
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
File: zF1c4NwYIQkMvHU417txI3GQguc.mft (raw, json)
Hash identifier: NuLcdwjc8lL/RzyOpLzU/JTIauUm9f73IV/e5CkWs/c=
Subject key identifier: 50:07:B6:3C:05:2C:8B:AE:9F:13:4F:9E:11:06:09:49:B0:EF:86:E0
Authority key identifier: CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7
Certificate issuer: /CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
Certificate serial: 0933
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
Manifest number: 091D
Signing time: Sun 04 Oct 2026 20:16:57 +0000
Manifest this update: Sun 04 Oct 2026 20:16:56 +0000
Manifest next update: Sun 11 Oct 2026 20:16:56 +0000
Files and hashes: 1: zF1c4NwYIQkMvHU417txI3GQguc.crl (hash: CPxp08jeor9/fwGwIUKl55Cjn3N9I6J+pQ5z0ugwPY0=)
2: 3A4918D41DED11F18280100E163D8C67.roa (hash: uBhMZC0iLLV6DLGdu7CIjfThpqfIINH0g+r6R069pHs=)
3: A3FFFAF41DED11F18835BD3E163D8C67.roa (hash: ceBEeeb3UVqySdEEXNR+/hrnjzuoPEIkphnInujlh7k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl
rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 20:16:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2355 (0x933)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C91A6, serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
Validity
Not Before: Oct 4 20:16:56 2026 GMT
Not After : Oct 11 20:16:56 2026 GMT
Subject: CN=6ac2b439-abd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ce:5b:2f:7f:76:5f:e8:18:0a:4e:f6:b8:e7:
16:5e:4c:ec:81:42:2b:00:da:36:52:d0:4b:0e:86:
ca:f6:c6:7e:11:c1:3d:85:71:99:17:89:b4:c5:b7:
34:95:ba:30:eb:90:7b:10:1a:db:f7:cb:d9:98:2e:
7b:e2:73:1a:92:64:0a:ff:7a:e3:b9:f5:c2:9b:80:
4c:67:0b:0d:71:59:9b:a1:00:b0:a1:a1:06:fb:37:
74:23:9c:3d:7b:5e:ad:1d:89:50:09:e1:46:75:ce:
66:4a:6c:9c:1c:a2:fc:5a:48:f9:83:df:89:f2:21:
58:73:15:91:19:d7:e2:06:e7:81:8b:e2:0d:32:8a:
47:1a:d8:f7:b9:97:59:99:bc:51:b0:b3:33:c0:35:
80:d8:71:3f:57:9d:04:48:c2:ce:e7:50:ea:eb:ac:
8a:6c:45:1f:7d:fb:f2:4b:5f:19:7e:77:49:8c:ab:
42:0d:3c:ee:6b:56:0c:06:c9:dc:2c:26:90:5b:4f:
31:75:81:b3:91:9a:40:cb:10:cd:84:ce:3b:d3:01:
a0:e3:cc:14:03:33:ee:0e:36:33:3f:5f:2f:87:21:
a0:1f:da:92:14:ac:9f:b9:79:fc:ca:f3:a4:2e:91:
94:ba:fe:fe:28:d8:77:2f:c4:bb:94:eb:99:b3:fb:
5d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:07:B6:3C:05:2C:8B:AE:9F:13:4F:9E:11:06:09:49:B0:EF:86:E0
X509v3 Authority Key Identifier:
