
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
File: ZKte21ESYrc2r4F0HU1zFBTTSlc.mft (raw, json)
Hash identifier: HwNxmxLXyqEQX7ImlTw3IFJX0OOtWg/ZILUro6O2YXg=
Subject key identifier: B3:E2:60:66:2E:D7:CB:DC:BF:B3:39:90:2C:5D:3D:7E:AB:C2:C7:A3
Authority key identifier: 64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57
Certificate issuer: /CN=A91DD11A/serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
Manifest number: 90
Signing time: Wed 19 Aug 2026 08:19:13 +0000
Manifest this update: Wed 19 Aug 2026 08:19:12 +0000
Manifest next update: Wed 26 Aug 2026 08:19:12 +0000
Files and hashes: 1: ZKte21ESYrc2r4F0HU1zFBTTSlc.crl (hash: BjojENiiRGKtRL9LX6War6X2jfT3NOPMfp2qYq6g/n0=)
2: E4DCE562284911F19931E6E894833773.roa (hash: 0yKy3aBVwlRdNI3lMwh0VFIrVrZK1Q3eetgCew0uics=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl
rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD11A, serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57
Validity
Not Before: Aug 19 08:19:12 2026 GMT
Not After : Aug 26 08:19:12 2026 GMT
Subject: CN=6a856701-8df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a0:67:8d:29:34:ae:61:56:fa:4b:3e:80:c3:
a8:ff:2b:08:28:85:1f:12:79:8f:92:21:8d:da:aa:
19:3e:91:90:8f:3b:93:e4:f9:b7:cd:fc:b2:14:28:
1e:a4:3f:d3:0c:49:c0:34:9d:b9:7e:51:7d:41:d6:
96:a1:b5:14:fd:76:43:c4:e1:e2:8d:8c:74:4f:b8:
92:4e:9f:2f:d2:94:a5:be:77:de:58:96:30:f1:a0:
be:03:6f:5a:ba:23:e4:b4:eb:9b:15:1c:7d:a5:f7:
fd:5e:d8:61:e2:2a:56:92:21:e0:eb:90:a0:a3:e5:
07:34:15:3a:09:82:ce:33:5c:db:87:8d:95:43:8a:
ba:ac:22:a0:b2:9b:ec:9a:c2:71:de:0a:63:96:78:
58:cd:0b:63:ae:dd:57:bf:03:37:c0:48:47:1d:87:
c4:98:e8:b7:8e:63:c9:c4:99:30:09:47:82:12:c0:
3b:fa:21:aa:b6:dc:62:66:b5:0f:28:e8:d8:34:ee:
58:db:17:4c:c7:d2:be:1c:5f:68:5d:8f:82:89:a6:
1e:5f:9f:2c:74:4f:cf:0e:5e:05:04:6b:e1:90:93:
eb:6d:96:fa:d6:c4:b1:ce:78:e1:10:23:5e:9d:92:
8c:3e:c3:83:d5:ff:82:41:43:df:66:d8:53:d6:4f:
f8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E2:60:66:2E:D7:CB:DC:BF:B3:39:90:2C:5D:3D:7E:AB:C2:C7:A3
X509v3 Authority Key Identifier:
keyid:64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1f:01:5c:3c:54:e4:36:24:c2:1d:30:00:32:50:bd:13:20:
d2:74:49:16:1e:36:0f:19:64:7e:76:63:20:6c:08:41:94:6a:
98:63:86:b6:19:88:92:19:0c:b5:2b:8b:a3:7f:a2:d1:92:8b:
ff:78:38:30:6e:28:65:e8:f4:8b:46:3f:d0:36:b3:fc:39:86:
04:cd:25:f5:3d:78:b8:25:ed:b7:2d:9f:c5:ab:e3:c5:19:55:
d9:53:78:6b:e4:5e:26:c4:49:a8:f2:8d:22:6e:05:3e:65:46:
a2:64:22:1a:8e:b7:b5:dc:a6:06:b5:14:3e:dc:49:ef:12:db:
bc:eb:6a:76:a9:70:a1:dc:19:22:cc:a3:87:ea:b7:41:f3:11:
05:5b:84:32:fc:4c:09:f8:9f:56:10:b6:f6:10:b4:ec:bd:ea:
24:f1:84:90:ca:ef:b0:73:c1:5f:d8:ff:8f:ef:7c:f9:d5:5f:
16:dd:43:ec:cd:ee:df:bb:70:20:05:44:45:ac:25:cd:05:74:
c8:9b:9a:aa:ed:2f:14:10:ce:31:73:1b:9e:b1:3c:e9:76:7e:
c5:64:86:ce:eb:70:08:0d:2b:68:ad:f6:01:1c:bf:0b:aa:19:
26:84:7e:f9:77:6c:ce:19:7e:da:57:7f:90:db:9c:a8:42:36:
39:84:84:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REQxMUExMTAvBgNVBAUTKDY0QUI1RURCNTExMjYyQjczNkFGODE3NDFENEQ3MzE0
MTREMzRBNTcwHhcNMjYwODE5MDgxOTEyWhcNMjYwODI2MDgxOTEyWjAYMRYwFAYD
VQQDEw02YTg1NjcwMS04ZGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoKBnjSk0rmFW+ks+gMOo/ysIKIUfEnmPkiGN2qoZPpGQjzuT5Pm3zfyyFCge
pD/TDEnANJ25flF9QdaWobUU/XZDxOHijYx0T7iSTp8v0pSlvnfeWJYw8aC+A29a
uiPktOubFRx9pff9Xthh4ipWkiHg65Cgo+UHNBU6CYLOM1zbh42VQ4q6rCKgspvs
msJx3gpjlnhYzQtjrt1XvwM3wEhHHYfEmOi3jmPJxJkwCUeCEsA7+iGqttxiZrUP
KOjYNO5Y2xdMx9K+HF9oXY+CiaYeX58sdE/PDl4FBGvhkJPrbZb61sSxznjhECNe
nZKMPsOD1f+CQUPfZthT1k/4dwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLPiYGYu
18vcv7M5kCxdPX6rwsejMB8GA1UdIwQYMBaAFGSrXttREmK3Nq+BdB1NcxQU00pX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDExQS9BMjNGMjNCOEQw
QzAxMUYwODE1QUYwNjRDNEY5QUUwMi9aS3RlMjFFU1lyYzJyNEYwSFUxekZCVFRT
bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pLdGUyMUVTWXJjMnI0RjBIVTF6RkJUVFNsYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDExQS9BMjNGMjNCOEQwQzAxMUYwODE1QUYwNjRDNEY5QUUwMi9aS3RlMjFFU1ly
YzJyNEYwSFUxekZCVFRTbGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASx8BXDxU5DYkwh0wADJQvRMg0nRJFh42DxlkfnZjIGwIQZRqmGOGthmIkhkM
tSuLo3+i0ZKL/3g4MG4oZej0i0Y/0Daz/DmGBM0l9T14uCXtty2fxavjxRlV2VN4
a+ReJsRJqPKNIm4FPmVGomQiGo63tdymBrUUPtxJ7xLbvOtqdqlwodwZIsyjh+q3
QfMRBVuEMvxMCfifVhC29hC07L3qJPGEkMrvsHPBX9j/j+98+dVfFt1D7M3u37tw
IAVERawlzQV0yJuaqu0vFBDOMXMbnrE86XZ+xWSGzutwCA0raK32ARy/C6oZJoR+
+Xdszhl+2ld/kNucqEI2OYSEBw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:20 2026 by rpki-client