
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft
File: zUHbwYl43ThNT1yPj5a0DnHe5kE.mft (raw, json)
Hash identifier: 74nzFAokWft0l8c5HYcyNnbSYr14KSSF3D3qP1m+tUk=
Subject key identifier: A0:01:DF:CA:5C:08:37:94:2F:3D:F0:01:1E:2E:6C:9F:36:AA:19:DC
Authority key identifier: CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41
Certificate issuer: /CN=A9197488/serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641
Certificate serial: 0104
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft
Manifest number: 0100
Signing time: Fri 17 Jul 2026 07:24:42 +0000
Manifest this update: Fri 17 Jul 2026 07:24:42 +0000
Manifest next update: Fri 24 Jul 2026 07:24:42 +0000
Files and hashes: 1: zUHbwYl43ThNT1yPj5a0DnHe5kE.crl (hash: P7p5Ks1VPkkRMYuY9wl1Y7BvRUk10UoK+Jn1sIxNyJ0=)
2: 26415376FF1F11EFA2518D1DC4F9AE02.roa (hash: fR4AypiQYoJGmxQnLx99QlOWnyJ7/nfzm8EkI/Pllqo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl
rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:24:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197488, serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641
Validity
Not Before: Jul 17 07:24:42 2026 GMT
Not After : Jul 24 07:24:42 2026 GMT
Subject: CN=6a59d8ba-39cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:2b:da:7a:5a:cb:a5:40:7a:98:c2:41:df:
62:35:4d:c4:20:5c:d3:b5:82:47:9d:0c:4f:a0:4c:
17:b4:3f:1b:f9:c9:7b:0f:78:f7:f4:fd:4d:02:3e:
ba:35:0a:36:6d:b8:37:92:4a:60:e8:37:02:8b:99:
46:2e:6d:ad:9b:ae:f8:34:ed:2a:1d:a4:3f:59:5c:
b7:59:5b:3f:fa:bb:4a:3f:f5:71:dd:1e:4b:b0:61:
77:12:56:a0:97:f8:41:de:bd:95:27:a0:6d:77:e9:
80:c4:ec:b7:6c:5a:12:d1:6f:89:d2:c5:cc:d9:a9:
48:d2:c8:72:90:db:84:46:77:bf:bd:88:3d:e1:56:
6e:5e:57:4e:67:ae:61:8b:10:0d:b7:c9:08:6d:ca:
2d:08:69:1a:bb:54:78:19:2f:96:7e:5d:60:31:cc:
d3:da:5e:e6:e6:66:6b:7c:eb:7b:a7:b3:0b:61:dd:
be:fc:c1:c5:23:79:34:d0:a0:c1:d2:b4:ba:0f:82:
9c:4b:68:bb:25:7b:e9:70:18:f2:a7:28:dc:ed:0e:
43:0c:cc:3c:d7:aa:5b:c4:67:48:39:5b:5c:b9:e8:
46:c6:8a:cb:2a:5e:87:0e:e2:f9:52:43:f8:aa:7c:
44:7f:2d:e3:a1:f0:63:0b:fc:3a:65:07:12:e6:4b:
41:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:01:DF:CA:5C:08:37:94:2F:3D:F0:01:1E:2E:6C:9F:36:AA:19:DC
X509v3 Authority Key Identifier:
keyid:CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:b9:11:95:32:86:30:43:3f:7e:7c:12:bc:9f:1d:2f:24:dd:
99:c5:06:b3:fc:8d:f3:8a:0e:42:33:05:2c:4f:c2:26:9d:0b:
7e:6b:f2:b3:9a:22:d2:a4:20:52:84:4c:56:6f:0c:01:5a:d4:
ad:85:e8:bf:f5:73:3a:e7:17:a2:6e:d7:77:37:ed:dc:5a:97:
b3:e5:b8:9e:47:df:a4:af:55:c4:aa:6b:7f:48:b1:34:10:b6:
e5:bd:8f:af:21:81:36:12:18:8b:c3:67:2b:dc:9c:89:53:5c:
9a:0f:41:dd:9c:2b:65:d6:80:0f:fe:32:41:68:cc:8d:3d:a9:
5e:cf:62:0a:ed:27:fa:66:71:da:a0:75:fa:68:28:62:55:66:
1b:db:1a:a1:6e:ec:d7:21:10:8c:02:32:2c:e3:08:52:d7:6e:
f2:e5:d7:98:de:18:01:e4:38:df:2b:23:95:a4:48:71:4b:14:
07:a5:1c:82:83:04:54:0c:2e:66:30:06:78:cd:dc:82:a3:33:
88:fc:77:b0:45:f3:b4:98:78:1d:4f:f5:b7:f8:b5:19:c7:28:
c2:a8:93:3f:12:be:0b:91:25:73:92:01:f9:6d:c6:21:aa:8b:
65:42:85:a5:80:61:0e:98:73:3f:8c:84:21:c2:80:02:5c:79:
bd:0c:54:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTc0ODgxMTAvBgNVBAUTKENENDFEQkMxODk3OEREMzg0RDRGNUM4RjhGOTZCNDBF
NzFERUU2NDEwHhcNMjYwNzE3MDcyNDQyWhcNMjYwNzI0MDcyNDQyWjAYMRYwFAYD
VQQDEw02YTU5ZDhiYS0zOWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsswr2npay6VAepjCQd9iNU3EIFzTtYJHnQxPoEwXtD8b+cl7D3j39P1NAj66
NQo2bbg3kkpg6DcCi5lGLm2tm674NO0qHaQ/WVy3WVs/+rtKP/Vx3R5LsGF3Elag
l/hB3r2VJ6Btd+mAxOy3bFoS0W+J0sXM2alI0shykNuERne/vYg94VZuXldOZ65h
ixANt8kIbcotCGkau1R4GS+Wfl1gMczT2l7m5mZrfOt7p7MLYd2+/MHFI3k00KDB
0rS6D4KcS2i7JXvpcBjypyjc7Q5DDMw816pbxGdIOVtcuehGxorLKl6HDuL5UkP4
qnxEfy3jofBjC/w6ZQcS5ktB2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKAB38pc
CDeULz3wAR4ubJ82qhncMB8GA1UdIwQYMBaAFM1B28GJeN04TU9cj4+WtA5x3uZB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzQ4OC83OTAzQUJCQ0ZG
MTExMUVGQTE4RUI5NjBDNEY5QUUwMi96VUhid1lsNDNUaE5UMXlQajVhMERuSGU1
a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pVSGJ3WWw0M1RoTlQxeVBqNWEwRG5IZTVrRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzQ4OC83OTAzQUJCQ0ZGMTExMUVGQTE4RUI5NjBDNEY5QUUwMi96VUhid1lsNDNU
aE5UMXlQajVhMERuSGU1a0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAALkRlTKGMEM/fnwSvJ8dLyTdmcUGs/yN84oOQjMFLE/CJp0Lfmvys5oi0qQg
UoRMVm8MAVrUrYXov/VzOucXom7Xdzft3FqXs+W4nkffpK9VxKprf0ixNBC25b2P
ryGBNhIYi8NnK9yciVNcmg9B3ZwrZdaAD/4yQWjMjT2pXs9iCu0n+mZx2qB1+mgo
YlVmG9saoW7s1yEQjAIyLOMIUtdu8uXXmN4YAeQ43ysjlaRIcUsUB6UcgoMEVAwu
ZjAGeM3cgqMziPx3sEXztJh4HU/1t/i1GccowqiTPxK+C5Elc5IB+W3GIaqLZUKF
pYBhDphzP4yEIcKAAlx5vQxU0g==
-----END CERTIFICATE-----
Generated at Sat Jul 18 04:05:14 2026 by rpki-client