
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
File: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft (raw, json)
Hash identifier: mynsEAPHl5cnhnt1yOEy0LlrHOZyjceVQvveSyn0Y34=
Subject key identifier: 6C:0E:B0:5C:78:71:EB:6B:DF:7E:7D:D1:EC:80:05:7E:41:2B:1F:BB
Authority key identifier: 66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84
Certificate issuer: /CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
Certificate serial: 106D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
Manifest number: 1056
Signing time: Tue 12 May 2026 17:25:34 +0000
Manifest this update: Tue 12 May 2026 17:25:34 +0000
Manifest next update: Tue 19 May 2026 17:25:34 +0000
Files and hashes: 1: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl (hash: 9mveq1I8TpYayNVsQqlu4ECIrnx8wZv8/rsyCai4VJU=)
2: 373ADDFC1CC411EF90865B7DC4F9AE02.roa (hash: BUHXcbwgDCfppQqI14tt+SHKjsNJaOwlcThHrAcU48k=)
3: 27A298A00C6C11EC82638A40C4F9AE02.roa (hash: +GqC4kHrlGijBhG+Vf9OqiE+irbiFIUUxvaGXJ8E0NA=)
4: 1313114A5B3D11E996E4A744C4F9AE02.roa (hash: d+s7KZXz1WqJhrg7kNulx9MrS05rezWlx0peNL2GZrc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl
rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:25:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4205 (0x106d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194E51, serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
Validity
Not Before: May 12 17:25:34 2026 GMT
Not After : May 19 17:25:34 2026 GMT
Subject: CN=6a03628e-452e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:25:fb:92:0c:7f:22:8e:30:39:4d:06:22:52:
f9:13:97:f8:69:2e:b9:9b:16:f9:18:da:00:9f:aa:
d6:8d:a0:f0:fa:b7:b7:22:37:f4:3e:81:26:f3:f1:
cf:d3:90:83:91:ea:78:6d:e7:00:5a:cf:9e:58:78:
ad:b5:d2:ee:fc:c0:14:64:a0:c3:b3:76:c0:94:96:
a9:dd:15:d7:bb:73:ac:0e:76:c1:25:10:e8:e0:a0:
d5:e7:38:67:72:88:8a:cb:d1:17:57:91:f9:62:6e:
2d:2a:aa:af:3b:44:99:d5:60:8e:6e:86:6e:da:7c:
af:8a:88:d5:66:9e:16:60:c5:8c:13:62:48:51:e2:
09:00:bc:77:9f:6d:2e:ee:7a:10:d8:b1:d2:31:fd:
1a:c3:e7:74:8b:5f:ed:45:b3:d3:b3:a9:32:8b:9d:
b6:1b:2b:49:e0:1f:bb:86:7a:39:4b:41:9a:43:24:
1b:3a:ff:ac:35:ea:e8:57:87:d1:db:ae:f4:0d:83:
39:66:e7:ce:f2:c1:fc:a7:d9:e3:c8:e5:35:64:fc:
a6:8c:dc:8f:cb:3a:3f:ce:52:7f:00:25:81:f3:ae:
fe:f2:a0:fd:d5:a9:fa:14:48:59:5d:d6:df:7c:9d:
5e:7a:7d:07:c2:c7:15:53:2a:03:84:38:d2:59:af:
78:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0E:B0:5C:78:71:EB:6B:DF:7E:7D:D1:EC:80:05:7E:41:2B:1F:BB
