
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft
File: ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft (raw, json)
Hash identifier: Y4lDIE+KWMsJqmUjIAGV7/MZULFR1XThhG4nieA8+1I=
Subject key identifier: B6:EF:94:9E:A5:17:56:1D:88:FC:B8:C6:DD:0F:5C:A2:BA:C4:4D:9F
Authority key identifier: 64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F
Certificate issuer: /CN=A91D8A94/serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F
Certificate serial: B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft
Manifest number: AC
Signing time: Wed 19 Aug 2026 07:50:03 +0000
Manifest this update: Wed 19 Aug 2026 07:50:03 +0000
Manifest next update: Wed 26 Aug 2026 07:50:03 +0000
Files and hashes: 1: ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl (hash: Zkzo054l29nYZGE60EvYEPecBfeFRDqhHUhIgx6hY3U=)
2: B57E9D8C98D511F0912EFD62C4F9AE02.roa (hash: b4Mprh3FY9jiajkTpj7Ymhe1pwhQkrAyxJif5RXr/pI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl
rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176 (0xb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8A94, serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F
Validity
Not Before: Aug 19 07:50:03 2026 GMT
Not After : Aug 26 07:50:03 2026 GMT
Subject: CN=6a85602b-16a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:32:2d:1c:31:ff:59:ab:8a:94:24:64:3a:50:
34:de:4c:fd:26:5a:b1:a6:0e:5f:35:0e:04:f4:df:
ac:76:af:50:5d:7e:4f:4a:7b:3b:23:a5:9c:6f:32:
52:a5:27:2d:a2:a9:c3:31:6e:08:4c:01:eb:2a:cb:
c8:4b:52:3f:72:26:51:49:99:76:a6:fa:37:c8:23:
de:20:9b:66:1a:dc:bc:c8:10:fa:22:16:86:85:9a:
ca:2e:5b:15:94:99:ca:8d:a7:39:9b:bc:6f:08:dd:
ee:b3:d5:3c:86:2d:38:06:09:b2:85:6f:1d:2b:e2:
19:5b:7b:95:95:bf:53:b4:8c:42:2a:be:43:c9:19:
5f:46:99:57:28:48:08:74:bd:e6:4b:3e:dc:d4:6c:
84:56:e9:da:3b:2b:c8:0d:10:6f:26:ac:e0:b5:27:
a9:97:e3:3c:45:e8:0b:0d:20:c6:0f:f4:d0:c9:36:
07:a5:47:97:5a:63:52:a8:eb:ac:1c:3a:ce:5f:91:
99:b3:d9:32:40:26:15:48:34:22:a0:11:c4:1f:81:
00:ca:44:69:b7:20:66:b6:32:4d:a9:ea:39:82:73:
42:88:67:4b:a6:a7:bf:3d:7c:ad:18:a6:0e:cf:6a:
f9:dd:d5:52:5a:d7:7b:2f:4f:0c:7f:d9:f8:91:b4:
9a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EF:94:9E:A5:17:56:1D:88:FC:B8:C6:DD:0F:5C:A2:BA:C4:4D:9F
X509v3 Authority Key Identifier:
keyid:64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:0b:27:f1:a2:b1:d7:84:17:d5:63:ef:69:71:ee:ff:95:4f:
35:66:ed:81:66:51:e3:81:b8:09:f4:05:bc:1a:58:83:d0:a6:
ea:0f:a1:59:85:89:70:db:10:99:e4:ca:46:1a:81:21:08:ce:
09:1c:92:3a:e2:16:71:01:75:c5:1a:aa:eb:6c:72:c7:77:5f:
16:99:43:d3:ea:56:70:62:a4:26:5d:7b:3c:5c:ad:f9:da:26:
e4:14:8e:1b:31:d1:74:82:80:88:68:57:a5:a5:de:62:8c:87:
23:01:8e:19:0a:b4:ba:2c:c3:d6:85:3b:14:ba:a4:f5:f0:1f:
0a:5f:7b:c8:24:b3:c1:7b:82:34:db:22:d6:7b:6e:51:ad:a7:
36:8f:74:b1:d4:c4:e6:e0:37:86:fd:e0:e3:f3:12:2e:f9:f5:
19:cf:16:3b:95:62:3d:c8:a0:fd:f0:e5:28:08:88:28:25:d6:
a3:5b:f9:0e:28:ea:30:5c:0c:0a:dd:07:e3:99:5a:c0:6b:8e:
e5:6c:b3:7a:8e:a5:74:73:6e:0d:31:ef:1c:40:04:cb:3f:bf:
55:61:64:ec:92:0c:23:dd:7a:4e:15:16:52:86:48:ad:38:9c:
fe:34:43:f9:93:eb:81:a7:e9:8c:30:47:2f:33:e7:7c:e0:f2:
3f:fc:57:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDhBOTQxMTAvBgNVBAUTKDY0QzBDMUQ5NjE1MDExMDYyNTEzRUY0N0I4RUUzODg5
ODFEM0U4MEYwHhcNMjYwODE5MDc1MDAzWhcNMjYwODI2MDc1MDAzWjAYMRYwFAYD
VQQDEw02YTg1NjAyYi0xNmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzTItHDH/WauKlCRkOlA03kz9Jlqxpg5fNQ4E9N+sdq9QXX5PSns7I6WcbzJS
pSctoqnDMW4ITAHrKsvIS1I/ciZRSZl2pvo3yCPeIJtmGty8yBD6IhaGhZrKLlsV
lJnKjac5m7xvCN3us9U8hi04BgmyhW8dK+IZW3uVlb9TtIxCKr5DyRlfRplXKEgI
dL3mSz7c1GyEVunaOyvIDRBvJqzgtSepl+M8RegLDSDGD/TQyTYHpUeXWmNSqOus
HDrOX5GZs9kyQCYVSDQioBHEH4EAykRptyBmtjJNqeo5gnNCiGdLpqe/PXytGKYO
z2r53dVSWtd7L08Mf9n4kbSaLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLbvlJ6l
F1YdiPy4xt0PXKK6xE2fMB8GA1UdIwQYMBaAFGTAwdlhUBEGJRPvR7juOImB0+gP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEE5NC82Q0QwMEREMjk4
Q0IxMUYwODJDM0YwNUZDNEY5QUUwMi9aTURCMldGUUVRWWxFLTlIdU80NGlZSFQ2
QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pNREIyV0ZRRVFZbEUtOUh1TzQ0aVlIVDZBOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OEE5NC82Q0QwMEREMjk4Q0IxMUYwODJDM0YwNUZDNEY5QUUwMi9aTURCMldGUUVR
WWxFLTlIdU80NGlZSFQ2QTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArQsn8aKx14QX1WPvaXHu/5VPNWbtgWZR44G4CfQFvBpYg9Cm6g+hWYWJcNsQ
meTKRhqBIQjOCRySOuIWcQF1xRqq62xyx3dfFplD0+pWcGKkJl17PFyt+dom5BSO
GzHRdIKAiGhXpaXeYoyHIwGOGQq0uizD1oU7FLqk9fAfCl97yCSzwXuCNNsi1ntu
Ua2nNo90sdTE5uA3hv3g4/MSLvn1Gc8WO5ViPcig/fDlKAiIKCXWo1v5DijqMFwM
Ct0H45lawGuO5Wyzeo6ldHNuDTHvHEAEyz+/VWFk7JIMI916ThUWUoZIrTic/jRD
+ZPrgafpjDBHLzPnfODyP/xXqQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:37 2026 by rpki-client