
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
File: zl8rQ5utW-vicqch6qzDj6rdSbQ.mft (raw, json)
Hash identifier: 0ECXxx3BZw19Hl1fdnDCHhAqOhIOKFxpNOLKqFMsbM4=
Subject key identifier: 84:07:28:38:37:93:08:E6:A3:01:12:DA:CA:7B:A6:61:93:FD:C7:1A
Authority key identifier: CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4
Certificate issuer: /CN=A91AB9A1/serialNumber=CE5F2B439BAD5BEBE272A721EAACC38FAADD49B4
Certificate serial: 06F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
Manifest number: 06F0
Signing time: Sat 04 Apr 2026 14:40:04 +0000
Manifest this update: Sat 04 Apr 2026 14:40:04 +0000
Manifest next update: Sat 11 Apr 2026 14:40:04 +0000
Files and hashes: 1: zl8rQ5utW-vicqch6qzDj6rdSbQ.crl (hash: VWxRD5pJeNgMvCxnagOEKTmFWPPgJvvO7DZs7hNVwtk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.crl
rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:40:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1776 (0x6f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB9A1, serialNumber=CE5F2B439BAD5BEBE272A721EAACC38FAADD49B4
Validity
Not Before: Apr 4 14:40:04 2026 GMT
Not After : Apr 11 14:40:04 2026 GMT
Subject: CN=69d122c4-4a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3b:e8:af:89:25:6a:ea:68:ab:65:54:48:42:
ce:a8:65:a2:27:cb:e8:89:09:13:39:16:4e:ff:99:
b0:06:71:68:67:c5:80:52:e1:80:e8:90:1d:0a:a5:
62:36:27:2d:8a:c9:2e:3b:4a:51:5a:c7:dc:b5:2f:
38:aa:15:13:d6:60:ca:c7:05:15:97:87:49:32:2b:
ab:f0:0c:86:ea:35:2e:ac:73:bd:23:94:12:27:19:
54:9d:2b:6e:85:4a:f7:fb:03:9f:6a:00:40:4f:03:
dc:0b:fe:ff:e1:2e:d5:66:cb:78:a9:1c:b7:9c:32:
ba:65:e0:ef:2e:42:07:65:5d:56:2a:39:5c:c7:ec:
f1:6a:db:f0:a4:ca:87:45:71:cc:90:bb:1d:ec:07:
80:3c:0d:e0:8f:8a:f3:f9:41:5e:77:4f:ca:07:fb:
80:48:cf:82:8c:76:f4:5a:10:20:f0:57:0a:2c:8e:
31:f4:57:a2:3a:07:7e:5a:dc:68:45:53:34:d2:3d:
8d:e0:4e:b7:44:d0:5f:25:63:d0:b0:bf:fe:a5:87:
17:2c:23:0f:d1:4d:b1:5f:64:b3:94:6b:91:78:27:
1d:64:19:da:08:9e:b3:81:bc:56:43:36:d8:9f:db:
59:ed:b4:2f:76:c2:13:d5:f7:07:d1:ed:a2:4a:ed:
77:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:07:28:38:37:93:08:E6:A3:01:12:DA:CA:7B:A6:61:93:FD:C7:1A
X509v3 Authority Key Identifier:
keyid:CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:2e:54:e8:99:b7:ba:69:83:cb:84:80:3c:79:a2:8f:f5:78:
b3:20:ee:62:3b:c8:8b:e9:57:33:aa:92:40:25:49:90:d3:84:
83:48:69:88:ff:49:d5:0b:81:32:ec:6e:4e:ef:d0:90:89:e8:
df:3e:b9:53:39:6b:f5:46:24:54:06:e2:4f:83:3e:d6:f9:d2:
5d:86:61:f4:e0:12:d3:09:5c:8a:ac:5d:88:eb:c9:07:ae:c4:
4f:e1:04:61:25:ce:95:71:24:92:4b:30:b4:3a:9b:79:61:ca:
d8:cf:b6:66:bb:f3:53:5f:f0:7c:ae:a2:25:dd:29:04:21:14:
f2:43:63:c5:6d:d8:77:92:4e:a4:e7:51:2c:86:fd:c8:ae:ad:
db:37:c0:1f:df:6b:03:4d:33:20:c5:fc:61:d5:13:82:b3:26:
df:65:22:60:c9:c5:11:78:6e:ba:b2:cb:9a:45:61:5b:a6:b6:
4c:b3:e5:f1:d6:8a:1e:a9:4e:00:56:5b:9d:82:55:a0:ae:c3:
6d:21:f6:25:ee:db:31:99:31:ab:2b:d4:29:d7:c1:9a:7d:2b:
ed:ec:fe:f7:61:97:45:28:c0:13:15:53:ae:a2:7b:80:4a:7e:
2c:a8:1d:84:d5:9f:1a:ec:7e:ea:95:8c:6f:08:29:4f:32:48:
41:db:cc:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUI5QTExMTAvBgNVBAUTKENFNUYyQjQzOUJBRDVCRUJFMjcyQTcyMUVBQUNDMzhG
QUFERDQ5QjQwHhcNMjYwNDA0MTQ0MDA0WhcNMjYwNDExMTQ0MDA0WjAYMRYwFAYD
VQQDEw02OWQxMjJjNC00YTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Tvor4klaupoq2VUSELOqGWiJ8voiQkTORZO/5mwBnFoZ8WAUuGA6JAdCqVi
NictiskuO0pRWsfctS84qhUT1mDKxwUVl4dJMiur8AyG6jUurHO9I5QSJxlUnStu
hUr3+wOfagBATwPcC/7/4S7VZst4qRy3nDK6ZeDvLkIHZV1WKjlcx+zxatvwpMqH
RXHMkLsd7AeAPA3gj4rz+UFed0/KB/uASM+CjHb0WhAg8FcKLI4x9FeiOgd+Wtxo
RVM00j2N4E63RNBfJWPQsL/+pYcXLCMP0U2xX2SzlGuReCcdZBnaCJ6zgbxWQzbY
n9tZ7bQvdsIT1fcH0e2iSu135QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIQHKDg3
kwjmowES2sp7pmGT/ccaMB8GA1UdIwQYMBaAFM5fK0ObrVvr4nKnIeqsw4+q3Um0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjlBMS81NzMzN0FDQThE
NzkxMUVCOEQ4QkQ2MEJDNEY5QUUwMi96bDhyUTV1dFctdmljcWNoNnF6RGo2cmRT
YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3psOHJRNXV0Vy12aWNxY2g2cXpEajZyZFNiUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjlBMS81NzMzN0FDQThENzkxMUVCOEQ4QkQ2MEJDNEY5QUUwMi96bDhyUTV1dFct
dmljcWNoNnF6RGo2cmRTYlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUS5U6Jm3ummDy4SAPHmij/V4syDuYjvIi+lXM6qSQCVJkNOEg0hpiP9J1QuB
MuxuTu/QkIno3z65Uzlr9UYkVAbiT4M+1vnSXYZh9OAS0wlciqxdiOvJB67ET+EE
YSXOlXEkkkswtDqbeWHK2M+2ZrvzU1/wfK6iJd0pBCEU8kNjxW3Yd5JOpOdRLIb9
yK6t2zfAH99rA00zIMX8YdUTgrMm32UiYMnFEXhuurLLmkVhW6a2TLPl8daKHqlO
AFZbnYJVoK7DbSH2Je7bMZkxqyvUKdfBmn0r7ez+92GXRSjAExVTrqJ7gEp+LKgd
hNWfGux+6pWMbwgpTzJIQdvM6Q==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:40:58 2026 by rpki-client