keyid:CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:11:9d:4d:b8:d8:2b:b2:72:a4:e6:fb:3f:33:b1:8a:49:56:
c9:f7:0e:39:ab:5c:34:f7:2c:0c:96:40:13:dc:99:e7:37:bc:
d2:cc:7b:ff:11:fe:4f:5d:ab:22:be:03:7b:e0:bd:6f:54:d3:
3b:53:20:60:a7:03:e7:8e:94:06:9f:f1:63:ce:0f:23:32:19:
3d:5f:d4:84:e0:38:93:29:2e:cd:37:0b:5a:03:4e:dd:b2:5f:
c1:ee:1b:a8:93:d0:5e:0d:e5:f3:12:36:79:87:cf:a8:4d:17:
ab:b6:8f:ee:96:f7:f7:90:fe:89:57:01:62:58:91:63:cd:ab:
ed:58:43:e7:4e:60:3d:1f:82:ee:84:06:52:db:4c:ca:f4:a5:
02:42:c4:3e:b5:b2:73:1a:63:74:84:62:cb:fb:62:e3:5b:68:
08:b9:99:f1:71:bf:64:4a:c0:81:54:e9:23:6d:a1:bd:f1:48:
eb:d9:db:8d:61:e6:74:77:42:93:91:f6:39:58:1b:77:f6:8a:
f3:7b:9a:aa:04:0d:43:b1:fd:2e:26:25:f5:cf:61:cd:a5:f0:
c0:90:8d:9c:37:49:56:5c:d4:e6:06:a0:71:54:6e:c5:7c:52:
87:b8:96:32:7f:46:c7:9e:64:38:50:fc:51:60:1a:9a:1a:0d:
c9:f1:06:cb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkxQTYxMTAvBgNVBAUTKENDNUQ1Q0UwREMxODIxMDkwQ0JDNzUzOEQ3QkI3MTIz
NzE5MDgyRTcwHhcNMjYxMDA0MjAxNjU2WhcNMjYxMDExMjAxNjU2WjAYMRYwFAYD
VQQDEw02YWMyYjQzOS1hYmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0c5bL392X+gYCk72uOcWXkzsgUIrANo2UtBLDobK9sZ+EcE9hXGZF4m0xbc0
lbow65B7EBrb98vZmC574nMakmQK/3rjufXCm4BMZwsNcVmboQCwoaEG+zd0I5w9
e16tHYlQCeFGdc5mSmycHKL8Wkj5g9+J8iFYcxWRGdfiBueBi+INMopHGtj3uZdZ
mbxRsLMzwDWA2HE/V50ESMLO51Dq66yKbEUfffvyS18ZfndJjKtCDTzua1YMBsnc
LCaQW08xdYGzkZpAyxDNhM470wGg48wUAzPuDjYzP18vhyGgH9qSFKyfuXn8yvOk
LpGUuv7+KNh3L8S7lOuZs/tdnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFAHtjwF
LIuunxNPnhEGCUmw74bgMB8GA1UdIwQYMBaAFMxdXODcGCEJDLx1ONe7cSNxkILn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTFBNi9CQTRDQ0UwRUQ3
MkIxMUVBOEMxQkJENERDNEY5QUUwMi96RjFjNE53WUlRa012SFU0MTd0eEkzR1Fn
dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pGMWM0TndZSVFrTXZIVTQxN3R4STNHUWd1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTFBNi9CQTRDQ0UwRUQ3MkIxMUVBOEMxQkJENERDNEY5QUUwMi96RjFjNE53WUlR
a012SFU0MTd0eEkzR1FndWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADBGdTbjYK7JypOb7PzOxiklWyfcOOatcNPcsDJZAE9yZ5ze80sx7/xH+T12r
Ir4De+C9b1TTO1MgYKcD546UBp/xY84PIzIZPV/UhOA4kykuzTcLWgNO3bJfwe4b
qJPQXg3l8xI2eYfPqE0Xq7aP7pb395D+iVcBYliRY82r7VhD505gPR+C7oQGUttM
yvSlAkLEPrWycxpjdIRiy/ti41toCLmZ8XG/ZErAgVTpI22hvfFI69nbjWHmdHdC
k5H2OVgbd/aK83uaqgQNQ7H9LiYl9c9hzaXwwJCNnDdJVlzU5gagcVRuxXxSh7iW
Mn9Gx55kOFD8UWAamhoNyfEGyw==
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:15:18 2026 by rpki-client