
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF859/B74508B2442011F1930303E7A6EE528E/z0qe9ZJzCmyqFAoefLdOzVUc0m4.mft
File: z0qe9ZJzCmyqFAoefLdOzVUc0m4.mft (raw, json)
Hash identifier: 5Jpys97PPBYwR7bNNRHTYWgL9Khu1bfZJM12I+wjKPk=
Subject key identifier: 4F:EA:CD:0D:E0:A0:65:6B:25:55:7B:41:0C:F8:73:FA:1D:45:53:3A
Authority key identifier: CF:4A:9E:F5:92:73:0A:6C:AA:14:0A:1E:7C:B7:4E:CD:55:1C:D2:6E
Certificate issuer: /CN=A91DF859/serialNumber=CF4A9EF592730A6CAA140A1E7CB74ECD551CD26E
Certificate serial: 67
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/z0qe9ZJzCmyqFAoefLdOzVUc0m4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF859/B74508B2442011F1930303E7A6EE528E/z0qe9ZJzCmyqFAoefLdOzVUc0m4.mft
Manifest number: 64
Signing time: Sun 25 Oct 2026 00:01:23 +0000
Manifest this update: Sun 25 Oct 2026 00:01:22 +0000
Manifest next update: Sun 01 Nov 2026 00:01:22 +0000
Files and hashes: 1: z0qe9ZJzCmyqFAoefLdOzVUc0m4.crl (hash: 4+kUThKxASBAuNJz/ETUTKWiAEt1EIkaIehCgVQ1bVE=)
2: 496B4D269ADB11F1BF1E1EF44E11F970.roa (hash: fh/BeXR2R6tjsg0iValECUbjHi1DwLv88WZQ635Rg1A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF859/B74508B2442011F1930303E7A6EE528E/z0qe9ZJzCmyqFAoefLdOzVUc0m4.crl
rsync://rpki.apnic.net/member_repository/A91DF859/B74508B2442011F1930303E7A6EE528E/z0qe9ZJzCmyqFAoefLdOzVUc0m4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/z0qe9ZJzCmyqFAoefLdOzVUc0m4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 00:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF859, serialNumber=CF4A9EF592730A6CAA140A1E7CB74ECD551CD26E
Validity
Not Before: Oct 25 00:01:22 2026 GMT
Not After : Nov 1 00:01:22 2026 GMT
Subject: CN=6add46d3-e857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:85:82:f7:40:fb:0f:b7:f6:fa:4e:3f:1a:6d:
a3:68:57:f5:38:4d:e3:cb:d9:84:d9:f6:bf:b8:40:
b4:ff:f3:39:98:48:46:6a:17:20:4a:5a:06:3d:5c:
c0:d9:ac:f0:fc:d4:34:d6:11:66:e5:52:8f:6b:ee:
6d:84:f8:f7:24:e8:34:ab:01:7a:13:28:f9:16:24:
2f:3a:e7:16:0d:5c:21:a5:65:ef:4a:de:cb:49:4f:
05:81:fa:0b:07:5a:ec:7c:5e:b2:80:c9:41:81:19:
ba:3d:45:49:37:64:89:b7:70:40:ab:af:00:3c:65:
6f:d7:4c:b9:6c:65:eb:1a:6b:99:97:4e:a2:bb:5a:
15:f9:d8:3d:c3:e3:05:54:b0:39:36:c2:76:f6:cd:
26:14:75:e9:f5:75:42:bd:00:ad:2d:7f:3d:f9:79:
5b:10:7d:54:e4:69:c8:35:f4:9b:7f:82:d7:21:dd:
99:60:da:e8:8d:f7:dd:db:8e:36:9a:99:7d:42:6c:
f8:e6:b4:cf:f1:1e:21:4f:58:e2:c4:c9:9e:93:ec:
03:13:81:2e:2e:b1:90:5a:6b:07:ba:20:78:3c:25:
f5:d1:5c:e1:5c:35:ae:96:66:8e:46:9a:35:cd:0d:
76:5c:e9:77:be:ba:f6:00:de:28:b6:2f:f2:6f:de:
4c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EA:CD:0D:E0:A0:65:6B:25:55:7B:41:0C:F8:73:FA:1D:45:53:3A
X509v3 Authority Key Identifier:
keyid:CF:4A:9E:F5:92:73:0A:6C:AA:14:0A:1E:7C:B7:4E:CD:55:1C:D2:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF859/B74508B2442011F1930303E7A6EE528E/z0qe9ZJzCmyqFAoefLdOzVUc0m4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/z0qe9ZJzCmyqFAoefLdOzVUc0m4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF859/B74508B2442011F1930303E7A6EE528E/z0qe9ZJzCmyqFAoefLdOzVUc0m4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:dc:61:c1:1d:07:f3:de:ff:cb:e5:13:2c:5e:5e:64:c2:7c:
90:1f:f5:58:14:d7:fa:7a:4a:78:ee:01:f1:08:79:89:7b:ba:
a1:22:fd:11:5a:58:ac:56:a5:93:3c:36:58:04:e6:b0:ad:54:
7b:2e:80:75:06:e9:e7:10:ac:d0:bc:37:88:4d:14:b7:33:4f:
18:05:3b:ad:9d:b5:e0:36:21:91:2f:15:0e:5b:75:60:f6:14:
16:e8:ab:08:7f:7a:45:ea:a5:81:1d:56:80:d2:72:d9:0f:3d:
ed:bd:00:6d:e4:9b:5f:98:2d:2a:14:64:b4:3a:70:27:85:38:
8a:40:c2:8a:63:09:1e:fa:c1:82:af:51:73:4b:66:25:89:77:
0f:87:7e:76:f9:b7:13:74:ac:4a:7b:ab:5d:a4:11:32:85:ff:
9c:54:37:ce:da:d2:44:93:21:18:2d:76:98:6e:8d:8f:43:34:
47:9d:b5:01:ad:9c:f4:eb:82:20:f1:d8:5d:82:c0:0b:44:2a:
a7:52:93:79:49:3e:6a:e6:82:b1:2b:53:c7:93:62:d0:79:ed:
68:25:aa:3f:bc:13:83:80:58:90:0c:e7:af:ef:65:8a:1d:87:
12:64:35:08:c0:88:fe:87:78:c7:f4:16:81:0b:d1:49:83:0c:
c4:b4:26:fa
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
Rjg1OTExMC8GA1UEBRMoQ0Y0QTlFRjU5MjczMEE2Q0FBMTQwQTFFN0NCNzRFQ0Q1
NTFDRDI2RTAeFw0yNjEwMjUwMDAxMjJaFw0yNjExMDEwMDAxMjJaMBgxFjAUBgNV
BAMTDTZhZGQ0NmQzLWU4NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDchYL3QPsPt/b6Tj8abaNoV/U4TePL2YTZ9r+4QLT/8zmYSEZqFyBKWgY9XMDZ
rPD81DTWEWblUo9r7m2E+Pck6DSrAXoTKPkWJC865xYNXCGlZe9K3stJTwWB+gsH
Wux8XrKAyUGBGbo9RUk3ZIm3cECrrwA8ZW/XTLlsZesaa5mXTqK7WhX52D3D4wVU
sDk2wnb2zSYUden1dUK9AK0tfz35eVsQfVTkacg19Jt/gtch3Zlg2uiN993bjjaa
mX1CbPjmtM/xHiFPWOLEyZ6T7AMTgS4usZBaawe6IHg8JfXRXOFcNa6WZo5GmjXN
DXZc6Xe+uvYA3ii2L/Jv3kwBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUT+rNDeCg
ZWslVXtBDPhz+h1FUzowHwYDVR0jBBgwFoAUz0qe9ZJzCmyqFAoefLdOzVUc0m4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGODU5L0I3NDUwOEIyNDQy
MDExRjE5MzAzMDNFN0E2RUU1MjhFL3owcWU5Wkp6Q215cUZBb2VmTGRPelZVYzBt
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvejBxZTlaSnpDbXlxRkFvZWZMZE96VlVjMG00LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG
ODU5L0I3NDUwOEIyNDQyMDExRjE5MzAzMDNFN0E2RUU1MjhFL3owcWU5Wkp6Q215
cUZBb2VmTGRPelZVYzBtNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCR3GHBHQfz3v/L5RMsXl5kwnyQH/VYFNf6ekp47gHxCHmJe7qhIv0RWlisVqWT
PDZYBOawrVR7LoB1BunnEKzQvDeITRS3M08YBTutnbXgNiGRLxUOW3Vg9hQW6KsI
f3pF6qWBHVaA0nLZDz3tvQBt5JtfmC0qFGS0OnAnhTiKQMKKYwke+sGCr1FzS2Yl
iXcPh352+bcTdKxKe6tdpBEyhf+cVDfO2tJEkyEYLXaYbo2PQzRHnbUBrZz064Ig
8dhdgsALRCqnUpN5ST5q5oKxK1PHk2LQee1oJao/vBODgFiQDOev72WKHYcSZDUI
wIj+h3jH9BaBC9FJgwzEtCb6
-----END CERTIFICATE-----
Generated at Mon Oct 26 21:04:52 2026 by rpki-client