
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
File: iV-zzi-cLke5FLsqa2bHfVOXpAo.mft (raw, json)
Hash identifier: hUdCLv+Z2Ra5IB+EOPUcTxvYfB6Jp4+XG6hc5UJyJEI=
Subject key identifier: CF:38:EA:D6:40:F2:C1:EF:5B:00:AF:B7:6E:B4:11:97:59:08:2D:C7
Authority key identifier: 89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A
Certificate issuer: /CN=A91E6419/serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A
Certificate serial: 02C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
Manifest number: 02B9
Signing time: Sun 05 Jul 2026 01:52:21 +0000
Manifest this update: Sun 05 Jul 2026 01:52:21 +0000
Manifest next update: Sun 12 Jul 2026 01:52:21 +0000
Files and hashes: 1: iV-zzi-cLke5FLsqa2bHfVOXpAo.crl (hash: BPxB8PZffst7HZ4MowYiwQNpzYvOUqpfyb+z3GcZlGk=)
2: 38DEC3C04ED611ED84336740C4F9AE02.roa (hash: lsL1bzm7xgDwCWDuOlZQ/MIqVfUaWity48F6FNEzoq8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl
rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 01:52:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 705 (0x2c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6419, serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A
Validity
Not Before: Jul 5 01:52:21 2026 GMT
Not After : Jul 12 01:52:21 2026 GMT
Subject: CN=6a49b8d5-4ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:af:96:1e:fa:f6:ad:b4:67:3e:37:c1:86:e6:
04:65:58:2d:fe:14:90:72:05:62:2c:60:54:ff:aa:
64:65:6d:44:50:65:f8:e3:02:33:d9:bc:c3:6d:dc:
72:ac:d1:e1:85:d9:43:93:9e:d3:70:14:dd:d2:89:
9b:d6:d0:17:b1:45:67:d1:89:63:c5:cb:50:a7:5a:
ac:a5:7f:ce:e8:c4:12:36:9d:06:b5:c2:4b:c5:0c:
10:03:71:32:8a:96:64:a9:91:19:3e:ec:4e:39:65:
79:3b:3b:c2:ae:71:4c:3f:06:56:1f:12:43:d4:6d:
47:3d:36:e6:4d:27:e0:79:db:71:e8:ae:5c:fd:75:
ff:6e:4e:7f:a5:c1:fb:6f:37:53:b7:66:a0:6e:52:
bd:5e:50:66:e8:d6:a7:7c:32:b6:1e:94:d8:04:cf:
1e:f3:a9:ea:da:56:0a:aa:5b:81:6e:53:c4:61:69:
e2:6b:e6:75:38:a6:33:60:45:f9:cf:5d:52:26:0c:
56:d8:c3:89:2f:15:9e:e1:a9:9c:4d:0f:b2:e0:d7:
d0:59:aa:c8:33:7e:93:71:fc:d6:5a:68:c0:0a:8a:
6d:aa:56:4d:7c:3a:09:57:f3:86:05:69:a9:07:94:
26:38:77:47:1f:49:88:b3:a8:0e:33:cb:67:1a:f1:
8d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:38:EA:D6:40:F2:C1:EF:5B:00:AF:B7:6E:B4:11:97:59:08:2D:C7
X509v3 Authority Key Identifier:
keyid:89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4a:4b:7a:9d:77:38:c0:c8:51:e0:28:d0:85:14:91:2e:b5:
27:3f:af:af:ae:ee:35:08:1d:1f:8d:e5:c3:d5:e2:b1:1d:36:
6c:a9:5d:8d:0b:8f:cd:7e:df:aa:e8:e7:5a:ea:a7:a8:44:60:
e5:28:b1:f9:dc:ee:2f:40:bc:2e:45:48:48:15:a9:6e:f2:18:
2b:66:6f:87:8a:c9:c8:f6:ab:b0:92:8d:ae:82:37:b9:b8:26:
df:52:4f:2c:ed:23:47:c0:91:78:84:6f:a5:6e:2c:4e:0a:52:
21:35:a4:38:41:f7:84:6b:95:c5:9f:82:7a:4f:f3:4d:f0:d8:
b9:91:b9:04:a4:fb:ac:85:45:07:18:00:9a:d4:8d:ca:04:88:
5e:ca:f3:07:57:04:ca:7f:0b:35:4a:e7:e5:7f:65:ad:39:63:
64:76:63:5b:26:7b:0b:0d:c0:68:39:06:8f:60:a2:97:5a:cd:
c3:55:67:6e:ee:37:7f:a7:b0:9a:7d:98:70:d3:3e:8e:3f:ba:
d3:c9:d9:cf:4f:ab:74:8f:9a:68:bb:2a:74:59:7c:64:ce:d2:
b9:c5:b3:92:fd:7a:34:3a:36:ed:33:40:f8:00:eb:c1:d0:dd:
19:4a:a1:f9:90:6c:92:ef:d1:79:e0:f7:9e:de:5d:fd:cc:19:
3a:f3:d8:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTY0MTkxMTAvBgNVBAUTKDg5NUZCM0NFMkY5QzJFNDdCOTE0QkIyQTZCNjZDNzdE
NTM5N0E0MEEwHhcNMjYwNzA1MDE1MjIxWhcNMjYwNzEyMDE1MjIxWjAYMRYwFAYD
VQQDEw02YTQ5YjhkNS00YWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9a+WHvr2rbRnPjfBhuYEZVgt/hSQcgViLGBU/6pkZW1EUGX44wIz2bzDbdxy
rNHhhdlDk57TcBTd0omb1tAXsUVn0YljxctQp1qspX/O6MQSNp0GtcJLxQwQA3Ey
ipZkqZEZPuxOOWV5OzvCrnFMPwZWHxJD1G1HPTbmTSfgedtx6K5c/XX/bk5/pcH7
bzdTt2agblK9XlBm6NanfDK2HpTYBM8e86nq2lYKqluBblPEYWnia+Z1OKYzYEX5
z11SJgxW2MOJLxWe4amcTQ+y4NfQWarIM36TcfzWWmjACoptqlZNfDoJV/OGBWmp
B5QmOHdHH0mIs6gOM8tnGvGNrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM846tZA
8sHvWwCvt260EZdZCC3HMB8GA1UdIwQYMBaAFIlfs84vnC5HuRS7Kmtmx31Tl6QK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQxOS9GQTZFMzZDQzRF
RDMxMUVEQTVFNTMwNDBDNEY5QUUwMi9pVi16emktY0xrZTVGTHNxYTJiSGZWT1hw
QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lWLXp6aS1jTGtlNUZMc3FhMmJIZlZPWHBBby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NjQxOS9GQTZFMzZDQzRFRDMxMUVEQTVFNTMwNDBDNEY5QUUwMi9pVi16emktY0xr
ZTVGTHNxYTJiSGZWT1hwQW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHUpLep13OMDIUeAo0IUUkS61Jz+vr67uNQgdH43lw9XisR02bKldjQuPzX7f
qujnWuqnqERg5Six+dzuL0C8LkVISBWpbvIYK2Zvh4rJyParsJKNroI3ubgm31JP
LO0jR8CReIRvpW4sTgpSITWkOEH3hGuVxZ+Cek/zTfDYuZG5BKT7rIVFBxgAmtSN
ygSIXsrzB1cEyn8LNUrn5X9lrTljZHZjWyZ7Cw3AaDkGj2Cil1rNw1Vnbu43f6ew
mn2YcNM+jj+608nZz0+rdI+aaLsqdFl8ZM7SucWzkv16NDo27TNA+ADrwdDdGUqh
+ZBsku/ReeD3nt5d/cwZOvPYbg==
-----END CERTIFICATE-----
Generated at Sun Jul 5 07:54:39 2026 by rpki-client