
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
File: zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft (raw, json)
Hash identifier: s18xsIO7AzEvFsiGc/Sk0/bZv9IdRDpRMakQAGhluKc=
Subject key identifier: 96:7E:28:44:47:4E:C2:08:11:C8:08:DD:3A:C2:6B:86:06:96:28:59
Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14
Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
Certificate serial: 082B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
Manifest number: 07BE
Signing time: Tue 06 Oct 2026 21:56:51 +0000
Manifest this update: Tue 06 Oct 2026 21:56:50 +0000
Manifest next update: Tue 13 Oct 2026 21:56:50 +0000
Files and hashes: 1: zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl (hash: vK4VmmcLDRvJ9KaFfjWgo71webVXKhIdfl8uSKKEhPk=)
2: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (hash: td9+M54k5hj2c/thTOFATgj6CforEojuE42TknTzpYk=)
3: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (hash: 6CI5SC55Jio94/KfoS9G/a4W782wVeKHBLf24nIGCPM=)
4: 90BBD1B6884C11EB88489B75C4F9AE02.roa (hash: H5yiTmZmqNzfgLkNUSshTejgEC9QW5DzJpuCaDVZPHo=)
5: B23B879EE89C11ECA30FD20EC4F9AE02.roa (hash: x07pQS6pEgJZLrxI+4SzaUGa4YwQ96qN1jF+DrtdcJY=)
6: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (hash: Ro74anOTti8QG6vyjwS8aXc9bfV+QmfdwMUJorqRPP8=)
7: 337DA192C3FC11EF8C3B0B5DC4F9AE02.roa (hash: jdZ9eU0HcGePAnaPpQJ/8+6uq872C01hZ+qnBvUiNlQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl
rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 21:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2091 (0x82b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
Validity
Not Before: Oct 6 21:56:50 2026 GMT
Not After : Oct 13 21:56:50 2026 GMT
Subject: CN=6ac56ea3-eb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ec:94:8e:a5:0e:57:3f:45:f8:98:bd:76:57:
4b:8d:3c:9a:49:89:8c:7e:4d:38:44:67:6e:7b:0d:
b5:92:e8:68:8a:7e:9c:2f:f7:a2:04:a5:6b:09:65:
86:ec:04:aa:f3:63:9f:d3:cf:3c:34:c5:00:b0:67:
a6:74:0c:de:d7:93:be:dd:d0:d7:88:4e:13:8e:13:
01:c3:14:9b:a8:ad:be:c7:58:7f:68:5d:bb:e5:68:
83:ff:76:f7:6c:23:d8:bc:48:14:07:86:da:ec:88:
1b:ac:fa:9e:cf:f6:4e:64:50:12:9f:32:c7:19:28:
23:33:5d:84:c4:fb:27:aa:cb:1b:57:31:4f:0e:6f:
8b:d2:59:ff:a4:3f:ff:d2:41:ee:5e:d6:46:3d:08:
d3:9b:78:b9:ee:f6:83:f3:9b:e6:6a:bd:a4:f4:4f:
d9:0b:e5:e9:4f:22:99:ce:d2:e9:3d:b3:8e:7d:80:
03:56:43:46:43:9c:8b:ef:cd:26:c4:c9:8d:3b:d4:
66:fb:bd:58:77:95:5c:ba:92:85:af:d7:f5:d5:a2:
50:43:14:f9:1d:0f:38:71:45:e3:25:1f:33:4a:10:
fb:63:63:8e:a4:d1:21:97:8b:f8:27:18:8d:ec:57:
64:69:60:c9:7d:d6:be:94:48:d1:60:49:ce:ae:22:
42:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7E:28:44:47:4E:C2:08:11:C8:08:DD:3A:C2:6B:86:06:96:28:59
X509v3 Authority Key Identifier:
keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:09:f7:40:36:fc:7f:f9:49:ca:fe:f2:a2:ac:0c:dd:a9:3b:
b3:f4:18:0c:20:a7:2d:50:be:30:e0:ff:91:8b:9c:2d:55:4a:
4f:c8:35:bc:e6:f8:9d:10:74:8e:65:a7:a2:a1:0c:61:c1:fb:
bf:c3:12:95:9f:70:e5:c2:e1:d6:34:f6:94:cc:f2:da:a8:4e:
f5:bd:de:02:a1:d2:cf:94:af:dc:2e:b4:c6:c8:66:b4:11:23:
a5:bc:ed:68:38:65:5f:8f:5c:01:cf:22:f2:76:ce:e0:09:2d:
42:76:99:08:ac:b2:2e:dd:6a:f2:53:35:79:c5:b9:a6:95:ee:
8e:93:1e:a3:43:8b:21:22:5b:ad:dd:3d:7c:2d:cf:ac:1a:5a:
1c:0d:4e:16:7b:da:94:cf:2a:aa:71:2d:29:3f:05:e2:2b:d0:
90:c3:95:27:92:75:75:76:ec:f6:6d:0a:14:dc:84:d0:24:c4:
bf:be:7f:92:bc:a6:f0:a4:26:b0:c6:1e:b4:4e:a2:7a:60:2e:
d1:f7:90:0a:75:d2:6d:a9:ca:4a:37:ea:9f:d9:2a:5a:17:e4:
78:28:11:03:be:13:cb:be:c5:17:83:24:35:84:32:4f:5d:e8:
5e:ae:4e:ab:3d:08:6f:e5:4f:7d:f7:17:2a:75:f1:b1:ce:4c:
96:12:7a:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjhBNDExMTAvBgNVBAUTKENERkVERjJENDExQzg0QzM2REMzQkI2QTAyRkRGMUFD
NTBCNUJBMTQwHhcNMjYxMDA2MjE1NjUwWhcNMjYxMDEzMjE1NjUwWjAYMRYwFAYD
VQQDEw02YWM1NmVhMy1lYjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp+yUjqUOVz9F+Ji9dldLjTyaSYmMfk04RGduew21kuhoin6cL/eiBKVrCWWG
7ASq82Of0888NMUAsGemdAze15O+3dDXiE4TjhMBwxSbqK2+x1h/aF275WiD/3b3
bCPYvEgUB4ba7IgbrPqez/ZOZFASnzLHGSgjM12ExPsnqssbVzFPDm+L0ln/pD//
0kHuXtZGPQjTm3i57vaD85vmar2k9E/ZC+XpTyKZztLpPbOOfYADVkNGQ5yL780m
xMmNO9Rm+71Yd5VcupKFr9f11aJQQxT5HQ84cUXjJR8zShD7Y2OOpNEhl4v4JxiN
7FdkaWDJfda+lEjRYEnOriJC0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJZ+KERH
TsIIEcgI3TrCa4YGlihZMB8GA1UdIwQYMBaAFM3+3y1BHITDbcO7agL98axQtboU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0MS81NTQxNDBERTg3
QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hNTnR3N3RxQXYzeHJGQzF1
aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pmN2ZMVUVjaE1OdHc3dHFBdjN4ckZDMXVoUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OEE0MS81NTQxNDBERTg3QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hN
TnR3N3RxQXYzeHJGQzF1aFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlgn3QDb8f/lJyv7yoqwM3ak7s/QYDCCnLVC+MOD/kYucLVVKT8g1vOb4nRB0
jmWnoqEMYcH7v8MSlZ9w5cLh1jT2lMzy2qhO9b3eAqHSz5Sv3C60xshmtBEjpbzt
aDhlX49cAc8i8nbO4AktQnaZCKyyLt1q8lM1ecW5ppXujpMeo0OLISJbrd09fC3P
rBpaHA1OFnvalM8qqnEtKT8F4ivQkMOVJ5J1dXbs9m0KFNyE0CTEv75/krym8KQm
sMYetE6iemAu0feQCnXSbanKSjfqn9kqWhfkeCgRA74Ty77FF4MkNYQyT13oXq5O
qz0Ib+VPffcXKnXxsc5MlhJ64Q==
-----END CERTIFICATE-----
Generated at Thu Oct 8 19:51:41 2026 by rpki-client