
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
File: MZfydASVOdoqReLMBqpcyHTmJ28.mft (raw, json)
Hash identifier: lvm4dRiqZeOeSCrIYQN6nuQUkAyB/bALbsb+HvfroWQ=
Subject key identifier: F2:F3:0D:F4:86:2B:D6:B0:7B:9C:CE:EC:29:06:C1:0C:17:B6:8E:E0
Authority key identifier: 31:97:F2:74:04:95:39:DA:2A:45:E2:CC:06:AA:5C:C8:74:E6:27:6F
Certificate issuer: /CN=A919BF94/serialNumber=3197F274049539DA2A45E2CC06AA5CC874E6276F
Certificate serial: 50
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZfydASVOdoqReLMBqpcyHTmJ28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
Manifest number: 50
Signing time: Fri 13 Nov 2026 08:27:40 +0000
Manifest this update: Fri 13 Nov 2026 08:27:39 +0000
Manifest next update: Fri 20 Nov 2026 08:27:39 +0000
Files and hashes: 1: MZfydASVOdoqReLMBqpcyHTmJ28.crl (hash: Qp2b5L8eqhWs1Iw2RhqWEf2ec3fui1lwjUBilM+fCpE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.crl
rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZfydASVOdoqReLMBqpcyHTmJ28.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Nov 2026 08:27:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BF94, serialNumber=3197F274049539DA2A45E2CC06AA5CC874E6276F
Validity
Not Before: Nov 13 08:27:39 2026 GMT
Not After : Nov 20 08:27:39 2026 GMT
Subject: CN=6af6c9fc-caae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:98:7b:fa:35:cc:82:6d:3c:85:33:46:8c:
df:58:02:23:6b:e5:0d:59:02:81:13:75:96:67:e0:
2e:b0:bc:3b:ab:d0:cd:c6:9f:c4:7b:7f:de:09:b6:
48:f4:9d:03:19:1b:19:f5:27:33:3f:c7:1f:68:69:
43:75:68:63:d6:a9:51:a9:50:0b:af:07:69:cc:ca:
71:34:4a:04:17:f1:bb:a2:7b:e7:5f:62:e2:01:a5:
70:1d:dc:9e:9b:54:51:f5:fc:2b:78:9f:ed:f2:65:
88:58:18:17:a9:6e:b5:77:b2:29:3d:dc:9f:1a:1d:
f7:35:5f:02:a3:e5:c0:79:3a:da:a4:ad:73:a3:e4:
6a:2f:2b:b3:68:0f:e1:4b:f5:72:8c:f6:ed:56:79:
79:30:88:8b:c4:ff:ba:76:70:e8:96:cb:5d:ec:1f:
18:17:6b:09:ad:05:bb:c5:b1:a1:83:72:11:63:b6:
6f:fb:94:38:6a:de:a3:66:40:41:f0:53:f8:1e:31:
68:a2:18:d0:ab:47:16:01:5f:82:c0:29:01:e4:2b:
5a:e7:3b:ea:23:bc:d0:dc:44:90:eb:c3:55:35:c0:
c3:b2:c0:c2:c6:72:18:c7:93:1e:3d:b9:eb:3e:7a:
af:e2:ab:46:25:4b:12:d0:3b:73:25:2c:e9:23:bb:
5e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F3:0D:F4:86:2B:D6:B0:7B:9C:CE:EC:29:06:C1:0C:17:B6:8E:E0
X509v3 Authority Key Identifier:
keyid:31:97:F2:74:04:95:39:DA:2A:45:E2:CC:06:AA:5C:C8:74:E6:27:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZfydASVOdoqReLMBqpcyHTmJ28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:8e:d0:11:e6:32:e5:57:9b:a4:72:89:08:c5:f5:e6:94:e5:
db:4f:2e:e0:c2:b8:f2:2f:ce:a4:30:28:2a:ac:f4:14:3e:d9:
63:28:d8:d6:79:1c:62:80:86:79:ce:f9:40:96:91:f6:2c:c2:
db:d6:02:a8:84:b3:68:2c:d9:36:e3:83:57:61:ce:64:aa:1f:
4b:9f:9c:86:41:1b:b6:5d:13:65:cc:7c:38:08:e6:84:56:e3:
ab:80:f3:b8:f6:9a:f5:c8:49:f1:c4:3e:d9:43:37:5e:18:1a:
eb:d5:0e:00:1b:7e:b0:08:ae:e3:85:70:98:fa:ee:16:7f:9e:
b7:89:0a:f1:7c:20:1d:8c:41:dc:c3:30:dd:31:c7:7f:aa:35:
b5:62:e5:cb:cd:31:2e:74:fb:04:c4:6a:95:d8:87:40:c3:4d:
b1:54:fe:c2:b5:e9:fe:4d:75:91:a7:2f:d8:fa:df:05:d9:8b:
70:d4:ff:26:1c:2c:b9:fe:18:5f:ed:6a:4a:be:be:a9:ef:31:
cd:33:1d:42:20:d8:24:87:10:47:19:a2:75:8f:b3:46:b9:a4:
85:a2:5b:b2:2f:14:08:0e:e8:7c:85:7a:ed:10:df:e0:b5:32:
d6:13:3c:32:5c:de:df:15:fe:9d:38:aa:e9:42:06:4d:13:38:
b0:d8:06:88
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
QkY5NDExMC8GA1UEBRMoMzE5N0YyNzQwNDk1MzlEQTJBNDVFMkNDMDZBQTVDQzg3
NEU2Mjc2RjAeFw0yNjExMTMwODI3MzlaFw0yNjExMjAwODI3MzlaMBgxFjAUBgNV
BAMTDTZhZjZjOWZjLWNhYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxtph7+jXMgm08hTNGjN9YAiNr5Q1ZAoETdZZn4C6wvDur0M3Gn8R7f94Jtkj0
nQMZGxn1JzM/xx9oaUN1aGPWqVGpUAuvB2nMynE0SgQX8buie+dfYuIBpXAd3J6b
VFH1/Ct4n+3yZYhYGBepbrV3sik93J8aHfc1XwKj5cB5OtqkrXOj5GovK7NoD+FL
9XKM9u1WeXkwiIvE/7p2cOiWy13sHxgXawmtBbvFsaGDchFjtm/7lDhq3qNmQEHw
U/geMWiiGNCrRxYBX4LAKQHkK1rnO+ojvNDcRJDrw1U1wMOywMLGchjHkx49ues+
eq/iq0YlSxLQO3MlLOkju17dAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8vMN9IYr
1rB7nM7sKQbBDBe2juAwHwYDVR0jBBgwFoAUMZfydASVOdoqReLMBqpcyHTmJ28w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlCRjk0LzgzNTNFM0YwNjUy
OTExRjE4Qzg2RjhBNzlBRUU1MjhFL01aZnlkQVNWT2RvcVJlTE1CcXBjeUhUbUoy
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvTVpmeWRBU1ZPZG9xUmVMTUJxcGN5SFRtSjI4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlC
Rjk0LzgzNTNFM0YwNjUyOTExRjE4Qzg2RjhBNzlBRUU1MjhFL01aZnlkQVNWT2Rv
cVJlTE1CcXBjeUhUbUoyOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBGjtAR5jLlV5ukcokIxfXmlOXbTy7gwrjyL86kMCgqrPQUPtljKNjWeRxigIZ5
zvlAlpH2LMLb1gKohLNoLNk244NXYc5kqh9Ln5yGQRu2XRNlzHw4COaEVuOrgPO4
9pr1yEnxxD7ZQzdeGBrr1Q4AG36wCK7jhXCY+u4Wf563iQrxfCAdjEHcwzDdMcd/
qjW1YuXLzTEudPsExGqV2IdAw02xVP7Cten+TXWRpy/Y+t8F2Ytw1P8mHCy5/hhf
7WpKvr6p7zHNMx1CINgkhxBHGaJ1j7NGuaSFoluyLxQIDuh8hXrtEN/gtTLWEzwy
XN7fFf6dOKrpQgZNEziw2AaI
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:08:23 2026 by rpki-client