
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
File: ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft (raw, json)
Hash identifier: BhyZOsoHj9f1xtj7SOYftQNxeOAqmof5XocZD6Xt+oU=
Subject key identifier: 86:30:7F:43:BC:46:7C:16:F2:C8:E3:D7:15:31:A8:63:EA:64:B0:9F
Authority key identifier: 65:E0:AF:A4:D1:01:BA:A0:5D:42:5D:EB:7C:25:28:96:CB:8D:5A:86
Certificate issuer: /CN=A91E13CF/serialNumber=65E0AFA4D101BAA05D425DEB7C252896CB8D5A86
Certificate serial: AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
Manifest number: A4
Signing time: Thu 23 Jul 2026 09:06:15 +0000
Manifest this update: Thu 23 Jul 2026 09:06:14 +0000
Manifest next update: Thu 30 Jul 2026 09:06:14 +0000
Files and hashes: 1: ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl (hash: yfRwX8VixVf3UwvkP9W9xb+Kuxa+tTbaQO3UoYGRXB0=)
2: D88B7AD48E3511F0A7463923C4F9AE02.roa (hash: uODZblgFbKItTmQLR70yrBmfsX9HkwmHlSn392rNiq0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl
rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E13CF, serialNumber=65E0AFA4D101BAA05D425DEB7C252896CB8D5A86
Validity
Not Before: Jul 23 09:06:14 2026 GMT
Not After : Jul 30 09:06:14 2026 GMT
Subject: CN=6a61d987-6635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:d2:c2:cd:1a:bd:15:1a:f8:ea:8e:67:70:
8c:bf:a1:bd:45:b0:ac:31:72:d1:5e:c0:d5:90:a3:
4f:c6:98:e7:b3:34:32:24:ef:16:01:ed:d1:74:aa:
81:7b:7d:11:22:57:ca:04:41:19:a5:6f:e0:71:bb:
3b:36:c6:4d:12:63:48:07:c9:67:ba:b5:80:eb:91:
8e:0f:14:59:2a:0f:2b:f0:f0:27:f3:97:be:71:4e:
64:32:76:1c:e9:94:e5:e8:1e:6b:5d:2d:a6:95:14:
5e:a6:5d:40:c5:76:4d:ed:60:f3:0d:62:3e:9a:46:
ac:2e:c5:20:14:c3:f7:18:67:18:89:01:03:36:aa:
d8:1d:9b:b8:2b:84:c6:04:1a:69:bd:31:6a:a7:bf:
e5:72:a2:9b:e8:5e:b9:0b:0a:46:ff:58:f9:b4:4c:
a1:a1:90:30:e4:aa:03:7e:39:54:9f:9d:52:54:12:
9a:f3:25:ed:29:78:e0:28:97:99:ce:df:b5:97:29:
95:db:94:f0:fa:8f:f5:91:70:04:e1:58:44:ab:e2:
b1:66:85:93:4b:95:1d:51:19:dc:02:7c:f2:72:37:
d9:c8:86:98:67:bf:d0:92:5c:e8:b9:b6:cb:f4:e8:
d3:d3:df:6a:a1:02:41:b6:20:8d:5d:ee:9c:59:bf:
ef:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:30:7F:43:BC:46:7C:16:F2:C8:E3:D7:15:31:A8:63:EA:64:B0:9F
X509v3 Authority Key Identifier:
keyid:65:E0:AF:A4:D1:01:BA:A0:5D:42:5D:EB:7C:25:28:96:CB:8D:5A:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:c8:41:07:1d:47:1b:a7:03:40:7c:7a:eb:d7:d4:70:d4:36:
