
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
File: 0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft (raw, json)
Hash identifier: zHAH4vEY3JI+o5XBB0DWxBdyZPFLxhbkQ279rjwnDnU=
Subject key identifier: 24:39:51:A0:16:B6:21:A9:88:4C:77:8D:CE:87:AF:A5:38:75:CC:05
Authority key identifier: D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24
Certificate issuer: /CN=A91C430B/serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
Manifest number: C3
Signing time: Fri 09 Oct 2026 07:35:35 +0000
Manifest this update: Fri 09 Oct 2026 07:35:35 +0000
Manifest next update: Fri 16 Oct 2026 07:35:35 +0000
Files and hashes: 1: 0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl (hash: x7NyCrPs3d4MD12Y+n3id7JRNzXLEEm7gjpOwrP+nG8=)
2: 8988B2165DB111F1AB23B9ACA3833773.roa (hash: ad65XTYzHUp3cWmiBJTHs+rg9KKlQlfXiUUJuwHLk8k=)
3: 9484A13A622E11F1A36ED3DF7447A888.roa (hash: Kqin5t6HoE32APIOaQFq882jyRgeaOI3EzjEp6mHGyQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl
rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 07:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C430B, serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24
Validity
Not Before: Oct 9 07:35:35 2026 GMT
Not After : Oct 16 07:35:35 2026 GMT
Subject: CN=6ac89947-1fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d4:41:4e:de:7f:24:e5:05:49:09:a9:88:36:
b1:99:e2:78:29:18:72:9e:68:70:67:b1:34:7b:de:
6e:48:80:9e:7e:1b:3e:5c:33:94:02:00:6f:a5:88:
e4:75:28:07:ad:31:8d:ce:99:31:be:1b:05:df:79:
01:74:8b:66:63:59:ce:1f:80:a7:f6:45:99:d1:74:
68:26:ba:9a:33:28:a5:75:f0:6d:3d:54:5c:63:f9:
9b:a6:a7:01:0c:25:36:b7:ac:95:48:f0:93:77:8d:
cf:76:c4:0e:7f:cb:fb:9e:3a:da:59:fe:fa:5b:81:
4e:19:de:4f:c8:bc:2e:f5:29:33:67:d9:73:a4:c6:
b0:ae:ae:36:1a:75:b0:29:eb:69:10:5d:33:63:29:
28:29:8b:68:53:e5:0a:88:3d:0a:82:2a:97:33:dd:
eb:95:4a:df:83:e9:f8:f9:37:f9:a2:e4:95:4f:0f:
c1:21:ea:b6:fa:73:68:60:b8:46:bd:21:6f:dd:cb:
cd:5a:0f:15:a1:0f:ad:3b:46:2e:60:24:58:3a:41:
06:55:ce:83:5d:57:45:fb:97:72:1d:5e:e3:dd:e3:
c1:07:35:ee:48:63:3b:33:0b:1d:98:f3:2e:e2:c6:
f1:1f:c3:85:fa:c3:da:01:3c:60:0e:c7:ba:0e:9f:
7d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:39:51:A0:16:B6:21:A9:88:4C:77:8D:CE:87:AF:A5:38:75:CC:05
X509v3 Authority Key Identifier:
keyid:D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:6d:84:18:d2:2d:07:bb:7f:7c:14:3f:2b:7d:e9:8f:b0:57:
