
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
File: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft (raw, json)
Hash identifier: Em9xwzycDM0uutc7owm4RkSFcMFs+4Jb0wFL12ySTSE=
Subject key identifier: 30:C6:27:09:ED:65:89:1D:72:58:31:7F:8D:5A:EC:30:CD:56:69:E5
Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Certificate serial: 05F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
Manifest number: 0539
Signing time: Tue 22 Sep 2026 23:39:45 +0000
Manifest this update: Tue 22 Sep 2026 23:39:44 +0000
Manifest next update: Tue 29 Sep 2026 23:39:44 +0000
Files and hashes: 1: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl (hash: mjFov09eS1Nk7J5mjWT8QeRnSHxIoNGX7InuKD7aX/M=)
2: 62D9B996A3FF11F19DE49AE66311F970.roa (hash: 58436ywWioeIyXvUQgf54PxYopx4wdMLShpWCNHvyY0=)
3: 33B5008E817811F198EF28E28EA30FBC.roa (hash: dhdm8ifZMbfHcmPmtcvJgps8m/quTfZgQcRwecxEd4o=)
4: 3050FB0E9F7511F085D9D70FC4F9AE02.roa (hash: VV9KXmgRKf+FOm7HICubh1e+YuZrynDmGju0xNgq3eg=)
5: DB2A35A6817711F19F018AE08EA30FBC.roa (hash: jatNXk52k64uClfl02ixrvCT8amWzJ8ZDNs1sE6Nl9Q=)
6: FCC76842A3FE11F1AD0732AA6311F970.roa (hash: 1I+bUDo2mDKieQlqOO+SjmU9khOZDViuGtw2fztkpUA=)
7: 5C92DD9AA40111F1A3E298106411F970.roa (hash: PtrVig6rANGuDw4j5aNoWsmOfVkMKFzjnif4UqOH7zI=)
8: 37D5EC8CB68A11F09D04E950C4F9AE02.roa (hash: 6aVnE8xoctQeLsx9ZDOTJHTWJS72yU7v5odJKGzLwnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:39:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1523 (0x5f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Validity
Not Before: Sep 22 23:39:44 2026 GMT
Not After : Sep 29 23:39:44 2026 GMT
Subject: CN=6ab311c1-c93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:80:e4:9b:be:54:af:46:0c:c1:d3:86:dc:fb:
53:d0:e8:d5:87:10:fd:d8:e2:18:35:49:52:aa:b7:
61:b1:57:7d:d8:09:31:6f:bc:4a:ca:d0:71:cd:ca:
25:3d:15:37:ba:5c:21:61:4a:c9:e9:88:77:0d:82:
71:39:8b:7e:7e:69:5c:ff:43:b3:42:30:f5:7f:a8:
e2:b3:e3:48:4b:1d:04:35:5a:86:e5:7d:37:55:cd:
4b:a7:54:a6:98:a7:80:69:4a:4b:2a:bc:41:15:a5:
dd:02:e2:be:0e:eb:a5:bc:63:99:f9:ba:9d:c8:19:
21:57:69:b0:c7:5e:23:a5:d8:55:cc:73:38:df:ea:
21:7a:56:6f:87:96:97:51:1c:b6:e6:e1:66:5e:23:
18:07:83:ea:44:31:87:9b:be:be:2c:58:d1:91:0e:
96:65:4d:a2:7e:73:3f:d7:a1:86:1e:46:42:26:eb:
fb:4e:27:4c:46:14:f1:c2:a6:53:16:c3:e5:47:17:
3b:ba:3a:ac:d4:70:db:bc:bb:a4:a1:3a:c0:17:65:
4f:1e:ed:db:5a:b8:c5:cb:fa:6e:ea:65:17:c3:89:
75:81:e8:fb:b7:23:79:20:9b:5b:98:c8:c5:db:78:
