
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
File: znNgvRqU6JF702ckM_gh7HgKjSg.mft (raw, json)
Hash identifier: uS/GC0k/06eeA+gaBYb3eRrePvW9AfQ6RGLI1wQioy8=
Subject key identifier: 6B:57:F0:E7:94:29:F3:F8:9E:D0:8F:04:4C:FE:81:09:12:8E:B6:A4
Authority key identifier: CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28
Certificate issuer: /CN=A915E1F9/serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
Manifest number: C5
Signing time: Fri 25 Sep 2026 06:54:35 +0000
Manifest this update: Fri 25 Sep 2026 06:54:35 +0000
Manifest next update: Fri 02 Oct 2026 06:54:35 +0000
Files and hashes: 1: znNgvRqU6JF702ckM_gh7HgKjSg.crl (hash: ulL93Km5Yt7CgFsxoWOuUsxxJAWMiwLpRJhSWNcxzgM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl
rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E1F9, serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28
Validity
Not Before: Sep 25 06:54:35 2026 GMT
Not After : Oct 2 06:54:35 2026 GMT
Subject: CN=6ab61aab-afd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ef:91:fe:07:81:c7:9a:3c:08:bf:63:ad:9d:
49:cc:cf:f7:a5:39:b3:ff:01:54:66:24:c8:60:65:
0c:7e:36:83:70:89:1f:db:18:2c:95:b6:12:d3:9b:
bf:39:a1:67:69:66:e2:c4:d5:47:99:92:20:3a:7a:
2a:67:73:6b:0b:a9:0e:85:e4:e7:c0:66:01:89:61:
71:63:a3:71:57:6d:72:3d:38:10:ce:37:31:42:31:
00:07:11:cc:5d:1b:3c:6b:85:84:a6:2a:3c:1e:46:
01:17:e2:b1:ff:aa:ea:37:cb:a4:f9:45:79:54:36:
21:3c:77:eb:1e:fc:8d:9d:7d:de:3d:6a:e5:26:fc:
29:4d:53:c7:e4:ae:cd:89:72:f9:1f:c0:05:33:1a:
56:85:26:38:5f:fc:2f:85:a6:3e:7e:17:c1:e6:ca:
21:98:09:be:58:79:6a:ff:07:0b:58:fd:d1:ab:a4:
d4:cc:9c:f4:a5:26:d3:aa:5d:3e:71:f6:a2:cc:4c:
7a:df:7e:09:2e:45:b7:b0:28:3d:ef:ec:db:77:0c:
62:87:5d:95:cf:03:14:46:a7:32:e0:0f:b2:c9:c6:
65:84:51:fa:e9:e8:89:92:33:42:b5:1c:74:f2:9d:
39:8b:11:3d:28:78:af:ac:e8:66:0a:62:cd:ea:e4:
fe:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:57:F0:E7:94:29:F3:F8:9E:D0:8F:04:4C:FE:81:09:12:8E:B6:A4
X509v3 Authority Key Identifier:
keyid:CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:cd:96:82:7e:ce:33:ae:b4:93:d2:35:49:81:25:b9:73:00:
43:fd:70:8d:a1:2d:85:6c:21:cb:89:b5:bb:de:6d:cd:aa:b6:
8b:96:61:37:67:e6:52:56:0b:d7:3a:9e:2b:ab:50:06:34:a8:
0b:da:8a:8a:7f:d2:74:37:96:43:29:62:ad:3e:65:d5:ac:5f:
14:ef:b0:16:82:8e:a8:03:52:5d:8e:a9:73:cd:17:08:52:89:
8a:cd:eb:7f:ab:66:28:0e:ad:06:cb:14:f1:ae:dc:2e:29:95:
a1:b3:91:d7:0d:47:6a:cb:7d:47:33:17:57:67:12:06:94:6b:
cd:db:65:2b:48:5a:63:a0:a7:76:3f:31:c8:11:ad:f9:d5:c5:
58:0a:58:3f:2d:11:07:25:90:66:ac:20:57:4e:b2:dc:91:96:
aa:0f:bd:19:9b:8d:3f:e8:52:d4:8c:56:64:fb:62:a9:d6:10:
7e:ab:96:9d:42:14:cd:1c:ee:6b:96:6f:93:f4:39:d3:45:0d:
92:ad:a4:56:23:28:b5:39:ff:15:40:fb:f8:41:87:87:63:8c:
14:6d:b3:a4:1d:96:91:12:13:5c:87:ae:fb:c8:73:36:7a:6c:
f8:60:11:21:63:61:8a:1a:80:1b:e4:4d:5e:e2:a1:f2:27:dc:
0b:7f:38:a7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUUxRjkxMTAvBgNVBAUTKENFNzM2MEJEMUE5NEU4OTE3QkQzNjcyNDMzRjgyMUVD
NzgwQThEMjgwHhcNMjYwOTI1MDY1NDM1WhcNMjYxMDAyMDY1NDM1WjAYMRYwFAYD
VQQDEw02YWI2MWFhYi1hZmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApO+R/geBx5o8CL9jrZ1JzM/3pTmz/wFUZiTIYGUMfjaDcIkf2xgslbYS05u/
OaFnaWbixNVHmZIgOnoqZ3NrC6kOheTnwGYBiWFxY6NxV21yPTgQzjcxQjEABxHM
XRs8a4WEpio8HkYBF+Kx/6rqN8uk+UV5VDYhPHfrHvyNnX3ePWrlJvwpTVPH5K7N
iXL5H8AFMxpWhSY4X/wvhaY+fhfB5sohmAm+WHlq/wcLWP3Rq6TUzJz0pSbTql0+
cfaizEx6334JLkW3sCg97+zbdwxih12VzwMURqcy4A+yycZlhFH66eiJkjNCtRx0
8p05ixE9KHivrOhmCmLN6uT+3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGtX8OeU
KfP4ntCPBEz+gQkSjrakMB8GA1UdIwQYMBaAFM5zYL0alOiRe9NnJDP4Iex4Co0o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTFGOS9BRkU0QTkwQThE
RTIxMUYwQTMwOEFDN0NDNEY5QUUwMi96bk5ndlJxVTZKRjcwMmNrTV9naDdIZ0tq
U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3puTmd2UnFVNkpGNzAyY2tNX2doN0hnS2pTZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RTFGOS9BRkU0QTkwQThERTIxMUYwQTMwOEFDN0NDNEY5QUUwMi96bk5ndlJxVTZK
RjcwMmNrTV9naDdIZ0tqU2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUc2Wgn7OM660k9I1SYEluXMAQ/1wjaEthWwhy4m1u95tzaq2i5ZhN2fmUlYL
1zqeK6tQBjSoC9qKin/SdDeWQylirT5l1axfFO+wFoKOqANSXY6pc80XCFKJis3r
f6tmKA6tBssU8a7cLimVobOR1w1Hast9RzMXV2cSBpRrzdtlK0haY6Cndj8xyBGt
+dXFWApYPy0RByWQZqwgV06y3JGWqg+9GZuNP+hS1IxWZPtiqdYQfquWnUIUzRzu
a5Zvk/Q500UNkq2kViMotTn/FUD7+EGHh2OMFG2zpB2WkRITXIeu+8hzNnps+GAR
IWNhihqAG+RNXuKh8ifcC384pw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 22:19:54 2026 by rpki-client