
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
File: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json)
Hash identifier: iJil54+/e2ZUlG/e2nECqJhdhPWXeR5w6+FKSji+odI=
Subject key identifier: 57:7F:14:F3:DA:9D:4C:E2:4E:88:3E:5C:BB:45:AD:74:62:9D:DE:79
Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29
Certificate issuer: /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529
Certificate serial: 0180
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
Manifest number: 0170
Signing time: Fri 25 Sep 2026 04:54:08 +0000
Manifest this update: Fri 25 Sep 2026 04:54:07 +0000
Manifest next update: Fri 02 Oct 2026 04:54:07 +0000
Files and hashes: 1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: pvAmBb+s3DKOi6WMFy//NO447JWjBrnU++gJwGKGF30=)
2: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: XAAQs6VvWW3MlpS05j2NWzqBVUmAKDnHpobUBOoE4/o=)
3: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: A7rSSZVeM5zH7Lu6nq0wtI2MJAwPFWQR7zTSTecfo9k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl
rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:54:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384 (0x180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529
Validity
Not Before: Sep 25 04:54:07 2026 GMT
Not After : Oct 2 04:54:07 2026 GMT
Subject: CN=6ab5fe70-6079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b1:67:da:4f:21:0e:0f:f7:21:e1:e9:e1:bc:
13:fc:01:ad:f7:db:76:9f:ff:9b:0a:8f:2a:42:3e:
2d:4b:29:22:29:34:bc:25:31:3b:33:7f:75:63:ef:
07:4d:ae:18:f7:03:89:f5:cd:e8:a7:fc:a9:35:f8:
be:b5:04:8e:c8:9e:43:e1:21:1f:6e:48:27:77:88:
e2:5b:28:89:cd:a2:42:85:9d:5a:bb:3e:a6:43:02:
a9:e1:14:b1:03:c9:af:bf:5f:65:e4:e0:03:cb:84:
a3:ae:bb:28:ea:cf:70:83:15:20:ae:9c:4d:12:04:
29:76:b6:45:45:a7:ce:dd:ba:f8:ab:77:ae:37:a7:
25:98:22:13:85:28:bb:5f:6e:eb:66:d5:d8:c4:e9:
89:c7:f0:12:67:b6:dc:00:04:08:e9:25:76:72:b3:
c7:eb:55:5d:71:04:cf:05:af:46:69:c3:14:d6:ea:
b8:4e:15:72:01:ae:b0:c3:af:cd:81:0c:c7:67:87:
60:9d:63:f1:98:e4:e8:7b:bc:d7:12:21:34:bc:3c:
f6:b0:2c:41:22:3a:d3:bb:de:a7:d5:be:d8:6d:6e:
fa:9e:51:c7:5b:84:ac:6c:50:32:06:d5:f8:38:51:
56:39:bb:93:1d:34:f2:28:f7:94:8a:f5:5f:34:a7:
92:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7F:14:F3:DA:9D:4C:E2:4E:88:3E:5C:BB:45:AD:74:62:9D:DE:79
X509v3 Authority Key Identifier:
keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:4b:71:c5:2e:19:9d:66:85:d0:32:61:33:0d:cd:07:35:28:
fa:2a:05:c7:bd:cf:fc:20:9a:d8:2f:0b:b8:0e:d3:4c:aa:08:
ca:57:5b:8a:b0:ac:0c:60:92:59:86:09:89:61:a5:5c:b6:8b:
68:a5:79:d4:3a:0c:fa:69:c3:49:53:fc:9a:90:bb:1b:de:3b:
fa:8c:92:0b:55:81:f8:ce:37:ce:5f:ca:d0:00:00:b3:c0:c3:
12:85:93:29:5c:99:b6:9f:6f:a1:d2:2b:36:68:43:d6:3f:48:
88:a7:97:7d:21:2a:0b:d3:db:9f:c1:62:30:69:b3:57:c4:31:
ed:33:c6:21:00:d6:c1:4e:53:e0:9c:4e:61:98:b3:b2:0c:ef:
a7:cf:b6:f4:00:f3:55:dc:47:b4:5a:20:57:bb:52:9b:71:72:
91:03:e1:92:ca:7a:f5:90:df:8d:56:00:6f:8a:82:3e:43:7f:
10:06:7c:3c:d2:6f:e5:bb:94:11:5e:23:fc:b7:c6:e2:07:60:
2d:0d:f6:66:a6:4a:5e:05:cd:f0:33:5c:ee:d3:11:96:3f:2c:
a5:8b:14:41:45:92:f0:6d:48:b5:84:35:92:8e:14:cc:24:d0:
82:4e:37:13:1c:cf:4b:7c:92:81:00:b4:3f:52:f0:be:09:b5:
40:ff:01:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0NBRjExMTAvBgNVBAUTKDY2OTQxREE3RUFGMzBFOTM0NEUwMzIxRjBCNzU0RTdB
RUZGQzM1MjkwHhcNMjYwOTI1MDQ1NDA3WhcNMjYxMDAyMDQ1NDA3WjAYMRYwFAYD
VQQDEw02YWI1ZmU3MC02MDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0rFn2k8hDg/3IeHp4bwT/AGt99t2n/+bCo8qQj4tSykiKTS8JTE7M391Y+8H
Ta4Y9wOJ9c3op/ypNfi+tQSOyJ5D4SEfbkgnd4jiWyiJzaJChZ1auz6mQwKp4RSx
A8mvv19l5OADy4Sjrrso6s9wgxUgrpxNEgQpdrZFRafO3br4q3euN6clmCIThSi7
X27rZtXYxOmJx/ASZ7bcAAQI6SV2crPH61VdcQTPBa9GacMU1uq4ThVyAa6ww6/N
gQzHZ4dgnWPxmOToe7zXEiE0vDz2sCxBIjrTu96n1b7YbW76nlHHW4SsbFAyBtX4
OFFWObuTHTTyKPeUivVfNKeSMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFd/FPPa
nUziTog+XLtFrXRind55MB8GA1UdIwQYMBaAFGaUHafq8w6TROAyHwt1Tnrv/DUp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0FGMS8wMDMxM0MzMjhB
QUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRwTkU0RElmQzNWT2V1XzhO
U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1pwUWRwLXJ6RHBORTRESWZDM1ZPZXVfOE5Tay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Q0FGMS8wMDMxM0MzMjhBQUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRw
TkU0RElmQzNWT2V1XzhOU2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR0txxS4ZnWaF0DJhMw3NBzUo+ioFx73P/CCa2C8LuA7TTKoIyldbirCsDGCS
WYYJiWGlXLaLaKV51DoM+mnDSVP8mpC7G947+oySC1WB+M43zl/K0AAAs8DDEoWT
KVyZtp9vodIrNmhD1j9IiKeXfSEqC9Pbn8FiMGmzV8Qx7TPGIQDWwU5T4JxOYZiz
sgzvp8+29ADzVdxHtFogV7tSm3FykQPhksp69ZDfjVYAb4qCPkN/EAZ8PNJv5buU
EV4j/LfG4gdgLQ32ZqZKXgXN8DNc7tMRlj8spYsUQUWS8G1ItYQ1ko4UzCTQgk43
ExzPS3ySgQC0P1Lwvgm1QP8Bsg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 11:01:46 2026 by rpki-client