
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
File: iV-zzi-cLke5FLsqa2bHfVOXpAo.mft (raw, json)
Hash identifier: 4IALrpwkTa9jf7J6H42nfAT/LhzKOhblH7Nb7XIyxow=
Subject key identifier: CA:EE:B0:80:36:A3:95:B0:CE:8D:72:80:0B:00:98:16:67:FD:08:C2
Authority key identifier: 89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A
Certificate issuer: /CN=A91E6419/serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A
Certificate serial: 02F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
Manifest number: 02E9
Signing time: Wed 07 Oct 2026 01:21:55 +0000
Manifest this update: Wed 07 Oct 2026 01:21:54 +0000
Manifest next update: Wed 14 Oct 2026 01:21:54 +0000
Files and hashes: 1: iV-zzi-cLke5FLsqa2bHfVOXpAo.crl (hash: SXxJG7aNdVBxp+/B/bzb7jTxhkRcfsFKvtE7mSAub64=)
2: 38DEC3C04ED611ED84336740C4F9AE02.roa (hash: lsL1bzm7xgDwCWDuOlZQ/MIqVfUaWity48F6FNEzoq8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl
rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 01:21:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 753 (0x2f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6419, serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A
Validity
Not Before: Oct 7 01:21:54 2026 GMT
Not After : Oct 14 01:21:54 2026 GMT
Subject: CN=6ac59eb3-5623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:0f:2c:dc:0d:a8:a4:5d:6e:8c:40:81:5d:
c5:36:1e:ea:ec:68:fd:ab:47:85:8c:49:24:dd:ae:
71:56:d6:c9:cd:98:f1:e5:4d:6f:60:f0:a0:99:18:
ec:86:67:ed:ff:6e:6e:9f:84:4b:44:f2:10:80:6f:
2f:60:c6:ba:3b:38:13:08:ab:f7:2d:ed:ea:d0:ab:
16:a2:b6:04:59:b7:46:cc:79:54:be:a4:2b:b0:bc:
ac:d3:6f:f4:17:b3:6c:c3:b3:5f:3c:87:3f:6a:84:
bd:8f:ff:69:e5:0f:84:a1:8e:fd:03:f8:ec:66:19:
e9:77:4d:b0:2f:ad:57:62:34:7f:6b:0b:32:d6:5f:
d1:cc:fd:23:63:d5:38:b3:12:7e:ec:51:8b:d8:2f:
23:b6:38:4b:e6:41:b5:9c:68:81:bd:c3:59:fa:91:
7f:c2:c9:96:d2:e3:0b:96:3a:ef:af:15:7f:04:17:
06:73:a9:5b:a3:71:bf:c2:dd:b0:a9:76:be:82:d1:
5e:53:ec:77:7c:5c:9f:32:59:b7:c8:96:e8:b8:46:
5b:c7:2a:72:34:da:1f:e7:bc:62:be:5f:50:3e:cd:
b6:02:d4:b6:60:e6:b4:e5:94:39:15:a4:25:7d:58:
50:a3:6f:5f:43:69:2b:9c:22:99:50:f1:4f:a2:b7:
2c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EE:B0:80:36:A3:95:B0:CE:8D:72:80:0B:00:98:16:67:FD:08:C2
X509v3 Authority Key Identifier:
keyid:89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:13:5f:34:ab:24:d1:8e:4e:34:b2:8a:b7:04:be:bb:2f:65:
