
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft
File: zlgHMAQJCIdOtirydgUp51w9XGg.mft (raw, json)
Hash identifier: 0GDeRD0CzvKs79zUFrqjsyFROgf4wV1fWTiBzFIH89A=
Subject key identifier: DF:FC:18:E8:09:96:52:8D:74:AE:FD:73:E8:4A:15:5D:F2:C1:D1:F3
Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68
Certificate issuer: /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68
Certificate serial: 09C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft
Manifest number: 09B2
Signing time: Thu 16 Jul 2026 20:12:24 +0000
Manifest this update: Thu 16 Jul 2026 20:12:23 +0000
Manifest next update: Thu 23 Jul 2026 20:12:23 +0000
Files and hashes: 1: zlgHMAQJCIdOtirydgUp51w9XGg.crl (hash: IY8Hsrwn4qr4kVukBH47yr591w+ziUoE+TFvrf3rUK8=)
2: D3ECF4B8E61D11EBB92C167BC4F9AE02.roa (hash: JpJW44EKjdDGS9i2UbNxoq47VGQn3OM7oBb7lk+F9fo=)
3: 8698CD28A42211EB91621734C4F9AE02.roa (hash: QYOZ1apbmHEgFA/KTyiwZS4fSNem6E5RLUuLMFBIYIM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl
rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 20:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2503 (0x9c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E89CD, serialNumber=CE580730040908874EB62AF2760529E75C3D5C68
Validity
Not Before: Jul 16 20:12:23 2026 GMT
Not After : Jul 23 20:12:23 2026 GMT
Subject: CN=6a593b28-e7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:26:8a:a3:ac:98:38:36:7b:83:0f:ba:c0:5b:
52:59:c6:84:71:6b:83:f1:6a:16:c8:af:e8:bb:7c:
bb:23:bd:86:3a:37:f1:0f:0c:d5:30:02:6b:95:f8:
ed:f3:7a:5b:e5:51:d8:94:e1:a3:da:a4:6c:1b:74:
1b:a8:5a:b6:a5:ae:e5:2b:b7:87:db:eb:65:2b:67:
1f:91:47:e0:72:1a:da:b6:e5:01:ca:1a:fd:18:c9:
27:e0:23:73:70:d2:fc:ae:b9:a5:74:8a:70:53:74:
e5:5b:9a:01:18:3a:8f:8d:d2:a8:d1:a6:34:99:07:
91:7f:e8:32:81:db:38:9b:34:77:7c:f5:f7:c8:10:
9e:96:47:3c:f3:43:37:b2:0b:74:b7:d8:88:bc:b8:
1a:02:79:b0:12:49:f8:e0:1f:31:36:80:dc:69:44:
96:04:69:84:7c:c5:7b:3d:09:72:c2:2a:59:6d:10:
b1:cb:f8:da:54:8d:9e:c9:52:32:a7:71:ef:94:41:
09:49:57:1a:9b:70:e7:03:01:63:b6:0f:f9:e8:c7:
35:f8:a8:51:96:4f:98:7e:5f:3d:c0:d2:3a:a8:5d:
e5:51:ff:62:a4:f5:d4:75:f2:2d:30:03:bb:fe:f3:
43:fc:d1:15:de:51:34:1e:61:5e:ec:9e:d9:21:28:
e0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FC:18:E8:09:96:52:8D:74:AE:FD:73:E8:4A:15:5D:F2:C1:D1:F3
X509v3 Authority Key Identifier:
keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:e2:13:3d:78:13:6f:b3:a0:88:a0:4e:8a:c7:e0:84:46:ca:
d8:82:73:be:29:0a:0f:6c:97:fa:ca:14:42:d6:58:45:d6:67:
3b:81:dd:d4:39:6c:e6:69:2f:12:dd:0d:8e:69:ec:79:b9:77:
2f:eb:47:0a:ee:12:68:9d:b2:8a:63:dd:b4:1c:02:b5:4e:5b:
63:87:7c:75:72:76:c4:ab:dc:1f:1f:ec:f0:09:4a:58:bf:e7:
f3:69:7c:6a:83:c1:f8:89:8e:e8:de:ef:c4:8d:5f:01:bc:5a:
d4:35:bf:c3:3e:7e:b1:56:a8:0c:f3:af:f1:d8:c6:99:2c:bd:
50:a5:bb:89:d2:ec:5a:67:24:c6:b8:23:47:3e:3f:48:ab:22:
ba:5b:4d:ff:eb:a9:a2:13:b4:56:cd:09:ef:96:bd:e3:0d:31:
1d:b5:12:20:08:0e:ed:e4:b4:1c:97:27:7e:b6:6b:d4:c0:93:
45:76:24:51:40:e1:3f:1c:70:e1:6c:6a:02:1f:a9:61:58:9b:
5a:10:84:9a:e6:c2:32:02:f2:b6:7a:84:85:12:eb:32:02:7a:
31:69:83:14:d8:ad:dc:ba:05:c8:e0:a6:43:a2:07:11:ca:9a:
cf:d4:4d:1e:20:d2:e7:32:f9:21:83:3a:d8:22:33:16:35:07:
0d:97:91:68
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTg5Q0QxMTAvBgNVBAUTKENFNTgwNzMwMDQwOTA4ODc0RUI2MkFGMjc2MDUyOUU3
NUMzRDVDNjgwHhcNMjYwNzE2MjAxMjIzWhcNMjYwNzIzMjAxMjIzWjAYMRYwFAYD
VQQDEw02YTU5M2IyOC1lN2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7SaKo6yYODZ7gw+6wFtSWcaEcWuD8WoWyK/ou3y7I72GOjfxDwzVMAJrlfjt
83pb5VHYlOGj2qRsG3QbqFq2pa7lK7eH2+tlK2cfkUfgchratuUByhr9GMkn4CNz
cNL8rrmldIpwU3TlW5oBGDqPjdKo0aY0mQeRf+gygds4mzR3fPX3yBCelkc880M3
sgt0t9iIvLgaAnmwEkn44B8xNoDcaUSWBGmEfMV7PQlywipZbRCxy/jaVI2eyVIy
p3HvlEEJSVcam3DnAwFjtg/56Mc1+KhRlk+Yfl89wNI6qF3lUf9ipPXUdfItMAO7
/vND/NEV3lE0HmFe7J7ZISjgdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN/8GOgJ
llKNdK79c+hKFV3ywdHzMB8GA1UdIwQYMBaAFM5YBzAECQiHTrYq8nYFKedcPVxo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlDRC8zQzBENEExNkIw
NTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJZE90aXJ5ZGdVcDUxdzlY
R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3psZ0hNQVFKQ0lkT3RpcnlkZ1VwNTF3OVhHZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODlDRC8zQzBENEExNkIwNTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJ
ZE90aXJ5ZGdVcDUxdzlYR2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAReITPXgTb7OgiKBOisfghEbK2IJzvikKD2yX+soUQtZYRdZnO4Hd1Dls5mkv
Et0Njmnsebl3L+tHCu4SaJ2yimPdtBwCtU5bY4d8dXJ2xKvcHx/s8AlKWL/n82l8
aoPB+ImO6N7vxI1fAbxa1DW/wz5+sVaoDPOv8djGmSy9UKW7idLsWmckxrgjRz4/
SKsiultN/+upohO0Vs0J75a94w0xHbUSIAgO7eS0HJcnfrZr1MCTRXYkUUDhPxxw
4WxqAh+pYVibWhCEmubCMgLytnqEhRLrMgJ6MWmDFNit3LoFyOCmQ6IHEcqaz9RN
HiDS5zL5IYM62CIzFjUHDZeRaA==
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:58:27 2026 by rpki-client