:25:97:6b:f1:c8:
11:3c:7c:9a:da:d8:41:ff:09:75:20:a2:17:2b:0b:
4d:5c:ee:85:a5:9e:d8:58:78:3d:1e:d1:c2:63:fd:
1f:c6:01:17:cf:5a:8b:df:64:1b:53:6a:6b:b0:70:
b2:52:cb:8f:a1:13:b4:0f:2f:b2:47:85:62:1d:e8:
e6:a6:19:b1:b4:a4:7d:54:c0:53:9b:4d:63:86:fe:
18:30:cc:af:29:18:e7:a4:f2:e1:41:1c:d4:42:3c:
97:4b:0b:e5:b1:b6:e0:e1:59:e5:a7:88:0c:79:2d:
6d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:81:C3:44:7C:04:D0:77:C5:C9:7B:52:55:7E:27:2B:49:F2:EF:59
X509v3 Authority Key Identifier:
keyid:65:F6:16:1C:73:6D:1A:9C:41:91:FD:FC:C7:A4:F8:24:CE:11:23:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:2a:fa:d9:3d:de:7c:3d:96:87:17:03:88:38:19:bf:11:fb:
aa:38:d6:9f:49:a2:0d:72:02:76:06:ee:6e:e1:99:f5:6d:97:
ab:87:e5:e0:6c:2c:be:33:2c:b5:f7:a6:26:8a:aa:a8:42:db:
a5:66:c7:7a:41:81:3f:d9:e5:8b:44:fa:4f:65:12:d9:d9:4f:
a8:cb:46:a8:dc:a4:25:78:e5:6c:98:f7:a5:b3:b9:e7:65:4c:
f3:65:f1:6f:f8:e9:9c:ca:41:ff:2d:7d:92:54:56:97:6d:81:
66:23:5a:e2:d1:ba:62:82:14:0b:c9:20:34:a0:42:1c:7c:28:
6a:22:b7:5e:9b:b0:32:8a:ee:84:74:fa:62:12:73:41:87:d9:
e9:e0:9d:00:49:67:63:3e:36:3d:70:41:bb:89:9a:13:ea:a4:
34:ba:04:8d:54:5c:e1:d8:2b:9d:1a:bd:6e:3a:dc:26:89:4a:
e9:8a:a3:2d:e7:9e:54:bc:f8:56:14:96:5e:b1:5a:f7:ee:9d:
28:27:d1:53:ce:f0:bd:5c:69:45:cf:3b:85:be:56:e9:b8:eb:
0b:79:e7:f1:21:a8:80:aa:42:8d:46:cf:57:ff:47:2b:5e:71:
08:72:fe:f5:c3:29:fe:62:7d:e4:3e:75:f3:5b:24:93:fb:0e:
34:d0:0f:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODk5QkIxMTAvBgNVBAUTKDY1RjYxNjFDNzM2RDFBOUM0MTkxRkRGQ0M3QTRGODI0
Q0UxMTIzMkQwHhcNMjYxMDAyMjIwNzMzWhcNMjYxMDA5MjIwNzMzWjAYMRYwFAYD
VQQDEw02YWMwMmIyNi02ODJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwCS2Rk/IcZ1Xp8dXnmWVjqtiID+kzYnlUikOvRHnUl+8TsCqhvD5pvE8H3yB
Fx8Pv4MXIB6wfqvdztGP4UD42cz4ejotof9I3VeY2W2ihrzsiQIvdxdQCn6rU9O5
M07fzKC+PDY+C9fVyd9x2O58hq4dt4i12mWxZwACg90DQZziRnRwJK3g5WQdR+Ix
QiWSJZdr8cgRPHya2thB/wl1IKIXKwtNXO6FpZ7YWHg9HtHCY/0fxgEXz1qL32Qb
U2prsHCyUsuPoRO0Dy+yR4ViHejmphmxtKR9VMBTm01jhv4YMMyvKRjnpPLhQRzU
QjyXSwvlsbbg4Vnlp4gMeS1tXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPmBw0R8
BNB3xcl7UlV+JytJ8u9ZMB8GA1UdIwQYMBaAFGX2FhxzbRqcQZH9/Mek+CTOESMt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTlCQi84OEMyRjE1RTg4
NTgxMUVCOTZDRTY4MTdDNEY5QUUwMi9aZllXSEhOdEdweEJrZjM4eDZUNEpNNFJJ
eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pmWVdISE50R3B4QmtmMzh4NlQ0Sk00Ukl5MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTlCQi84OEMyRjE1RTg4NTgxMUVCOTZDRTY4MTdDNEY5QUUwMi9aZllXSEhOdEdw
eEJrZjM4eDZUNEpNNFJJeTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPyr62T3efD2WhxcDiDgZvxH7qjjWn0miDXICdgbubuGZ9W2Xq4fl4GwsvjMs
tfemJoqqqELbpWbHekGBP9nli0T6T2US2dlPqMtGqNykJXjlbJj3pbO552VM82Xx
b/jpnMpB/y19klRWl22BZiNa4tG6YoIUC8kgNKBCHHwoaiK3XpuwMoruhHT6YhJz
QYfZ6eCdAElnYz42PXBBu4maE+qkNLoEjVRc4dgrnRq9bjrcJolK6YqjLeeeVLz4
VhSWXrFa9+6dKCfRU87wvVxpRc87hb5W6bjrC3nn8SGogKpCjUbPV/9HK15xCHL+
9cMp/mJ95D5181skk/sONNAPxw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 07:20:06 2026 by rpki-client