
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft
File: Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft (raw, json)
Hash identifier: NdGAfdu3P+9zaHXezNDyWmchSy+6XSncHyWb7b9GryA=
Subject key identifier: B0:22:49:0A:01:B4:AF:D3:B5:5E:0E:41:30:79:E3:7E:0F:0F:9F:20
Authority key identifier: 65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE
Certificate issuer: /CN=A91BB000/serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE
Certificate serial: 98
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft
Manifest number: 96
Signing time: Fri 17 Jul 2026 08:36:27 +0000
Manifest this update: Fri 17 Jul 2026 08:36:26 +0000
Manifest next update: Fri 24 Jul 2026 08:36:26 +0000
Files and hashes: 1: Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl (hash: asE2vle0dyj19zy4IScMXljqzYbRJj3NsCXrcAiNWUU=)
2: C2B54C4E9D2611F0A7B9140CC4F9AE02.roa (hash: /odblAES8/7YPLaconnJ5Vgys59wwFEPqcpWiTdxc8Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl
rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:36:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB000, serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE
Validity
Not Before: Jul 17 08:36:26 2026 GMT
Not After : Jul 24 08:36:26 2026 GMT
Subject: CN=6a59e98b-2a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:0d:65:b0:23:10:23:fb:c6:1d:70:b8:b1:
21:18:dd:b4:36:a1:3b:15:c5:fa:38:ca:0c:4e:fa:
9b:3c:d5:26:6b:45:89:fe:8a:d7:60:36:02:9b:87:
37:74:db:b4:ad:57:a2:b8:3f:3b:4d:48:84:8c:e9:
0f:c9:a7:a9:f1:ae:26:be:a1:b9:70:03:c1:f1:e1:
da:71:8d:6d:ee:8f:ff:8d:e7:11:90:89:63:7b:48:
4d:30:dd:00:55:86:23:7f:fd:04:50:5c:5e:08:dc:
12:b7:b1:0f:54:c9:06:d7:69:6d:86:4d:58:d6:7e:
0a:ba:be:cf:ab:16:cb:b3:a0:de:7d:a1:37:ce:c6:
2c:c7:58:27:14:4e:8c:90:45:05:8d:6c:5e:44:1b:
01:62:72:22:29:37:9b:37:26:9d:a5:b1:18:47:c8:
a7:b6:76:d9:db:7b:40:2a:54:9f:3e:23:7b:20:6d:
0b:87:84:ce:5a:8a:5b:78:b3:af:b3:6c:0e:03:3f:
75:e9:2f:56:a8:a2:35:85:7f:07:7a:0b:0b:87:fe:
6c:f8:5e:0f:63:aa:ee:12:a7:c8:24:aa:98:47:45:
5e:eb:24:69:c8:c5:12:57:8e:d4:b2:52:f3:56:71:
b5:e0:6c:c3:54:72:c4:eb:b7:3a:5a:cf:4b:ad:b9:
8a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:22:49:0A:01:B4:AF:D3:B5:5E:0E:41:30:79:E3:7E:0F:0F:9F:20
X509v3 Authority Key Identifier:
keyid:65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d8:68:7e:5b:ad:62:4d:06:51:80:ab:a9:56:cb:0e:ac:e8:
1b:69:a0:8e:c5:f9:a2:16:74:4e:22:84:28:32:c4:2c:77:5e:
fd:32:3b:f3:db:45:aa:61:26:ec:c4:2a:b2:c8:6d:7f:14:28:
8a:8d:9b:82:16:57:b0:ab:85:85:ab:f0:8e:c3:f8:88:16:a8:
4a:4c:ab:71:2c:6f:6a:38:c0:10:3f:f8:96:09:0e:0d:ec:59:
ba:99:78:ff:c2:ba:03:f8:5a:fe:57:0c:d0:12:66:43:7f:f0:
7c:9b:ef:30:82:78:8a:10:f6:75:e9:02:e6:98:ef:dd:45:9d:
76:23:c8:1b:55:df:0d:b2:cf:d9:a6:fa:c0:b8:08:b6:69:d3:
2d:bb:0c:9d:90:d4:b2:1a:db:e6:bf:e8:6f:fe:b3:a2:5c:4f:
e4:6e:7f:ee:16:73:53:6d:a1:77:39:9f:f0:a8:5f:06:7b:77:
90:e0:93:d2:b1:0f:cb:31:a2:08:40:05:21:39:d7:ff:6d:8a:
da:70:20:8e:68:af:20:1e:22:7e:78:76:93:4f:95:c5:65:d5:
bb:6e:ff:08:5e:dd:08:8e:ec:97:95:7c:68:dc:59:04:30:00:
cc:01:36:85:34:3d:a3:89:a1:87:bb:f8:7c:13:3a:1e:c2:34:
ff:c2:21:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkIwMDAxMTAvBgNVBAUTKDY1QUFCRUYxN0NDQzA4MEM5QTM2MkEwODIxNTMwNEIx
MUJENTA3RkUwHhcNMjYwNzE3MDgzNjI2WhcNMjYwNzI0MDgzNjI2WjAYMRYwFAYD
VQQDEw02YTU5ZTk4Yi0yYTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAupwNZbAjECP7xh1wuLEhGN20NqE7FcX6OMoMTvqbPNUma0WJ/orXYDYCm4c3
dNu0rVeiuD87TUiEjOkPyaep8a4mvqG5cAPB8eHacY1t7o//jecRkIlje0hNMN0A
VYYjf/0EUFxeCNwSt7EPVMkG12lthk1Y1n4Kur7PqxbLs6DefaE3zsYsx1gnFE6M
kEUFjWxeRBsBYnIiKTebNyadpbEYR8intnbZ23tAKlSfPiN7IG0Lh4TOWopbeLOv
s2wOAz916S9WqKI1hX8HegsLh/5s+F4PY6ruEqfIJKqYR0Ve6yRpyMUSV47UslLz
VnG14GzDVHLE67c6Ws9LrbmKUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLAiSQoB
tK/TtV4OQTB5434PD58gMB8GA1UdIwQYMBaAFGWqvvF8zAgMmjYqCCFTBLEb1Qf+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjAwMC9FNUExMzhEMDlE
MTcxMUYwQjQyRUYwMzRDNEY5QUUwMi9aYXEtOFh6TUNBeWFOaW9JSVZNRXNSdlZC
XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1phcS04WHpNQ0F5YU5pb0lJVk1Fc1J2VkJfNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjAwMC9FNUExMzhEMDlEMTcxMUYwQjQyRUYwMzRDNEY5QUUwMi9aYXEtOFh6TUNB
eWFOaW9JSVZNRXNSdlZCXzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAn9hoflutYk0GUYCrqVbLDqzoG2mgjsX5ohZ0TiKEKDLELHde/TI789tFqmEm
7MQqsshtfxQoio2bghZXsKuFhavwjsP4iBaoSkyrcSxvajjAED/4lgkODexZupl4
/8K6A/ha/lcM0BJmQ3/wfJvvMIJ4ihD2dekC5pjv3UWddiPIG1XfDbLP2ab6wLgI
tmnTLbsMnZDUshrb5r/ob/6zolxP5G5/7hZzU22hdzmf8KhfBnt3kOCT0rEPyzGi
CEAFITnX/22K2nAgjmivIB4ifnh2k0+VxWXVu27/CF7dCI7sl5V8aNxZBDAAzAE2
hTQ9o4mhh7v4fBM6HsI0/8Ihkg==
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:43 2026 by rpki-client