
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
File: zPKlJcCQFETKePBbk5LABFeVZ2E.mft (raw, json)
Hash identifier: 9L89CSLCSEcwWWCIP3wr6JgW8HLlwGLLyBpwpMfuzNM=
Subject key identifier: B1:AF:27:14:8B:13:DE:16:4E:E2:9B:E3:96:04:D2:D3:2B:8C:29:7D
Authority key identifier: CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61
Certificate issuer: /CN=A916A071/serialNumber=CCF2A525C0901444CA78F05B9392C00457956761
Certificate serial: 0A78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
Manifest number: 0A6E
Signing time: Tue 12 May 2026 19:40:34 +0000
Manifest this update: Tue 12 May 2026 19:40:33 +0000
Manifest next update: Tue 19 May 2026 19:40:33 +0000
Files and hashes: 1: zPKlJcCQFETKePBbk5LABFeVZ2E.crl (hash: o2Gg9j4Ig/9pu3+AZFkIBIsOkmz20tVXDXM4/zwZyCI=)
2: 9BAC68CC83C211EABCB66612C4F9AE02.roa (hash: cZrqWOQatMkIn2VzGfcaWDnVlXfxEpjr06H/3z6i31k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl
rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2680 (0xa78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A071, serialNumber=CCF2A525C0901444CA78F05B9392C00457956761
Validity
Not Before: May 12 19:40:33 2026 GMT
Not After : May 19 19:40:33 2026 GMT
Subject: CN=6a038231-ee79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:6f:d8:80:b9:12:70:ec:38:20:c0:ab:da:
22:ac:d5:8e:e2:93:27:44:36:2f:3a:f8:b1:08:5c:
93:4c:59:95:e9:d5:92:00:f0:ad:f4:3d:69:6a:4b:
b3:b0:ad:60:7d:4c:58:96:91:31:4c:e7:6d:06:ff:
b4:8d:31:9f:94:60:21:c1:6b:05:35:0e:7a:a4:78:
3b:68:39:50:60:27:cb:61:6f:87:28:8f:aa:a1:42:
46:34:91:d3:47:84:9d:42:b7:23:88:41:0b:85:a4:
0d:63:15:3e:bb:5a:43:ca:42:dc:6e:62:8b:35:20:
48:b8:25:d7:6b:aa:4b:43:72:3a:7f:ae:c9:6b:fd:
4b:99:df:86:95:60:7e:1f:26:6f:eb:3c:23:47:01:
7f:28:59:e7:2f:8c:a6:cd:fa:56:dd:c3:57:a7:49:
67:6b:ad:51:44:0c:9a:bb:d6:32:d6:5b:43:81:60:
55:60:a3:6e:eb:9d:4c:d1:23:c4:3c:a6:6c:a9:bf:
41:22:13:e5:ea:ae:d3:72:6a:2a:54:2d:30:40:63:
41:80:d3:7f:a1:89:f0:db:c4:af:b5:bf:8a:78:e1:
87:5a:30:0b:ee:9e:85:f5:de:fe:df:59:44:38:fd:
2c:97:de:f7:a8:df:32:7f:f3:e7:71:07:14:28:76:
38:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AF:27:14:8B:13:DE:16:4E:E2:9B:E3:96:04:D2:D3:2B:8C:29:7D
X509v3 Authority Key Identifier:
keyid:CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:11:64:9d:05:6e:95:a2:47:fb:fd:8c:3b:bb:b8:c0:ea:74:
05:c0:6e:d6:fe:f6:1f:70:a2:36:84:ff:a3:fc:ee:3d:2a:b0:
09:20:c7:c3:73:92:d0:73:5f:0d:d4:a7:56:a4:20:f1:d7:7f:
7d:2d:05:c7:56:71:0c:44:ad:14:5e:1e:79:41:fa:61:46:8b:
8a:2b:21:c1:87:64:a3:a5:cc:ae:2c:b6:f1:72:27:e8:51:05:
01:36:cf:4d:d2:d7:8e:aa:35:ea:bc:5e:62:83:59:96:d6:f2:
7c:7b:57:ba:00:63:3a:03:a5:ae:10:bd:d7:78:94:b9:b7:8e:
dd:a8:ac:e3:a1:3d:1c:57:58:f1:c2:6c:ca:ba:00:07:83:fd:
d9:c5:14:87:ec:62:30:85:fd:d5:45:6e:7f:c2:69:07:da:74:
51:1c:a2:f8:0a:d5:7d:3c:21:44:dc:57:11:9e:4a:7b:a7:5f:
37:ec:35:5a:ee:3d:b4:45:cd:1b:1e:c6:8c:27:ff:e7:c7:3f:
6c:ce:88:7c:0e:34:79:0d:1d:5f:2e:8c:d0:c6:12:96:3d:b5:
77:fd:f5:83:8d:82:f3:6a:70:9b:32:7d:8f:74:88:80:44:50:
2f:26:2a:b6:a4:b6:43:7b:dc:3f:d8:89:0b:61:3a:de:da:bf:
4c:d2:d7:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkEwNzExMTAvBgNVBAUTKENDRjJBNTI1QzA5MDE0NDRDQTc4RjA1QjkzOTJDMDA0
NTc5NTY3NjEwHhcNMjYwNTEyMTk0MDMzWhcNMjYwNTE5MTk0MDMzWjAYMRYwFAYD
VQQDEw02YTAzODIzMS1lZTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsfhv2IC5EnDsOCDAq9oirNWO4pMnRDYvOvixCFyTTFmV6dWSAPCt9D1pakuz
sK1gfUxYlpExTOdtBv+0jTGflGAhwWsFNQ56pHg7aDlQYCfLYW+HKI+qoUJGNJHT
R4SdQrcjiEELhaQNYxU+u1pDykLcbmKLNSBIuCXXa6pLQ3I6f67Ja/1Lmd+GlWB+
HyZv6zwjRwF/KFnnL4ymzfpW3cNXp0lna61RRAyau9Yy1ltDgWBVYKNu651M0SPE
PKZsqb9BIhPl6q7TcmoqVC0wQGNBgNN/oYnw28Svtb+KeOGHWjAL7p6F9d7+31lE
OP0sl973qN8yf/PncQcUKHY4BQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLGvJxSL
E94WTuKb45YE0tMrjCl9MB8GA1UdIwQYMBaAFMzypSXAkBREynjwW5OSwARXlWdh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTA3MS8yODBCMDlBNDgz
QkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZFVEtlUEJiazVMQUJGZVZa
MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pQS2xKY0NRRkVUS2VQQmJrNUxBQkZlVloyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTA3MS8yODBCMDlBNDgzQkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZF
VEtlUEJiazVMQUJGZVZaMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMBFknQVulaJH+/2MO7u4wOp0BcBu1v72H3CiNoT/o/zuPSqwCSDHw3OS0HNf
DdSnVqQg8dd/fS0Fx1ZxDEStFF4eeUH6YUaLiishwYdko6XMriy28XIn6FEFATbP
TdLXjqo16rxeYoNZltbyfHtXugBjOgOlrhC913iUubeO3ais46E9HFdY8cJsyroA
B4P92cUUh+xiMIX91UVuf8JpB9p0URyi+ArVfTwhRNxXEZ5Ke6dfN+w1Wu49tEXN
Gx7GjCf/58c/bM6IfA40eQ0dXy6M0MYSlj21d/31g42C82pwmzJ9j3SIgERQLyYq
tqS2Q3vcP9iJC2E63tq/TNLXQg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:06:22 2026 by rpki-client