
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft
File: ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft (raw, json)
Hash identifier: tbp6Pct8XoXoiUsvQSm27c2MWEHKoKv49KgsIYCQep0=
Subject key identifier: 82:7F:97:B2:C3:1C:60:95:8F:EA:62:2F:C6:A9:28:D9:0C:FD:D9:E3
Authority key identifier: 65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E
Certificate issuer: /CN=A91D58F6/serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E
Certificate serial: 0F33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft
Manifest number: 0F23
Signing time: Sat 26 Sep 2026 17:39:30 +0000
Manifest this update: Sat 26 Sep 2026 17:39:29 +0000
Manifest next update: Sat 03 Oct 2026 17:39:29 +0000
Files and hashes: 1: ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl (hash: PGZdEDu0pN2ngJHsgYvSjfd+D3Rw5hGlTPlAK8w9HOg=)
2: C0743AE8A6B611E9AB731B69C4F9AE02.roa (hash: KpHP3J6wffkQyJYpj3PgvrHuC90SNYDQDGnCB+spAtI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl
rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 17:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3891 (0xf33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D58F6, serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E
Validity
Not Before: Sep 26 17:39:29 2026 GMT
Not After : Oct 3 17:39:29 2026 GMT
Subject: CN=6ab80351-742e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:5c:1b:85:28:02:ad:36:5d:bc:1f:e8:b2:
b5:95:1d:38:97:0e:cd:65:a2:fb:79:6e:46:26:cf:
58:85:04:3a:08:25:43:fb:98:ee:7f:1f:2d:b0:a5:
6a:9f:c0:b9:e2:d7:f6:fd:78:a9:e0:e5:53:a2:37:
d1:b1:1b:53:8a:2a:f0:87:b8:7a:33:c4:60:fa:3c:
a9:9b:49:06:9c:9c:85:6e:6f:73:2c:47:16:11:11:
1e:e8:61:5e:55:5d:ea:8d:d2:54:34:6a:97:d4:3c:
93:f8:74:d0:25:36:0e:3c:e8:3d:06:85:4e:8f:1a:
45:96:55:73:5a:94:fd:ea:6c:fd:6e:2d:fb:d0:25:
bf:83:a0:68:63:e3:3d:45:25:08:d5:2d:bb:86:35:
3a:93:52:a8:38:4c:a1:a9:46:26:ac:18:0f:1c:0f:
a3:28:fa:58:87:8e:69:0e:7a:c2:a6:a5:13:38:41:
f0:aa:78:17:1c:0c:92:66:9d:16:42:c9:51:b2:53:
da:4d:70:f2:e7:a3:5c:46:0e:26:e5:e9:90:ef:56:
6d:50:71:22:1f:eb:5d:30:66:57:85:b9:fe:6a:1a:
a4:c7:e4:5a:6d:05:b6:28:e0:d7:60:32:95:40:3f:
59:34:b7:fe:36:68:c5:c2:95:cc:1c:6d:dc:a7:ef:
ff:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7F:97:B2:C3:1C:60:95:8F:EA:62:2F:C6:A9:28:D9:0C:FD:D9:E3
X509v3 Authority Key Identifier:
keyid:65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:cf:38:8a:0b:f2:c0:9a:6f:22:4a:d1:16:12:d7:d3:fd:54:
a8:67:aa:12:c3:02:b3:c3:e7:f4:fa:32:43:04:17:13:0f:f9:
7a:06:d9:6a:d4:3b:a1:4f:e6:aa:51:9a:1c:ae:96:4e:ed:dc:
46:21:d3:ec:28:9b:70:ab:be:f4:23:1b:4b:4b:28:f6:c3:fe:
ba:e8:6b:01:ab:d7:ff:3e:09:dc:5b:67:7b:3d:66:66:e9:83:
9f:e8:49:7e:39:a1:94:73:41:df:98:fb:5b:bb:8d:c6:33:24:
54:1c:f7:d2:09:c6:47:41:40:82:c3:aa:f1:36:be:11:e9:9f:
99:83:f8:68:61:37:6c:dc:ca:f7:ca:b8:75:90:61:eb:af:7a:
a1:50:14:48:e3:fa:e9:69:44:16:0a:98:e1:dc:70:f2:a6:1f:
8c:4f:d0:2c:1c:0f:af:1b:70:58:7b:72:1c:f4:e8:68:65:8f:
cc:7a:bb:a7:77:02:4c:1b:99:bc:63:0e:c2:ad:73:9d:3c:24:
f6:45:df:33:8e:04:bb:37:10:0b:81:d2:01:fa:2c:41:cb:10:
29:76:0c:b1:6e:b9:90:03:b8:21:e0:c9:7c:4b:5d:19:10:cf:
84:6d:02:0a:7e:cf:b0:f0:3f:f8:58:db:9a:ac:15:ac:ec:e1:
25:c3:dc:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDU4RjYxMTAvBgNVBAUTKDY1RDkxOTBGRkM4NjlDOTRGNTgyMTkwRkFBRDQwRjA1
MTRBNUJBNEUwHhcNMjYwOTI2MTczOTI5WhcNMjYxMDAzMTczOTI5WjAYMRYwFAYD
VQQDEw02YWI4MDM1MS03NDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxGFcG4UoAq02Xbwf6LK1lR04lw7NZaL7eW5GJs9YhQQ6CCVD+5jufx8tsKVq
n8C54tf2/Xip4OVTojfRsRtTiirwh7h6M8Rg+jypm0kGnJyFbm9zLEcWEREe6GFe
VV3qjdJUNGqX1DyT+HTQJTYOPOg9BoVOjxpFllVzWpT96mz9bi370CW/g6BoY+M9
RSUI1S27hjU6k1KoOEyhqUYmrBgPHA+jKPpYh45pDnrCpqUTOEHwqngXHAySZp0W
QslRslPaTXDy56NcRg4m5emQ71ZtUHEiH+tdMGZXhbn+ahqkx+RabQW2KODXYDKV
QD9ZNLf+NmjFwpXMHG3cp+//lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIJ/l7LD
HGCVj+piL8apKNkM/dnjMB8GA1UdIwQYMBaAFGXZGQ/8hpyU9YIZD6rUDwUUpbpO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThGNi81NkJFMEM3Q0E2
QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25KVDFnaGtQcXRRUEJSU2x1
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pka1pEX3lHbkpUMWdoa1BxdFFQQlJTbHVrNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NThGNi81NkJFMEM3Q0E2QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25K
VDFnaGtQcXRRUEJSU2x1azQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARc84igvywJpvIkrRFhLX0/1UqGeqEsMCs8Pn9PoyQwQXEw/5egbZatQ7oU/m
qlGaHK6WTu3cRiHT7CibcKu+9CMbS0so9sP+uuhrAavX/z4J3Ftnez1mZumDn+hJ
fjmhlHNB35j7W7uNxjMkVBz30gnGR0FAgsOq8Ta+EemfmYP4aGE3bNzK98q4dZBh
6696oVAUSOP66WlEFgqY4dxw8qYfjE/QLBwPrxtwWHtyHPToaGWPzHq7p3cCTBuZ
vGMOwq1znTwk9kXfM44EuzcQC4HSAfosQcsQKXYMsW65kAO4IeDJfEtdGRDPhG0C
Cn7PsPA/+FjbmqwVrOzhJcPcaQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 23:31:29 2026 by rpki-client