
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
File: ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft (raw, json)
Hash identifier: FGgaw5SFi4RlxYlgLwCd8eGltjzLEqxpHPuIzS+ckqU=
Subject key identifier: 72:89:E5:5F:FD:CF:66:0F:AF:4F:D5:BB:D8:FA:32:8A:67:C1:56:B0
Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A
Certificate issuer: /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
Certificate serial: 2457
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
Manifest number: 2444
Signing time: Thu 24 Sep 2026 15:45:43 +0000
Manifest this update: Thu 24 Sep 2026 15:45:42 +0000
Manifest next update: Thu 01 Oct 2026 15:45:42 +0000
Files and hashes: 1: ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl (hash: N0sqP622V71i4/fq3HDjs+SJ6jnq6wyR6RWexmSyFas=)
2: 844E61B635B811EE96EDCC53C4F9AE02.roa (hash: FMM9PWbU/oYp9w4GxmMR0Bnc2OElJZUE63nkK8Lt4YE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl
rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 15:45:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9303 (0x2457)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91269B8, serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
Validity
Not Before: Sep 24 15:45:42 2026 GMT
Not After : Oct 1 15:45:42 2026 GMT
Subject: CN=6ab545a7-a301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4b:31:20:0d:08:a8:21:b0:99:27:f6:01:3b:
eb:e6:c1:10:22:97:ea:c7:e0:e0:45:20:b6:24:c2:
de:24:a4:c9:30:da:10:24:c1:7c:05:7e:5e:09:18:
49:c9:03:18:d0:9b:c3:47:eb:50:70:dd:d6:32:02:
4b:e4:36:4c:d8:29:0b:75:bd:e1:06:a5:dc:38:ea:
3b:a9:7e:24:fb:ec:be:35:37:30:4f:e0:4b:76:1d:
e6:15:49:d6:7e:37:74:64:be:cf:48:ec:25:f6:c4:
1c:10:57:db:ea:b0:32:8a:40:24:13:59:f6:2d:75:
df:2b:62:df:c4:e1:99:7b:c0:d2:46:fb:9a:ed:e3:
fa:e0:64:90:4f:91:f4:de:c3:68:48:73:e0:6b:f4:
e4:3d:a7:83:d4:8b:e5:a3:87:5f:16:5b:37:a7:cc:
63:e8:25:4f:23:64:f7:2b:fe:32:9f:a0:b5:63:e7:
2a:8e:62:9e:d6:6c:90:c7:e9:8c:7c:d3:b0:90:1d:
e2:c1:8f:7a:a2:c0:df:76:d0:8b:e4:0d:0c:96:fb:
cf:58:a7:b9:c4:cc:8e:e1:b3:dc:53:8a:ec:09:bb:
ba:b3:0a:63:a9:f1:3d:79:a3:af:27:da:16:c4:99:
d5:74:79:44:8d:1c:77:28:f3:03:0e:d9:fa:dc:16:
c7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:89:E5:5F:FD:CF:66:0F:AF:4F:D5:BB:D8:FA:32:8A:67:C1:56:B0
X509v3 Authority Key Identifier:
keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:b2:1e:4f:22:fa:f6:aa:2e:e0:9f:25:57:80:cf:d8:c2:43:
23:43:06:8c:a1:27:29:9c:3c:90:d1:0a:63:f5:e7:ed:62:3e:
03:3e:a4:92:04:f0:2a:70:cb:91:20:23:fa:cc:a4:98:75:2b:
14:28:eb:df:af:4b:32:a4:1d:1d:4b:2c:b9:11:50:d7:95:e1:
f9:71:82:1d:1d:d1:6f:b5:80:7a:d4:a2:f1:43:b9:75:73:65:
4f:a0:a2:09:cb:73:e4:9d:70:ad:c7:d1:1c:7d:29:c7:12:7a:
a6:d6:d5:6a:30:c6:55:6a:62:40:ea:f2:62:4b:db:cf:93:e0:
15:c2:78:74:c1:44:35:90:c8:f5:98:0f:17:5b:37:b5:02:ae:
b6:21:fb:e7:4a:c9:8a:0d:d7:38:b6:a0:b8:d3:94:79:ee:ae:
64:7d:24:48:e8:fd:24:a1:7b:e4:24:2b:5c:d1:24:61:a8:9b:
ec:65:50:53:a0:3d:03:17:d3:91:77:e2:91:85:02:d0:3e:d9:
28:2d:aa:58:19:e0:2a:50:8f:ed:ab:b0:a1:99:9d:3b:94:7b:
1f:c5:bc:7e:82:1c:d4:a4:27:17:bb:ae:f2:5e:25:86:7d:c0:
a8:5c:a6:9d:c3:1e:c8:15:34:1f:b1:1b:95:17:e4:22:94:2c:
76:5b:23:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjY5QjgxMTAvBgNVBAUTKDY2MjdDQ0FCNkRDMkU5NTg2RTJDQzExQjI3OTU3MzVB
MzFGRDlCOEEwHhcNMjYwOTI0MTU0NTQyWhcNMjYxMDAxMTU0NTQyWjAYMRYwFAYD
VQQDEw02YWI1NDVhNy1hMzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoksxIA0IqCGwmSf2ATvr5sEQIpfqx+DgRSC2JMLeJKTJMNoQJMF8BX5eCRhJ
yQMY0JvDR+tQcN3WMgJL5DZM2CkLdb3hBqXcOOo7qX4k++y+NTcwT+BLdh3mFUnW
fjd0ZL7PSOwl9sQcEFfb6rAyikAkE1n2LXXfK2LfxOGZe8DSRvua7eP64GSQT5H0
3sNoSHPga/TkPaeD1Ivlo4dfFls3p8xj6CVPI2T3K/4yn6C1Y+cqjmKe1myQx+mM
fNOwkB3iwY96osDfdtCL5A0MlvvPWKe5xMyO4bPcU4rsCbu6swpjqfE9eaOvJ9oW
xJnVdHlEjRx3KPMDDtn63BbHswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHKJ5V/9
z2YPr0/Vu9j6MopnwVawMB8GA1UdIwQYMBaAFGYnzKttwulYbizBGyeVc1ox/ZuK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjlCOC80QUJBRkVERTgz
OTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZWaHVMTUViSjVWeldqSDlt
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ppZk1xMjNDNlZodUxNRWJKNVZ6V2pIOW00by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NjlCOC80QUJBRkVERTgzOTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZW
aHVMTUViSjVWeldqSDltNG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKLIeTyL69qou4J8lV4DP2MJDI0MGjKEnKZw8kNEKY/Xn7WI+Az6kkgTwKnDL
kSAj+sykmHUrFCjr369LMqQdHUssuRFQ15Xh+XGCHR3Rb7WAetSi8UO5dXNlT6Ci
Cctz5J1wrcfRHH0pxxJ6ptbVajDGVWpiQOryYkvbz5PgFcJ4dMFENZDI9ZgPF1s3
tQKutiH750rJig3XOLaguNOUee6uZH0kSOj9JKF75CQrXNEkYaib7GVQU6A9AxfT
kXfikYUC0D7ZKC2qWBngKlCP7auwoZmdO5R7H8W8foIc1KQnF7uu8l4lhn3AqFym
ncMeyBU0H7EblRfkIpQsdlsjWA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:32:23 2026 by rpki-client