X509v3 Authority Key Identifier:
keyid:66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:9f:6e:1b:17:a7:3f:34:fa:f4:db:fa:8b:f8:38:27:6f:7d:
31:0f:ef:50:32:64:38:7d:84:10:c0:34:5e:72:bb:54:b3:23:
24:25:fe:fc:a2:f9:4b:30:f5:39:43:37:6f:f6:0d:12:c1:05:
a1:0d:4f:72:25:c7:7a:97:07:7e:8d:73:41:9d:58:fe:98:6c:
0e:8c:ad:08:66:84:4d:4f:ff:f3:10:e7:be:af:33:3c:ae:8d:
b1:d2:2b:be:8e:d6:a8:cb:a3:44:b5:51:c7:34:c0:e9:6f:f2:
02:bf:f0:36:38:e5:c6:21:9d:ab:e1:78:41:01:19:0e:bc:9f:
a5:e0:67:c9:ee:a4:cb:14:b4:8f:54:0b:42:97:de:2b:f1:01:
fe:7d:41:3b:a5:2d:ce:c2:93:2d:63:f8:48:cf:c7:75:25:13:
d5:a6:f2:77:f2:4c:3e:7a:7e:15:56:75:44:57:67:1c:02:64:
12:15:16:69:a0:65:3f:b7:84:60:5b:ff:ac:70:c3:92:21:7b:
13:93:06:9d:74:fa:2c:bc:1f:d7:77:c8:fb:9d:62:12:8d:d1:
e9:36:da:6d:b5:43:79:07:fe:ce:c8:90:32:7d:d3:16:83:c4:
e0:c9:18:2f:89:4d:f8:fe:6e:78:9b:bb:e5:e5:71:9c:1a:f6:
95:43:48:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRFNTExMTAvBgNVBAUTKDY2RkREQjQzRTU0OTQyRTM0OTJGMTA2NTBFNTMyMzky
NkM0NUM0ODQwHhcNMjYwNTEyMTcyNTM0WhcNMjYwNTE5MTcyNTM0WjAYMRYwFAYD
VQQDEw02YTAzNjI4ZS00NTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApCX7kgx/Io4wOU0GIlL5E5f4aS65mxb5GNoAn6rWjaDw+re3Ijf0PoEm8/HP
05CDkep4becAWs+eWHittdLu/MAUZKDDs3bAlJap3RXXu3OsDnbBJRDo4KDV5zhn
coiKy9EXV5H5Ym4tKqqvO0SZ1WCOboZu2nyviojVZp4WYMWME2JIUeIJALx3n20u
7noQ2LHSMf0aw+d0i1/tRbPTs6kyi522GytJ4B+7hno5S0GaQyQbOv+sNeroV4fR
2670DYM5ZufO8sH8p9njyOU1ZPymjNyPyzo/zlJ/ACWB867+8qD91an6FEhZXdbf
fJ1een0HwscVUyoDhDjSWa940QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGwOsFx4
cetr33590eyABX5BKx+7MB8GA1UdIwQYMBaAFGb920PlSULjSS8QZQ5TI5JsRcSE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEU1MS84OUY4NkYwQTVC
M0IxMUU5ODY5QUE2NDFDNEY5QUUwMi9adjNiUS1WSlF1TkpMeEJsRGxNamtteEZ4
SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p2M2JRLVZKUXVOSkx4QmxEbE1qa214RnhJUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEU1MS84OUY4NkYwQTVCM0IxMUU5ODY5QUE2NDFDNEY5QUUwMi9adjNiUS1WSlF1
TkpMeEJsRGxNamtteEZ4SVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANp9uGxenPzT69Nv6i/g4J299MQ/vUDJkOH2EEMA0XnK7VLMjJCX+/KL5SzD1
OUM3b/YNEsEFoQ1PciXHepcHfo1zQZ1Y/phsDoytCGaETU//8xDnvq8zPK6NsdIr
vo7WqMujRLVRxzTA6W/yAr/wNjjlxiGdq+F4QQEZDryfpeBnye6kyxS0j1QLQpfe
K/EB/n1BO6UtzsKTLWP4SM/HdSUT1abyd/JMPnp+FVZ1RFdnHAJkEhUWaaBlP7eE
YFv/rHDDkiF7E5MGnXT6LLwf13fI+51iEo3R6TbabbVDeQf+zsiQMn3TFoPE4MkY
L4lN+P5ueJu75eVxnBr2lUNI/g==
-----END CERTIFICATE-----
Generated at Wed May 13 09:55:32 2026 by rpki-client