b9:53:bb:97:d9:b9:a8:a0:0d:39:66:ad:81:32:30:4f:df:c0:
bf:a8:c0:5d:ff:7d:b6:cf:e0:62:f5:92:ea:24:86:04:c7:8e:
89:c5:fe:c4:cd:fa:c2:f1:d0:bb:d0:03:cd:b8:64:0d:36:14:
47:15:f7:bf:eb:3c:6a:31:ff:d7:a9:76:66:f8:be:2c:df:57:
6f:18:8f:29:ac:8e:83:4d:74:66:a5:53:3c:dd:e9:80:d7:f2:
66:c0:34:29:21:9c:3f:1c:62:96:d5:cc:1b:42:28:3a:30:7d:
de:76:bf:12:41:95:f0:bf:54:eb:11:70:5a:0b:97:4b:bf:cb:
47:98:ef:e8:dd:ea:80:db:27:d4:5b:d7:a8:a6:df:18:8b:22:
1b:40:cf:fa:92:d3:97:65:cf:af:d2:4f:9f:c4:b1:e5:c8:ad:
3f:6e:fa:89:d9:0d:3b:c4:f2:da:5d:a4:57:67:16:99:dc:5d:
42:8d:46:79:fd:fa:0f:3e:51:bd:45:5a:88:18:81:23:69:58:
d5:96:68:2d:3e:ab:a7:5c:3b:4e:3a:28:fa:cd:47:d0:ac:c1:
6a:27:0c:30:ea:6f:cf:5e:7d:74:3f:20:a4:29:10:3d:f9:f2:
f0:c2:ee:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTEzQ0YxMTAvBgNVBAUTKDY1RTBBRkE0RDEwMUJBQTA1RDQyNURFQjdDMjUyODk2
Q0I4RDVBODYwHhcNMjYwNzIzMDkwNjE0WhcNMjYwNzMwMDkwNjE0WjAYMRYwFAYD
VQQDEw02YTYxZDk4Ny02NjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtJ7Sws0avRUa+OqOZ3CMv6G9RbCsMXLRXsDVkKNPxpjnszQyJO8WAe3RdKqB
e30RIlfKBEEZpW/gcbs7NsZNEmNIB8lnurWA65GODxRZKg8r8PAn85e+cU5kMnYc
6ZTl6B5rXS2mlRRepl1AxXZN7WDzDWI+mkasLsUgFMP3GGcYiQEDNqrYHZu4K4TG
BBppvTFqp7/lcqKb6F65CwpG/1j5tEyhoZAw5KoDfjlUn51SVBKa8yXtKXjgKJeZ
zt+1lymV25Tw+o/1kXAE4VhEq+KxZoWTS5UdURncAnzycjfZyIaYZ7/QklzoubbL
9OjT099qoQJBtiCNXe6cWb/vYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIYwf0O8
RnwW8sjj1xUxqGPqZLCfMB8GA1UdIwQYMBaAFGXgr6TRAbqgXUJd63wlKJbLjVqG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTNDRi8xOTA2QUE0RThF
MzUxMUYwOUUwNUUzMTBDNEY5QUUwMi9aZUN2cE5FQnVxQmRRbDNyZkNVb2xzdU5X
b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1plQ3ZwTkVCdXFCZFFsM3JmQ1VvbHN1TldvWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTNDRi8xOTA2QUE0RThFMzUxMUYwOUUwNUUzMTBDNEY5QUUwMi9aZUN2cE5FQnVx
QmRRbDNyZkNVb2xzdU5Xb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFshBBx1HG6cDQHx669fUcNQ2uVO7l9m5qKANOWatgTIwT9/Av6jAXf99ts/g
YvWS6iSGBMeOicX+xM36wvHQu9ADzbhkDTYURxX3v+s8ajH/16l2Zvi+LN9XbxiP
KayOg010ZqVTPN3pgNfyZsA0KSGcPxxiltXMG0IoOjB93na/EkGV8L9U6xFwWguX
S7/LR5jv6N3qgNsn1FvXqKbfGIsiG0DP+pLTl2XPr9JPn8Sx5citP276idkNO8Ty
2l2kV2cWmdxdQo1Gef36Dz5RvUVaiBiBI2lY1ZZoLT6rp1w7Tjoo+s1H0KzBaicM
MOpvz159dD8gpCkQPfny8MLuGw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:52:12 2026 by rpki-client