
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft
File: ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft (raw, json)
Hash identifier: sk90iV+uXe5JAvXwIrb8Sf0mlnC3T+waKWRs/WJkr3s=
Subject key identifier: 57:FA:E5:FC:65:58:EF:5F:A5:8D:90:1C:63:C5:49:0B:00:B4:3A:90
Authority key identifier: 66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4
Certificate issuer: /CN=A9193045/serialNumber=66E85461BB352A498DB55703646305CA37E74FB4
Certificate serial: 04D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft
Manifest number: 04A7
Signing time: Sun 27 Sep 2026 00:04:11 +0000
Manifest this update: Sun 27 Sep 2026 00:04:10 +0000
Manifest next update: Sun 04 Oct 2026 00:04:10 +0000
Files and hashes: 1: ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl (hash: vnf2d0rh6R9tqrvT90iP5fY2lj5SyXDixbvDbHY7jCg=)
2: E57F70C206C311F185D816DB103D8C67.roa (hash: Wz+Aa2wnMlwpT85yT4ccSaJKxyuxT87QuUWxfJ/y6fU=)
3: 62AC0F740B1511F189F6F0D93B3D8C67.roa (hash: Htk1BqkRKiaFa9x+yTZJCZVf/zPXHwbaP6hoH1eBN/c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl
rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 00:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1235 (0x4d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193045, serialNumber=66E85461BB352A498DB55703646305CA37E74FB4
Validity
Not Before: Sep 27 00:04:10 2026 GMT
Not After : Oct 4 00:04:10 2026 GMT
Subject: CN=6ab85d7b-4e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7c:e3:fc:db:02:8f:8a:cb:a9:2b:48:ea:1b:
e6:56:dc:f0:38:5b:d9:29:4d:27:08:01:eb:c6:0a:
81:37:39:a2:ae:c3:95:b0:81:4a:ea:71:93:e9:83:
aa:90:5a:9a:8d:18:0e:28:a3:5a:d5:b0:48:6f:d7:
14:9b:2e:8f:38:02:bb:11:e2:7e:7f:ed:85:b4:88:
02:76:21:7b:30:20:01:a8:fe:da:68:5a:40:72:6d:
cf:d3:15:5f:12:4d:2a:68:0e:37:61:2a:fe:9f:b1:
ee:b8:ce:f6:ab:ca:9e:1e:f6:91:90:c9:16:f0:fd:
86:57:98:7c:62:47:98:02:b2:69:36:c8:6b:90:70:
1f:75:b4:b2:c2:37:8d:41:bd:b9:10:49:7e:56:40:
eb:16:fc:92:ac:cb:b6:62:9a:d4:10:a0:c6:97:43:
3b:6c:86:d1:66:68:e2:ba:1f:33:fd:1a:45:9a:b6:
46:d8:d7:40:e1:35:b2:9f:0d:d3:ea:7c:fa:b9:19:
95:8d:49:49:1e:9c:60:e2:20:ec:da:71:21:4f:0b:
0f:35:a3:0f:b4:83:6f:5c:4d:a1:66:0b:58:3b:35:
47:5c:b8:6b:fa:44:d1:c8:a7:0d:f1:10:3e:2a:ed:
e5:c6:70:57:06:42:2e:15:d6:ba:71:1e:89:5d:1f:
19:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FA:E5:FC:65:58:EF:5F:A5:8D:90:1C:63:C5:49:0B:00:B4:3A:90
X509v3 Authority Key Identifier:
keyid:66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:08:72:8b:af:95:51:a4:e4:a6:27:0a:e2:32:70:c2:b2:c9:
56:56:e4:74:34:d2:d4:6f:3f:58:c5:a7:22:a6:d1:69:d8:30:
a1:ee:7e:52:a4:6e:5e:31:4b:31:58:7d:3e:74:13:4a:40:c4:
9c:69:63:aa:01:2d:18:25:bb:27:c2:e5:19:ef:f4:bb:77:5c:
05:4f:bc:97:41:53:a3:48:ee:04:9b:3d:b5:50:ce:f1:3d:4f:
04:1e:23:ef:47:58:bd:09:49:fa:3c:f5:d1:26:fa:93:91:92:
f4:de:cc:c9:6d:64:50:25:93:a4:ee:5b:37:8a:db:37:30:c5:
f0:70:95:a2:eb:b6:76:d8:d9:c2:09:e9:3e:82:42:f0:c6:dd:
48:72:fa:ad:ee:eb:cc:17:fb:2e:5a:e4:de:be:f7:91:a6:45:
40:25:09:10:26:e1:ad:9b:ff:11:b5:11:f9:58:c5:d7:a3:e6:
04:61:64:e7:fd:28:7f:b6:b8:c5:b7:9c:cc:d5:95:e3:b8:c8:
bf:52:c0:95:67:57:f9:24:3a:a7:4b:f9:c4:0a:0a:d1:37:0c:
99:d4:ef:0f:bb:da:51:7c:c8:07:dc:95:f4:06:8c:0d:44:09:
64:c2:4b:08:e7:4f:cd:8f:76:03:bd:2a:4a:91:18:d6:c0:e9:
eb:45:e7:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTMwNDUxMTAvBgNVBAUTKDY2RTg1NDYxQkIzNTJBNDk4REI1NTcwMzY0NjMwNUNB
MzdFNzRGQjQwHhcNMjYwOTI3MDAwNDEwWhcNMjYxMDA0MDAwNDEwWjAYMRYwFAYD
VQQDEw02YWI4NWQ3Yi00ZTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApXzj/NsCj4rLqStI6hvmVtzwOFvZKU0nCAHrxgqBNzmirsOVsIFK6nGT6YOq
kFqajRgOKKNa1bBIb9cUmy6POAK7EeJ+f+2FtIgCdiF7MCABqP7aaFpAcm3P0xVf
Ek0qaA43YSr+n7HuuM72q8qeHvaRkMkW8P2GV5h8YkeYArJpNshrkHAfdbSywjeN
Qb25EEl+VkDrFvySrMu2YprUEKDGl0M7bIbRZmjiuh8z/RpFmrZG2NdA4TWynw3T
6nz6uRmVjUlJHpxg4iDs2nEhTwsPNaMPtINvXE2hZgtYOzVHXLhr+kTRyKcN8RA+
Ku3lxnBXBkIuFda6cR6JXR8Z2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFf65fxl
WO9fpY2QHGPFSQsAtDqQMB8GA1UdIwQYMBaAFGboVGG7NSpJjbVXA2RjBco350+0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzA0NS9CRkFEQzYxMDlG
MjkxMUVDOUMyRDY3ODVDNEY5QUUwMi9adWhVWWJzMUtrbU50VmNEWkdNRnlqZm5U
N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p1aFVZYnMxS2ttTnRWY0RaR01GeWpmblQ3US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MzA0NS9CRkFEQzYxMDlGMjkxMUVDOUMyRDY3ODVDNEY5QUUwMi9adWhVWWJzMUtr
bU50VmNEWkdNRnlqZm5UN1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWAhyi6+VUaTkpicK4jJwwrLJVlbkdDTS1G8/WMWnIqbRadgwoe5+UqRuXjFL
MVh9PnQTSkDEnGljqgEtGCW7J8LlGe/0u3dcBU+8l0FTo0juBJs9tVDO8T1PBB4j
70dYvQlJ+jz10Sb6k5GS9N7MyW1kUCWTpO5bN4rbNzDF8HCVouu2dtjZwgnpPoJC
8MbdSHL6re7rzBf7Llrk3r73kaZFQCUJECbhrZv/EbUR+VjF16PmBGFk5/0of7a4
xbeczNWV47jIv1LAlWdX+SQ6p0v5xAoK0TcMmdTvD7vaUXzIB9yV9AaMDUQJZMJL
COdPzY92A70qSpEY1sDp60XnvA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 14:29:39 2026 by rpki-client