
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
File: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft (raw, json)
Hash identifier: 3B7viJVdwcYH5Rl28XMxAfOz4cUDxdqhl5VKQFm8SGw=
Subject key identifier: 58:C4:14:79:76:3B:85:B4:DC:54:EF:D1:E7:09:A8:5A:3C:36:ED:60
Authority key identifier: 66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3
Certificate issuer: /CN=A91EB7BD/serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3
Certificate serial: 128A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
Manifest number: 127F
Signing time: Thu 08 Oct 2026 17:09:20 +0000
Manifest this update: Thu 08 Oct 2026 17:09:20 +0000
Manifest next update: Thu 15 Oct 2026 17:09:20 +0000
Files and hashes: 1: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl (hash: PxG3KduYmqGsmg0/4lae170LRynjVNrhSiZEXyIgRpw=)
2: 84121C245CE111E9824BCF76C4F9AE02.roa (hash: 6P0QZul7deP/5azgpjbHdDKzo/8UCrH1J+Uoz59/kWw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl
rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4746 (0x128a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB7BD, serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3
Validity
Not Before: Oct 8 17:09:20 2026 GMT
Not After : Oct 15 17:09:20 2026 GMT
Subject: CN=6ac7ce40-4617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:a3:1c:a9:4f:e1:69:b6:53:ca:54:28:da:
26:02:71:15:96:0c:7d:b7:87:12:b6:a8:99:ea:ed:
0a:c6:17:9e:24:ef:54:db:ba:51:fe:2c:77:93:d8:
94:a9:05:42:07:cd:2f:69:fb:e4:1f:a4:a2:d3:3d:
ad:ac:13:48:a1:fd:e8:1e:0c:b4:93:1b:b2:32:90:
19:d6:33:c9:fd:f2:23:09:89:83:73:c3:95:87:a3:
e2:1e:bc:1e:1a:04:8c:24:15:61:fc:c0:18:71:28:
3b:b9:87:0f:e6:21:8b:3b:08:cb:fd:87:58:64:4b:
59:00:1a:5d:6e:10:1d:8c:9e:de:a6:5c:a4:46:7e:
3a:f0:52:42:09:d8:93:ac:71:2b:2a:24:fe:14:6e:
ec:8d:a3:32:62:39:dd:b0:01:13:9a:8f:0e:e6:fb:
16:9f:92:f3:19:04:b9:22:c0:a5:0c:10:e9:2b:75:
e8:5d:8b:00:61:22:e5:46:f1:16:ef:71:9a:d8:fc:
af:cd:eb:fd:93:fb:cc:40:aa:66:da:a4:43:db:66:
16:d3:3c:70:83:46:3f:c5:71:90:9e:35:02:55:fb:
12:94:b5:85:58:90:c3:03:9a:6f:ff:2a:08:1d:f5:
99:ad:63:5b:ff:85:c2:93:1f:99:08:f3:4a:21:c3:
6c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C4:14:79:76:3B:85:B4:DC:54:EF:D1:E7:09:A8:5A:3C:36:ED:60
X509v3 Authority Key Identifier:
keyid:66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1e:bf:ab:ec:6e:6c:22:40:c1:b9:9d:2b:44:15:12:c8:c5:
c2:f9:4f:35:90:27:54:5f:b9:2a:b7:5e:0f:60:17:33:8d:fd:
16:7f:73:31:09:69:dc:69:c4:1a:0a:2b:6f:be:ec:39:00:fe:
3d:d5:bc:f5:5a:3e:d7:23:89:39:29:d0:ba:75:96:86:bc:9f:
57:90:ff:e3:ab:e4:cd:1c:d1:c8:8a:17:70:96:9f:c5:00:74:
b8:88:9a:61:07:e6:45:0a:6a:ff:c8:7b:cd:b0:78:68:de:05:
e7:d1:a1:38:b8:c5:c2:d0:ec:26:0b:25:e6:51:f6:1c:61:f1:
62:83:9c:d9:b0:b1:07:81:b0:fc:bd:de:43:5e:b6:18:08:1b:
0a:35:77:86:35:0f:06:82:63:74:75:95:3b:54:e1:e2:a9:35:
f8:2c:46:34:e7:bc:26:5c:75:3f:8c:91:30:c3:4a:32:bf:9d:
72:ba:ac:27:ef:a9:1e:9d:b9:51:fc:88:d4:a5:ab:b8:b1:dc:
61:a4:5a:88:96:3a:cc:f3:ef:b1:cf:dc:f7:c9:b2:cb:0d:23:
27:c6:db:d8:31:25:24:d9:b2:3f:bd:46:36:c1:a0:05:6d:03:
7f:8b:32:da:84:7e:36:39:0e:7b:57:97:0f:7f:ca:b6:68:cb:
bc:e2:aa:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUI3QkQxMTAvBgNVBAUTKDY2MDM0RDIxMzZDNDNCMTQzODIxNTdFMTJCQjc0QjJD
QkE5RDk3QTMwHhcNMjYxMDA4MTcwOTIwWhcNMjYxMDE1MTcwOTIwWjAYMRYwFAYD
VQQDEw02YWM3Y2U0MC00NjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxb2jHKlP4Wm2U8pUKNomAnEVlgx9t4cStqiZ6u0KxheeJO9U27pR/ix3k9iU
qQVCB80vafvkH6Si0z2trBNIof3oHgy0kxuyMpAZ1jPJ/fIjCYmDc8OVh6PiHrwe
GgSMJBVh/MAYcSg7uYcP5iGLOwjL/YdYZEtZABpdbhAdjJ7eplykRn468FJCCdiT
rHErKiT+FG7sjaMyYjndsAETmo8O5vsWn5LzGQS5IsClDBDpK3XoXYsAYSLlRvEW
73Ga2Pyvzev9k/vMQKpm2qRD22YW0zxwg0Y/xXGQnjUCVfsSlLWFWJDDA5pv/yoI
HfWZrWNb/4XCkx+ZCPNKIcNsSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFjEFHl2
O4W03FTv0ecJqFo8Nu1gMB8GA1UdIwQYMBaAFGYDTSE2xDsUOCFX4Su3Syy6nZej
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjdCRC80MzE3Mjc4Q0ZF
OTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94UTRJVmZoSzdkTExMcWRs
Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pnTk5JVGJFT3hRNElWZmhLN2RMTExxZGw2TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QjdCRC80MzE3Mjc4Q0ZFOTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94
UTRJVmZoSzdkTExMcWRsNk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATx6/q+xubCJAwbmdK0QVEsjFwvlPNZAnVF+5KrdeD2AXM439Fn9zMQlp3GnE
Ggorb77sOQD+PdW89Vo+1yOJOSnQunWWhryfV5D/46vkzRzRyIoXcJafxQB0uIia
YQfmRQpq/8h7zbB4aN4F59GhOLjFwtDsJgsl5lH2HGHxYoOc2bCxB4Gw/L3eQ162
GAgbCjV3hjUPBoJjdHWVO1Th4qk1+CxGNOe8Jlx1P4yRMMNKMr+dcrqsJ++pHp25
UfyI1KWruLHcYaRaiJY6zPPvsc/c98myyw0jJ8bb2DElJNmyP71GNsGgBW0Df4sy
2oR+NjkOe1eXD3/KtmjLvOKqkw==
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:04:57 2026 by rpki-client