
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft
File: zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft (raw, json)
Hash identifier: XMz/JzS/mSudx4EbjK644GvAxYkaWQ5xv8Hlka/kua4=
Subject key identifier: 2D:6C:17:AF:22:7D:D3:1C:DF:AB:31:62:E2:7B:F6:95:0B:96:B2:08
Authority key identifier: CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94
Certificate issuer: /CN=A911E93B/serialNumber=CDF6E5654435B3C84DFA10B9BC8710E9EBB0D594
Certificate serial: 4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft
Manifest number: 4B
Signing time: Wed 25 Mar 2026 07:30:55 +0000
Manifest this update: Wed 25 Mar 2026 07:30:55 +0000
Manifest next update: Wed 01 Apr 2026 07:30:55 +0000
Files and hashes: 1: zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl (hash: k9oJSh1Tohn8WTNraGqA0mxQY68nM6o1KCDnIo7g/SU=)
2: DEED8FA0BF0111F0A0DE3D62C4F9AE02.roa (hash: jnfPIPnbj8UH8ywNxN8KKwG7Kyd3mOWwDkCemwVHNFc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl
rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E93B, serialNumber=CDF6E5654435B3C84DFA10B9BC8710E9EBB0D594
Validity
Not Before: Mar 25 07:30:55 2026 GMT
Not After : Apr 1 07:30:55 2026 GMT
Subject: CN=69c38f2f-d1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e3:f0:93:aa:eb:ae:29:0a:6a:cd:6e:95:3f:
cb:46:e9:cf:46:d5:50:9c:9a:63:60:c0:c6:f2:9e:
ae:ad:23:bf:3d:63:c2:67:e5:58:db:a0:3a:4e:71:
66:59:88:07:3b:9b:bd:bc:23:d0:b4:7d:a6:d5:25:
62:50:e9:16:a9:29:fc:c3:de:8f:eb:3f:a2:4b:97:
95:76:f1:75:65:fe:23:2f:b1:68:3c:3b:45:c1:6f:
f8:45:5c:30:67:53:1f:73:25:34:f0:5d:31:05:a2:
9d:f3:83:a0:d4:fc:89:2b:a0:29:47:c3:e0:8d:30:
fc:2c:3d:dd:e8:dc:42:ca:94:71:cf:f1:b8:d5:a9:
5b:33:ef:ef:29:66:35:9d:4c:a9:e7:66:57:ea:a8:
4f:c9:1a:46:13:e5:8e:96:20:1a:55:16:ae:44:0c:
d9:13:dd:b5:44:5a:e8:a5:3c:dd:14:0e:26:d0:1e:
27:8c:72:ef:9e:17:e4:c5:e7:11:23:2d:5c:33:6c:
57:d9:7e:a8:87:a5:3d:34:67:fd:19:53:04:fc:a3:
3a:d2:3d:67:4a:14:e2:05:fe:ab:a2:e9:ed:66:f3:
c8:f6:86:4e:eb:2c:e0:ad:d5:e3:a7:30:28:b0:1a:
42:f2:a6:31:d4:c5:5e:51:e1:1c:fd:e5:ae:e2:e1:
73:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6C:17:AF:22:7D:D3:1C:DF:AB:31:62:E2:7B:F6:95:0B:96:B2:08
X509v3 Authority Key Identifier:
keyid:CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:42:9b:2f:c3:c4:ad:e2:a4:a1:60:0d:0d:7f:e4:8c:f7:30:
d8:ea:f5:49:36:be:b8:fa:de:ca:02:a0:74:16:83:c3:bf:99:
70:7c:25:06:e2:13:61:c0:26:de:20:32:32:c2:bf:1e:cd:55:
18:b5:f3:98:e0:25:ef:1d:51:a1:be:5a:d8:0a:b9:9b:fc:ed:
12:a9:c9:c8:ad:05:17:73:2f:09:05:82:d5:57:b8:a5:49:8d:
71:ea:22:f8:a1:e7:21:06:34:05:cd:91:d4:2a:9c:36:ed:03:
2b:49:fc:18:98:1e:38:38:8d:27:8d:72:41:74:1e:94:50:ba:
c9:f0:a1:0b:d2:89:28:a2:94:ae:e7:44:db:bd:1c:21:9d:4f:
de:ff:f3:18:78:41:2c:aa:fe:27:34:ad:f1:1a:d7:25:a9:f2:
56:ab:59:3d:7e:b4:4a:ac:b0:82:e7:7d:9b:ba:a3:68:dc:de:
a4:f3:f9:b8:ee:bc:f9:4d:ec:95:90:07:f1:94:29:7a:c1:35:
a0:bb:83:ff:89:b9:0c:26:04:27:d3:1f:7f:f8:e4:bb:76:9c:
e7:c0:77:11:8f:e7:bd:94:b8:c8:8e:27:c3:13:ad:6b:f2:d2:
12:4c:97:03:b1:51:11:10:e3:7b:76:2c:16:d9:ad:41:3b:2a:
73:46:34:54
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
RTkzQjExMC8GA1UEBRMoQ0RGNkU1NjU0NDM1QjNDODRERkExMEI5QkM4NzEwRTlF
QkIwRDU5NDAeFw0yNjAzMjUwNzMwNTVaFw0yNjA0MDEwNzMwNTVaMBgxFjAUBgNV
BAMTDTY5YzM4ZjJmLWQxYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDA4/CTquuuKQpqzW6VP8tG6c9G1VCcmmNgwMbynq6tI789Y8Jn5VjboDpOcWZZ
iAc7m728I9C0fabVJWJQ6RapKfzD3o/rP6JLl5V28XVl/iMvsWg8O0XBb/hFXDBn
Ux9zJTTwXTEFop3zg6DU/IkroClHw+CNMPwsPd3o3ELKlHHP8bjVqVsz7+8pZjWd
TKnnZlfqqE/JGkYT5Y6WIBpVFq5EDNkT3bVEWuilPN0UDibQHieMcu+eF+TF5xEj
LVwzbFfZfqiHpT00Z/0ZUwT8ozrSPWdKFOIF/qui6e1m88j2hk7rLOCt1eOnMCiw
GkLypjHUxV5R4Rz95a7i4XPPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULWwXryJ9
0xzfqzFi4nv2lQuWsggwHwYDVR0jBBgwFoAUzfblZUQ1s8hN+hC5vIcQ6euw1ZQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFOTNCLzdEQkFEMUVFQkYw
MDExRjBCQ0MxNUQ1REM0RjlBRTAyL3pmYmxaVVExczhoTi1oQzV2SWNRNmV1dzFa
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvemZibFpVUTFzOGhOLWhDNXZJY1E2ZXV3MVpRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF
OTNCLzdEQkFEMUVFQkYwMDExRjBCQ0MxNUQ1REM0RjlBRTAyL3pmYmxaVVExczho
Ti1oQzV2SWNRNmV1dzFaUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCrQpsvw8St4qShYA0Nf+SM9zDY6vVJNr64+t7KAqB0FoPDv5lwfCUG4hNhwCbe
IDIywr8ezVUYtfOY4CXvHVGhvlrYCrmb/O0SqcnIrQUXcy8JBYLVV7ilSY1x6iL4
oechBjQFzZHUKpw27QMrSfwYmB44OI0njXJBdB6UULrJ8KEL0okoopSu50TbvRwh
nU/e//MYeEEsqv4nNK3xGtclqfJWq1k9frRKrLCC532buqNo3N6k8/m47rz5TeyV
kAfxlCl6wTWgu4P/ibkMJgQn0x9/+OS7dpznwHcRj+e9lLjIjifDE61r8tISTJcD
sVEREON7diwW2a1BOypzRjRU
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:23:12 2026 by rpki-client