
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
File: Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft (raw, json)
Hash identifier: QiexCyDKZXuC9Z7rA0gKhoQc8awDNIyYMco+Ky4NBSI=
Subject key identifier: 90:0D:22:FE:AA:24:F1:48:AC:0F:E6:78:B6:D8:E3:FC:AC:A5:6B:B9
Authority key identifier: 66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A
Certificate issuer: /CN=A91C146D/serialNumber=664E59A000B91E72F803E6D86841154C8056B88A
Certificate serial: 012E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
Manifest number: 0125
Signing time: Wed 23 Sep 2026 05:38:50 +0000
Manifest this update: Wed 23 Sep 2026 05:38:50 +0000
Manifest next update: Wed 30 Sep 2026 05:38:50 +0000
Files and hashes: 1: Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl (hash: JtLqNmQonMjollATXkhZWqm2AEf29idelQ/k4RNot5g=)
2: 992A7358004211F0AC90656CC4F9AE02.roa (hash: p1iNzs7m8iHrfQ8AnJhFGKvDY9F4t1QWaHIUzSsJTWE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl
rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:38:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302 (0x12e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C146D, serialNumber=664E59A000B91E72F803E6D86841154C8056B88A
Validity
Not Before: Sep 23 05:38:50 2026 GMT
Not After : Sep 30 05:38:50 2026 GMT
Subject: CN=6ab365ea-06dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:ea:ea:94:5b:6d:96:6e:45:d4:9b:c7:5d:
87:22:31:af:81:ab:65:69:7b:6c:f4:3e:ee:28:40:
1e:b4:4e:08:87:36:82:51:89:e2:c9:91:3e:26:43:
d7:d0:21:e6:45:f6:0a:7f:0d:f6:b5:62:1a:a4:4b:
67:6c:4e:5e:6b:2d:75:33:a7:a7:bf:26:63:a8:f9:
9d:48:cc:b4:e5:1c:a5:9c:0e:3a:34:4d:5a:2e:c1:
7d:28:48:01:1d:29:3b:dd:e5:f4:4e:1a:98:cb:73:
f8:36:59:1c:31:4a:f4:b0:29:4b:be:f0:5d:fe:3b:
91:8f:d6:44:4e:79:4c:28:63:84:93:6f:95:5c:e1:
29:01:10:c8:50:4d:1b:72:98:70:53:2e:28:08:8b:
3b:4d:de:33:73:52:ed:af:95:4f:19:15:ab:15:d4:
db:cf:75:8d:68:39:12:07:82:d7:13:31:c4:8f:af:
0c:6f:b6:2c:cd:85:c6:e4:bb:77:01:dc:7e:bf:6b:
d8:91:97:e1:cc:cb:62:f5:60:ec:81:64:c6:04:70:
78:dd:5e:b9:9c:32:65:05:e6:6b:28:60:0a:0a:09:
07:82:a9:c8:f4:e2:9e:e1:b5:35:8a:84:ec:2a:77:
11:35:bb:44:e7:eb:a2:20:be:4b:84:64:14:a1:51:
d5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0D:22:FE:AA:24:F1:48:AC:0F:E6:78:B6:D8:E3:FC:AC:A5:6B:B9
X509v3 Authority Key Identifier:
keyid:66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:39:91:a3:11:51:f0:ca:00:21:03:a7:c6:e7:7a:65:eb:3f:
e5:d6:1b:a8:3d:29:3e:a7:9f:fe:0a:38:9e:5e:d5:b2:d6:46:
2d:e5:77:50:8f:51:f8:f6:b0:44:eb:e8:1b:c0:8b:b0:a7:66:
36:f2:f9:3b:96:0b:c0:80:89:69:80:22:1a:05:c8:d4:cf:3a:
1d:40:eb:f0:df:10:ce:d0:31:8e:de:3e:3f:44:31:ff:fb:e3:
8c:f2:6c:55:e9:69:f4:48:93:b0:19:f2:ab:bb:61:99:73:57:
09:ea:d8:a5:8f:66:b5:a7:dd:97:96:e0:1d:8a:13:a8:d6:3c:
88:9f:17:e3:65:da:45:91:ea:57:bd:19:de:63:c5:95:5d:9d:
78:58:bd:e5:a1:ff:26:27:2f:fb:ad:f9:d1:c2:24:30:3a:3c:
60:b0:75:b8:64:1d:c6:35:43:ce:69:1c:44:4e:ef:fe:8b:13:
1d:93:ba:b7:4a:0b:bf:b4:4a:4b:58:26:6b:a0:55:60:b5:f6:
16:9d:1f:2f:e2:9d:80:f9:c6:44:15:7d:7e:be:01:49:c8:16:
6d:51:98:58:ec:21:a3:5e:b7:b3:b8:51:84:2d:37:1c:77:22:
c9:13:53:ef:36:09:e6:4b:d8:c6:8c:ab:a7:c7:26:8e:df:ab:
49:53:66:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE0NkQxMTAvBgNVBAUTKDY2NEU1OUEwMDBCOTFFNzJGODAzRTZEODY4NDExNTRD
ODA1NkI4OEEwHhcNMjYwOTIzMDUzODUwWhcNMjYwOTMwMDUzODUwWjAYMRYwFAYD
VQQDEw02YWIzNjVlYS0wNmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyEjq6pRbbZZuRdSbx12HIjGvgatlaXts9D7uKEAetE4IhzaCUYniyZE+JkPX
0CHmRfYKfw32tWIapEtnbE5eay11M6envyZjqPmdSMy05RylnA46NE1aLsF9KEgB
HSk73eX0ThqYy3P4NlkcMUr0sClLvvBd/juRj9ZETnlMKGOEk2+VXOEpARDIUE0b
cphwUy4oCIs7Td4zc1Ltr5VPGRWrFdTbz3WNaDkSB4LXEzHEj68Mb7YszYXG5Lt3
Adx+v2vYkZfhzMti9WDsgWTGBHB43V65nDJlBeZrKGAKCgkHgqnI9OKe4bU1ioTs
KncRNbtE5+uiIL5LhGQUoVHVsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJANIv6q
JPFIrA/meLbY4/yspWu5MB8GA1UdIwQYMBaAFGZOWaAAuR5y+APm2GhBFUyAVriK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTQ2RC9FQ0IwMEI0MjAw
MzcxMUYwQkJENzI0NzVDNEY5QUUwMi9aazVab0FDNUhuTDRBLWJZYUVFVlRJQld1
SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1prNVpvQUM1SG5MNEEtYllhRUVWVElCV3VJby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MTQ2RC9FQ0IwMEI0MjAwMzcxMUYwQkJENzI0NzVDNEY5QUUwMi9aazVab0FDNUhu
TDRBLWJZYUVFVlRJQld1SW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUzmRoxFR8MoAIQOnxud6Zes/5dYbqD0pPqef/go4nl7VstZGLeV3UI9R+Paw
ROvoG8CLsKdmNvL5O5YLwICJaYAiGgXI1M86HUDr8N8QztAxjt4+P0Qx//vjjPJs
Velp9EiTsBnyq7thmXNXCerYpY9mtafdl5bgHYoTqNY8iJ8X42XaRZHqV70Z3mPF
lV2deFi95aH/Jicv+6350cIkMDo8YLB1uGQdxjVDzmkcRE7v/osTHZO6t0oLv7RK
S1gma6BVYLX2Fp0fL+KdgPnGRBV9fr4BScgWbVGYWOwho163s7hRhC03HHciyRNT
7zYJ5kvYxoyrp8cmjt+rSVNmWw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:42:43 2026 by rpki-client