a0:b6:2f:c2:3a:60:2c:8a:1b:8b:b6:37:a6:5f:40:b9:b5:0f:
8a:5f:1f:3d:54:1a:4b:aa:16:06:20:c3:5c:31:8c:c4:dd:6c:
17:87:60:24:42:cb:f5:f1:b3:f6:58:30:a8:6d:17:c0:b7:46:
27:a7:a9:92:9a:c5:06:5d:af:65:4b:5e:e7:70:e5:47:73:75:
1b:b8:f7:1a:3b:f3:41:43:bb:53:d8:5f:1f:88:03:2d:db:90:
13:81:1e:81:24:33:dd:03:ff:c3:1a:54:90:40:31:f8:f3:74:
e7:9f:5e:96:9d:77:47:a1:13:70:a6:6e:74:49:fa:ad:75:55:
76:3e:ed:7c:79:be:c5:96:36:b9:fa:7d:f1:21:3a:8d:5c:b6:
dc:e1:b2:d1:24:52:4c:22:a1:94:93:11:4f:fc:86:4b:32:f0:
16:5b:c9:1a:ba:b5:10:30:df:1b:34:b4:93:5a:c7:10:51:87:
63:ab:35:87:f6:49:b4:b0:46:41:50:46:7e:af:f1:31:3c:d1:
75:0c:d8:00:af:bb:10:02:20:d0:26:3c:1a:af:dc:19:4b:05:
16:06:71:ea:19:f3:3d:06:f7:b6:2b:fc:2b:d8:b0:ce:a7:6e:
54:88:a0:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzQzMEIxMTAvBgNVBAUTKEQxOUJCNjhFM0NDREM0Qjc4Q0UzNkY4N0Y5NEU3Rjcx
MDUxMjNBMjQwHhcNMjYxMDA5MDczNTM1WhcNMjYxMDE2MDczNTM1WjAYMRYwFAYD
VQQDEw02YWM4OTk0Ny0xZmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxdRBTt5/JOUFSQmpiDaxmeJ4KRhynmhwZ7E0e95uSICefhs+XDOUAgBvpYjk
dSgHrTGNzpkxvhsF33kBdItmY1nOH4Cn9kWZ0XRoJrqaMyildfBtPVRcY/mbpqcB
DCU2t6yVSPCTd43PdsQOf8v7njraWf76W4FOGd5PyLwu9SkzZ9lzpMawrq42GnWw
KetpEF0zYykoKYtoU+UKiD0KgiqXM93rlUrfg+n4+Tf5ouSVTw/BIeq2+nNoYLhG
vSFv3cvNWg8VoQ+tO0YuYCRYOkEGVc6DXVdF+5dyHV7j3ePBBzXuSGM7MwsdmPMu
4sbxH8OF+sPaATxgDse6Dp99iQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCQ5UaAW
tiGpiEx3jc6Hr6U4dcwFMB8GA1UdIwQYMBaAFNGbto48zcS3jONvh/lOf3EFEjok
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDMwQi84MjM2RTI2MEE3
Q0UxMUYwOTc4OTQ1MjhDNEY5QUUwMi8wWnUyamp6TnhMZU00Mi1ILVU1X2NRVVNP
aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzBadTJqanpOeExlTTQyLUgtVTVfY1FVU09pUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NDMwQi84MjM2RTI2MEE3Q0UxMUYwOTc4OTQ1MjhDNEY5QUUwMi8wWnUyamp6TnhM
ZU00Mi1ILVU1X2NRVVNPaVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIG2EGNItB7t/fBQ/K33pj7BXoLYvwjpgLIobi7Y3pl9AubUPil8fPVQaS6oW
BiDDXDGMxN1sF4dgJELL9fGz9lgwqG0XwLdGJ6epkprFBl2vZUte53DlR3N1G7j3
GjvzQUO7U9hfH4gDLduQE4EegSQz3QP/wxpUkEAx+PN0559elp13R6ETcKZudEn6
rXVVdj7tfHm+xZY2ufp98SE6jVy23OGy0SRSTCKhlJMRT/yGSzLwFlvJGrq1EDDf
GzS0k1rHEFGHY6s1h/ZJtLBGQVBGfq/xMTzRdQzYAK+7EAIg0CY8Gq/cGUsFFgZx
6hnzPQb3tiv8K9iwzqduVIignQ==
-----END CERTIFICATE-----
Generated at Sat Oct 10 11:29:02 2026 by rpki-client