
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft
File: zIO7bQqhd53qFp7bpKQCKN4hvXs.mft (raw, json)
Hash identifier: l5EM6YqB75IvUhqZ72bcOP8L90PuiwlK/l99jlP1TrQ=
Subject key identifier: 60:37:77:96:49:EF:76:D1:96:D4:E9:55:1E:14:DD:D4:EE:B3:C7:55
Authority key identifier: CC:83:BB:6D:0A:A1:77:9D:EA:16:9E:DB:A4:A4:02:28:DE:21:BD:7B
Certificate issuer: /CN=A91D493B/serialNumber=CC83BB6D0AA1779DEA169EDBA4A40228DE21BD7B
Certificate serial: 0404
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft
Manifest number: 03FD
Signing time: Thu 23 Jul 2026 01:19:43 +0000
Manifest this update: Thu 23 Jul 2026 01:19:43 +0000
Manifest next update: Thu 30 Jul 2026 01:19:43 +0000
Files and hashes: 1: zIO7bQqhd53qFp7bpKQCKN4hvXs.crl (hash: O+oBJ80P3rMJRbhasMGIonj+cpAYL0bY0lMPVo/xhng=)
2: 684DDD32CAB311ECBBCE9843C4F9AE02.roa (hash: 9Qc71tRXjbo6SI5tLjNMPaseC4lt8mw3nTisxYF0bHw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.crl
rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:19:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1028 (0x404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D493B, serialNumber=CC83BB6D0AA1779DEA169EDBA4A40228DE21BD7B
Validity
Not Before: Jul 23 01:19:43 2026 GMT
Not After : Jul 30 01:19:43 2026 GMT
Subject: CN=6a616c2f-c528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:37:06:57:d8:b9:51:e3:d7:76:ee:ca:98:c7:
64:fd:8d:3f:ee:31:b8:cd:38:62:5d:f2:cb:9f:2c:
68:45:a4:10:0e:30:c7:62:fd:67:c1:7e:39:aa:3e:
98:1a:be:b0:31:c7:82:58:ca:42:ea:a1:86:95:56:
21:b7:22:1e:72:f5:b3:b2:2d:ae:ca:81:92:bf:d3:
3c:c2:77:ec:9c:ab:88:10:f0:2f:35:df:6b:a4:df:
d3:fd:dd:ec:6e:19:5c:0c:f8:40:73:ec:a6:d4:43:
81:82:3d:12:a2:a7:05:89:d7:07:8b:1d:c5:5a:2c:
c0:40:e4:44:cb:f1:ca:02:d5:5e:7e:06:89:86:52:
81:25:f5:4d:63:a5:9f:23:cb:91:09:70:61:62:ff:
0c:78:69:8f:81:c0:06:f3:d9:a8:fa:0b:4d:cd:f0:
23:78:1b:d0:b9:4d:5d:3b:af:db:1b:06:8b:a4:47:
1d:61:f5:54:b0:3b:99:32:a9:1a:55:56:3d:ba:a9:
f9:bc:ed:1e:e3:27:c9:61:be:0c:a5:4e:7c:19:f0:
8e:de:11:b6:73:1b:18:90:c4:0f:06:2a:15:58:0a:
e2:ab:47:f3:92:f4:3c:80:d0:b0:7f:0a:a1:63:93:
cb:b3:d7:4b:f4:c9:8f:4f:2b:cf:39:cc:0d:ca:76:
72:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:37:77:96:49:EF:76:D1:96:D4:E9:55:1E:14:DD:D4:EE:B3:C7:55
X509v3 Authority Key Identifier:
keyid:CC:83:BB:6D:0A:A1:77:9D:EA:16:9E:DB:A4:A4:02:28:DE:21:BD:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3e:46:2a:8b:ac:d8:54:9d:7a:c0:2a:01:3e:12:f8:d7:61:
05:e9:00:88:d6:04:e8:c1:eb:c9:6c:3b:b6:6f:e2:4c:f7:18:
b6:a5:c1:16:b1:fe:6b:a3:f9:41:f3:a1:d5:62:4b:20:f0:12:
64:28:ab:eb:80:32:f3:2e:17:12:bf:4a:14:52:96:04:b3:fb:
fa:97:c7:f9:97:41:30:6c:82:70:46:8f:f9:5e:82:aa:f2:bf:
54:f2:d8:93:78:4a:0a:7b:36:26:49:8c:3c:19:b3:f7:31:06:
08:dd:f3:17:2e:dc:91:72:a2:5d:3e:8b:50:5b:4f:20:20:79:
3f:af:c7:f8:37:ed:93:ae:4c:0e:a6:15:d0:eb:51:f1:08:49:
35:8f:80:8f:0b:73:5c:35:fa:9c:59:cc:06:96:da:f7:44:94:
92:01:b8:aa:c9:07:d1:06:f8:ef:b4:5f:a5:f7:9c:24:21:1c:
dc:26:b2:f5:e0:6c:5e:b1:5c:2c:50:84:91:bd:b4:85:13:96:
65:33:c4:39:95:34:d2:38:c4:9b:ba:f2:7a:2f:80:47:21:73:
a8:0b:e0:f0:be:cd:8e:fc:3f:94:f7:d2:b5:d7:2c:4a:44:1e:
b4:b4:3e:61:6d:7c:cc:83:31:45:79:32:37:a7:a3:2d:48:7c:
d1:2c:4b:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQ5M0IxMTAvBgNVBAUTKENDODNCQjZEMEFBMTc3OURFQTE2OUVEQkE0QTQwMjI4
REUyMUJEN0IwHhcNMjYwNzIzMDExOTQzWhcNMjYwNzMwMDExOTQzWjAYMRYwFAYD
VQQDEw02YTYxNmMyZi1jNTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8TcGV9i5UePXdu7KmMdk/Y0/7jG4zThiXfLLnyxoRaQQDjDHYv1nwX45qj6Y
Gr6wMceCWMpC6qGGlVYhtyIecvWzsi2uyoGSv9M8wnfsnKuIEPAvNd9rpN/T/d3s
bhlcDPhAc+ym1EOBgj0SoqcFidcHix3FWizAQOREy/HKAtVefgaJhlKBJfVNY6Wf
I8uRCXBhYv8MeGmPgcAG89mo+gtNzfAjeBvQuU1dO6/bGwaLpEcdYfVUsDuZMqka
VVY9uqn5vO0e4yfJYb4MpU58GfCO3hG2cxsYkMQPBioVWAriq0fzkvQ8gNCwfwqh
Y5PLs9dL9MmPTyvPOcwNynZylQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGA3d5ZJ
73bRltTpVR4U3dTus8dVMB8GA1UdIwQYMBaAFMyDu20KoXed6hae26SkAijeIb17
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDkzQi9EQkFEMzdBMENB
QUUxMUVDODI0MTI4MERDNEY5QUUwMi96SU83YlFxaGQ1M3FGcDdicEtRQ0tONGh2
WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pJTzdiUXFoZDUzcUZwN2JwS1FDS040aHZYcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDkzQi9EQkFEMzdBMENBQUUxMUVDODI0MTI4MERDNEY5QUUwMi96SU83YlFxaGQ1
M3FGcDdicEtRQ0tONGh2WHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApz5GKous2FSdesAqAT4S+NdhBekAiNYE6MHryWw7tm/iTPcYtqXBFrH+a6P5
QfOh1WJLIPASZCir64Ay8y4XEr9KFFKWBLP7+pfH+ZdBMGyCcEaP+V6CqvK/VPLY
k3hKCns2JkmMPBmz9zEGCN3zFy7ckXKiXT6LUFtPICB5P6/H+Dftk65MDqYV0OtR
8QhJNY+AjwtzXDX6nFnMBpba90SUkgG4qskH0Qb477RfpfecJCEc3Cay9eBsXrFc
LFCEkb20hROWZTPEOZU00jjEm7ryei+ARyFzqAvg8L7Njvw/lPfStdcsSkQetLQ+
YW18zIMxRXkyN6ejLUh80SxLog==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:18:50 2026 by rpki-client