5c:ad:d4:54:e7:fd:08:94:d4:2b:d6:a9:7c:ee:46:
cc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C6:27:09:ED:65:89:1D:72:58:31:7F:8D:5A:EC:30:CD:56:69:E5
X509v3 Authority Key Identifier:
keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:83:3f:35:fd:7b:2c:9c:50:31:69:c3:69:48:8e:e7:aa:56:
bf:4d:4b:d5:99:2e:6e:18:d8:3a:23:fe:bb:8b:04:38:99:88:
12:50:b2:70:a4:d6:65:63:d5:d9:52:fd:15:ed:34:11:3a:d9:
63:2e:48:9f:77:8c:64:73:e7:51:65:b1:10:6d:4f:38:81:81:
74:ed:97:7b:aa:f2:bc:90:31:fb:06:50:6b:cc:33:78:3b:3d:
00:ba:bb:d8:05:a4:cb:06:9f:56:2a:01:98:2b:bc:7a:6f:ab:
24:5c:da:d2:83:f6:7b:74:b0:d8:ef:f8:29:10:61:f2:91:96:
22:9d:ba:64:34:11:cb:d2:c7:66:a7:7c:6a:ed:32:05:74:4d:
41:e2:77:b5:ae:1f:21:1f:18:75:83:b3:96:90:d2:7f:5f:f6:
52:76:e5:c9:ef:29:8a:6f:74:22:04:21:bc:72:bc:92:7b:a0:
3e:06:bf:17:33:ac:7d:20:ac:85:7a:33:0d:18:89:37:fb:d8:
8b:88:bf:54:99:6f:e1:8f:41:82:67:20:8f:7d:c6:63:d3:ed:
1e:df:5d:9b:82:80:12:ca:41:17:9b:c9:e7:cc:06:d6:e9:1a:
1c:d3:02:e0:3d:b4:da:10:dd:be:eb:55:76:d1:c2:9a:6a:23:
1b:80:9b:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD
RUZBRjVBQkMwHhcNMjYwOTIyMjMzOTQ0WhcNMjYwOTI5MjMzOTQ0WjAYMRYwFAYD
VQQDEw02YWIzMTFjMS1jOTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs4Dkm75Ur0YMwdOG3PtT0OjVhxD92OIYNUlSqrdhsVd92Akxb7xKytBxzcol
PRU3ulwhYUrJ6Yh3DYJxOYt+fmlc/0OzQjD1f6jis+NISx0ENVqG5X03Vc1Lp1Sm
mKeAaUpLKrxBFaXdAuK+DuulvGOZ+bqdyBkhV2mwx14jpdhVzHM43+ohelZvh5aX
URy25uFmXiMYB4PqRDGHm76+LFjRkQ6WZU2ifnM/16GGHkZCJuv7TidMRhTxwqZT
FsPlRxc7ujqs1HDbvLukoTrAF2VPHu3bWrjFy/pu6mUXw4l1gej7tyN5IJtbmMjF
23hcrdRU5/0IlNQr1ql87kbMOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDDGJwnt
ZYkdclgxf41a7DDNVmnlMB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG
MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX
cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RkM3My8wMTQ0Q0RGODlGMzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlS
czFKZHBWM1VySlhPLXZXcncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApIM/Nf17LJxQMWnDaUiO56pWv01L1ZkubhjYOiP+u4sEOJmIElCycKTWZWPV
2VL9Fe00ETrZYy5In3eMZHPnUWWxEG1POIGBdO2Xe6ryvJAx+wZQa8wzeDs9ALq7
2AWkywafVioBmCu8em+rJFza0oP2e3Sw2O/4KRBh8pGWIp26ZDQRy9LHZqd8au0y
BXRNQeJ3ta4fIR8YdYOzlpDSf1/2Unblye8pim90IgQhvHK8knugPga/FzOsfSCs
hXozDRiJN/vYi4i/VJlv4Y9Bgmcgj33GY9PtHt9dm4KAEspBF5vJ58wG1ukaHNMC
4D202hDdvutVdtHCmmojG4CbYw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 05:06:29 2026 by rpki-client