fd:0c:bc:a1:cd:eb:9f:9c:82:1e:06:ca:27:47:c1:4b:fe:48:
64:33:83:8b:5c:9d:50:1a:05:b2:59:0f:26:57:49:d7:a7:42:
44:d7:66:99:d1:c4:bf:d7:16:87:26:4c:f1:e1:d2:25:3d:29:
c9:8a:96:70:b6:cb:27:0e:d7:f5:f6:e6:7a:55:08:92:40:79:
9d:b3:58:06:19:41:e2:ad:a6:44:c3:07:6c:2e:0a:f6:0e:f0:
7f:cd:62:06:82:4a:bf:c3:90:00:79:97:c4:50:e7:f4:ca:ef:
57:83:31:fc:97:91:22:38:eb:7a:28:b5:f7:d0:9d:54:48:ed:
6c:9d:66:63:1a:07:84:0d:fc:eb:35:09:52:d9:46:dd:e5:aa:
ae:8d:e8:d8:64:a3:37:aa:34:6a:09:76:0c:d9:96:5c:09:89:
64:d4:6a:f3:25:8a:53:14:35:c4:b3:d0:cf:bd:65:80:6e:9b:
5e:98:d5:0c:9c:33:f2:51:64:3d:c2:14:3d:34:6b:4f:b9:a1:
79:a5:7a:13:aa:a8:49:0e:65:a1:bb:e0:11:ae:4c:a9:60:04:
ee:72:84:9f:6f:00:6e:d5:79:30:af:01:df:10:6a:05:49:08:
2d:b0:53:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTY0MTkxMTAvBgNVBAUTKDg5NUZCM0NFMkY5QzJFNDdCOTE0QkIyQTZCNjZDNzdE
NTM5N0E0MEEwHhcNMjYxMDA3MDEyMTU0WhcNMjYxMDE0MDEyMTU0WjAYMRYwFAYD
VQQDEw02YWM1OWViMy01NjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAruQPLNwNqKRdboxAgV3FNh7q7Gj9q0eFjEkk3a5xVtbJzZjx5U1vYPCgmRjs
hmft/25un4RLRPIQgG8vYMa6OzgTCKv3Le3q0KsWorYEWbdGzHlUvqQrsLys02/0
F7Nsw7NfPIc/aoS9j/9p5Q+EoY79A/jsZhnpd02wL61XYjR/awsy1l/RzP0jY9U4
sxJ+7FGL2C8jtjhL5kG1nGiBvcNZ+pF/wsmW0uMLljrvrxV/BBcGc6lbo3G/wt2w
qXa+gtFeU+x3fFyfMlm3yJbouEZbxypyNNof57xivl9QPs22AtS2YOa05ZQ5FaQl
fVhQo29fQ2krnCKZUPFPorcsNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMrusIA2
o5Wwzo1ygAsAmBZn/QjCMB8GA1UdIwQYMBaAFIlfs84vnC5HuRS7Kmtmx31Tl6QK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQxOS9GQTZFMzZDQzRF
RDMxMUVEQTVFNTMwNDBDNEY5QUUwMi9pVi16emktY0xrZTVGTHNxYTJiSGZWT1hw
QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lWLXp6aS1jTGtlNUZMc3FhMmJIZlZPWHBBby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NjQxOS9GQTZFMzZDQzRFRDMxMUVEQTVFNTMwNDBDNEY5QUUwMi9pVi16emktY0xr
ZTVGTHNxYTJiSGZWT1hwQW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfBNfNKsk0Y5ONLKKtwS+uy9l/Qy8oc3rn5yCHgbKJ0fBS/5IZDODi1ydUBoF
slkPJldJ16dCRNdmmdHEv9cWhyZM8eHSJT0pyYqWcLbLJw7X9fbmelUIkkB5nbNY
BhlB4q2mRMMHbC4K9g7wf81iBoJKv8OQAHmXxFDn9MrvV4Mx/JeRIjjreii199Cd
VEjtbJ1mYxoHhA386zUJUtlG3eWqro3o2GSjN6o0agl2DNmWXAmJZNRq8yWKUxQ1
xLPQz71lgG6bXpjVDJwz8lFkPcIUPTRrT7mheaV6E6qoSQ5lobvgEa5MqWAE7nKE
n28AbtV5MK8B3xBqBUkILbBT1w==
-----END CERTIFICATE-----
Generated at Thu Oct 8 09:44:57 2026 by rpki-client