
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
File: rzCJXc48ZcI77FTLCJhY66Fhic4.mft (raw, json)
Hash identifier: 0hX5AlrOq+Xc9bHGEnfxL4eumc80Qj8ww3d722X2gKk=
Subject key identifier: 80:F9:13:73:5B:73:CF:46:EE:B1:89:76:5E:BA:64:51:9C:2B:80:5B
Authority key identifier: AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE
Certificate issuer: /CN=A91CA294/serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE
Certificate serial: C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
Manifest number: BD
Signing time: Sat 19 Sep 2026 07:02:56 +0000
Manifest this update: Sat 19 Sep 2026 07:02:55 +0000
Manifest next update: Sat 26 Sep 2026 07:02:55 +0000
Files and hashes: 1: rzCJXc48ZcI77FTLCJhY66Fhic4.crl (hash: y6uVr22b7UMgykDYi+k9EXuyF+6auGJzs4ux7ac+Uvc=)
2: 7CCBF066A2F811F09235B919C4F9AE02.roa (hash: L2xc97rBOEo7wGTXyTU4krqEAbLPgvd1QpBdIvhLYmA=)
3: 44D1A4E69DAB11F0A7401064C4F9AE02.roa (hash: /dWw78lmDvPsrlgqtDvPWypN8cQFZwkLxuNHhkdxFFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl
rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA294, serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE
Validity
Not Before: Sep 19 07:02:55 2026 GMT
Not After : Sep 26 07:02:55 2026 GMT
Subject: CN=6aae33a0-b034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:18:4a:07:3b:55:bc:cf:81:52:94:ab:92:
11:76:e6:f6:a0:35:c7:39:30:c2:4b:a3:21:59:02:
75:79:57:ff:9f:fd:a9:d8:fc:65:1f:45:df:21:12:
e9:41:5d:11:e5:86:f5:c0:ae:09:ca:0c:8b:45:3b:
f6:94:d5:a3:39:95:88:69:96:75:9f:ae:12:2f:b5:
47:51:d9:ce:6a:a0:5b:f3:0d:bc:d1:5e:7c:7f:d1:
dc:08:6c:85:6e:50:5d:de:99:e3:ad:b3:96:26:3c:
ed:ab:77:16:ed:26:c0:8f:62:ec:e0:77:0d:51:fa:
77:7c:57:4e:6e:8b:b0:fc:f1:f2:06:b1:42:ce:37:
80:5d:a2:15:b2:ee:fd:ed:72:7a:3e:23:1f:66:33:
20:42:32:5c:16:24:30:55:49:4c:bb:ae:7d:e0:d1:
51:e9:dc:21:55:83:b5:c5:15:fe:56:38:8f:d9:48:
a7:ef:12:4b:8f:5a:0d:b2:60:88:24:2b:a8:51:6a:
a0:fc:88:c0:84:76:7d:d1:8c:f3:99:49:41:8b:8d:
b3:b7:8d:58:eb:e5:e3:b8:08:07:3c:d9:97:85:3e:
83:c4:11:7f:87:41:8c:84:ed:1b:fb:5d:1c:85:a1:
ba:00:14:27:f6:ed:15:20:d8:ad:42:0f:8a:ee:15:
b2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F9:13:73:5B:73:CF:46:EE:B1:89:76:5E:BA:64:51:9C:2B:80:5B
X509v3 Authority Key Identifier:
keyid:AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f6:2e:c1:f2:ea:97:d9:af:54:88:db:51:bb:f2:13:8d:39:
72:52:18:5a:b2:41:f6:9f:0f:72:df:ff:76:4a:be:3a:09:a0:
18:cc:81:c9:03:13:47:8f:15:cf:0b:21:50:7d:9e:be:95:72:
a4:bf:c7:7f:b2:a3:ba:de:2d:1b:10:47:ed:28:f4:f1:03:5b:
92:10:a7:65:ab:eb:00:3e:2e:71:d1:88:aa:6d:95:25:eb:f9:
9a:4f:07:fd:66:d7:94:47:fe:5e:89:4f:02:a3:42:08:b9:34:
d9:70:f7:d0:9c:56:89:d2:0b:d1:c7:03:fe:e1:79:f2:ac:74:
91:43:8b:2e:eb:7c:9c:f4:e9:12:7c:1c:0d:66:a0:56:9e:49:
f9:ae:79:cf:11:aa:2c:30:24:3d:7c:c7:82:08:8e:9c:c1:7d:
5a:7c:a8:2c:e7:62:f2:84:fb:43:7d:47:42:cb:cd:a6:e2:c9:
0d:fd:04:ac:fc:74:53:79:86:d9:53:8c:cf:d6:46:f5:f6:1e:
a7:3f:e0:fe:4a:97:a6:f9:1e:26:bb:b1:b9:f7:7f:c5:d2:79:
df:46:89:38:6b:00:91:17:61:15:62:03:cf:b7:17:46:64:ec:
f8:7b:d7:9a:d8:80:26:f8:55:92:1b:63:e4:cf:79:a0:08:a5:
01:d8:2e:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0EyOTQxMTAvBgNVBAUTKEFGMzA4OTVEQ0UzQzY1QzIzQkVDNTRDQjA4OTg1OEVC
QTE2MTg5Q0UwHhcNMjYwOTE5MDcwMjU1WhcNMjYwOTI2MDcwMjU1WjAYMRYwFAYD
VQQDEw02YWFlMzNhMC1iMDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuEoYSgc7VbzPgVKUq5IRdub2oDXHOTDCS6MhWQJ1eVf/n/2p2PxlH0XfIRLp
QV0R5Yb1wK4JygyLRTv2lNWjOZWIaZZ1n64SL7VHUdnOaqBb8w280V58f9HcCGyF
blBd3pnjrbOWJjztq3cW7SbAj2Ls4HcNUfp3fFdObouw/PHyBrFCzjeAXaIVsu79
7XJ6PiMfZjMgQjJcFiQwVUlMu6594NFR6dwhVYO1xRX+VjiP2Uin7xJLj1oNsmCI
JCuoUWqg/IjAhHZ90YzzmUlBi42zt41Y6+XjuAgHPNmXhT6DxBF/h0GMhO0b+10c
haG6ABQn9u0VINitQg+K7hWyIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFID5E3Nb
c89G7rGJdl66ZFGcK4BbMB8GA1UdIwQYMBaAFK8wiV3OPGXCO+xUywiYWOuhYYnO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTI5NC9DN0FGQTZBMjlE
QUExMUYwOTY0MjBCNjNDNEY5QUUwMi9yekNKWGM0OFpjSTc3RlRMQ0poWTY2Rmhp
YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3J6Q0pYYzQ4WmNJNzdGVExDSmhZNjZGaGljNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QTI5NC9DN0FGQTZBMjlEQUExMUYwOTY0MjBCNjNDNEY5QUUwMi9yekNKWGM0OFpj
STc3RlRMQ0poWTY2RmhpYzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXvYuwfLql9mvVIjbUbvyE405clIYWrJB9p8Pct//dkq+OgmgGMyByQMTR48V
zwshUH2evpVypL/Hf7Kjut4tGxBH7Sj08QNbkhCnZavrAD4ucdGIqm2VJev5mk8H
/WbXlEf+XolPAqNCCLk02XD30JxWidIL0ccD/uF58qx0kUOLLut8nPTpEnwcDWag
Vp5J+a55zxGqLDAkPXzHggiOnMF9WnyoLOdi8oT7Q31HQsvNpuLJDf0ErPx0U3mG
2VOMz9ZG9fYepz/g/kqXpvkeJruxufd/xdJ530aJOGsAkRdhFWIDz7cXRmTs+HvX
mtiAJvhVkhtj5M95oAilAdgukw==
-----END CERTIFICATE-----
Generated at Sat Sep 19 09:16:19 2026 by rpki-client