
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
File: _ZFHrvajMNGN1MnP2GQvDtqnuQc.mft (raw, json)
Hash identifier: S1X/HvZ7YNDrCMYDHR8XMbCa5rIbyBCbWTMUn4z9GzA=
Subject key identifier: 6F:B0:16:0C:6C:89:5C:1F:11:9F:CF:F9:FA:87:7A:4D:7C:20:B0:94
Authority key identifier: FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07
Certificate issuer: /CN=A91E1853/serialNumber=FD9147AEF6A330D18DD4C9CFD8642F0EDAA7B907
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
Manifest number: AB
Signing time: Wed 23 Sep 2026 06:57:19 +0000
Manifest this update: Wed 23 Sep 2026 06:57:18 +0000
Manifest next update: Wed 30 Sep 2026 06:57:18 +0000
Files and hashes: 1: _ZFHrvajMNGN1MnP2GQvDtqnuQc.crl (hash: 7MpzPka8p8prN3v+NYsQe0IA/txxR0cS1on7SQ4CmQw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.crl
rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1853, serialNumber=FD9147AEF6A330D18DD4C9CFD8642F0EDAA7B907
Validity
Not Before: Sep 23 06:57:18 2026 GMT
Not After : Sep 30 06:57:18 2026 GMT
Subject: CN=6ab3784e-e97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:90:39:ea:e2:3d:d3:fd:25:8e:88:62:b0:7c:
96:48:24:5a:07:62:d9:f4:42:2c:01:0d:fe:85:0d:
a8:da:8e:6f:0d:54:93:ca:29:e8:07:50:cf:c0:d9:
1c:c2:5d:af:66:b7:5d:de:19:1c:f0:af:4b:4a:a5:
99:5b:19:ff:4a:17:38:40:72:ab:97:8c:b8:55:61:
1f:ba:db:52:d0:97:03:e3:d7:25:1b:a3:00:fb:e0:
30:85:3f:be:17:0a:95:bd:3d:ba:c9:e7:6c:28:ae:
4e:df:d2:6d:37:50:83:5e:27:83:c9:0a:5a:6e:8f:
9e:77:4d:ff:58:b9:b2:84:69:01:b7:74:c3:7a:78:
06:df:58:8c:cb:65:5d:b1:30:f5:bb:90:f3:d7:69:
4d:d7:8c:82:d5:a8:e5:0f:f1:11:2d:22:95:68:df:
70:e4:98:a0:a7:e5:6d:f1:b1:fa:c0:d7:8b:ea:ed:
ec:33:37:e3:7d:4a:40:5f:87:ce:c4:7b:41:c1:d9:
60:ba:68:d9:ee:f3:5b:ce:be:15:0a:de:8f:9e:ab:
01:7b:06:d4:76:cd:43:43:7a:58:c7:ee:1c:b9:4b:
72:07:06:9e:34:b2:7a:35:8c:5f:6a:96:99:98:d8:
9b:04:98:fe:ca:0b:17:05:ff:0e:c5:9c:d2:15:de:
e3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B0:16:0C:6C:89:5C:1F:11:9F:CF:F9:FA:87:7A:4D:7C:20:B0:94
X509v3 Authority Key Identifier:
keyid:FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:98:7f:82:35:6b:4d:4b:16:b3:0a:95:02:d7:1e:da:fd:f6:
b5:82:8e:10:1f:d2:60:14:5a:d2:9c:ca:85:87:c3:53:f2:db:
96:5f:7e:1f:89:d7:60:dc:67:14:51:bd:b0:cb:64:fe:f3:5c:
f6:d7:bd:0d:67:57:5b:13:b2:26:a4:15:dd:c7:88:3f:88:1d:
70:b4:34:74:d0:37:a8:d4:62:c6:b7:78:8c:b3:3e:89:f2:86:
39:71:c5:fb:2b:99:21:2e:b0:50:eb:51:e1:18:e0:a7:ec:38:
b0:ff:4c:af:99:e9:bd:5d:c2:87:06:03:db:83:fa:6e:29:f5:
93:b0:84:bf:b0:e4:fb:31:02:98:15:69:e9:c2:3d:48:85:37:
f5:c8:83:6e:d9:a8:03:1d:e8:f9:e6:a3:b1:ee:8c:af:cf:20:
36:dd:6f:38:e2:f6:d7:d9:43:14:59:25:62:ce:e8:76:6a:93:
5d:e9:25:82:27:55:e2:01:6e:b7:1a:41:54:06:8f:30:0a:8c:
ec:28:45:5f:21:83:8d:3c:ca:44:32:5b:6d:fa:73:11:4c:6b:
d0:ce:c3:22:f3:ae:24:be:7d:d7:51:a2:b1:e4:a5:12:39:e1:
ae:4e:82:44:a6:22:12:19:31:db:1f:41:1e:f4:78:e5:cd:68:
c3:4e:52:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTE4NTMxMTAvBgNVBAUTKEZEOTE0N0FFRjZBMzMwRDE4REQ0QzlDRkQ4NjQyRjBF
REFBN0I5MDcwHhcNMjYwOTIzMDY1NzE4WhcNMjYwOTMwMDY1NzE4WjAYMRYwFAYD
VQQDEw02YWIzNzg0ZS1lOTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2ZA56uI90/0ljohisHyWSCRaB2LZ9EIsAQ3+hQ2o2o5vDVSTyinoB1DPwNkc
wl2vZrdd3hkc8K9LSqWZWxn/Shc4QHKrl4y4VWEfuttS0JcD49clG6MA++AwhT++
FwqVvT26yedsKK5O39JtN1CDXieDyQpabo+ed03/WLmyhGkBt3TDengG31iMy2Vd
sTD1u5Dz12lN14yC1ajlD/ERLSKVaN9w5Jigp+Vt8bH6wNeL6u3sMzfjfUpAX4fO
xHtBwdlgumjZ7vNbzr4VCt6PnqsBewbUds1DQ3pYx+4cuUtyBwaeNLJ6NYxfapaZ
mNibBJj+ygsXBf8OxZzSFd7jYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG+wFgxs
iVwfEZ/P+fqHek18ILCUMB8GA1UdIwQYMBaAFP2RR672ozDRjdTJz9hkLw7ap7kH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTg1My8xQUIxNUI4Q0JE
QjAxMUYwODdFREU5MjlDNEY5QUUwMi9fWkZIcnZhak1OR04xTW5QMkdRdkR0cW51
UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19aRkhydmFqTU5HTjFNblAyR1F2RHRxbnVRYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTg1My8xQUIxNUI4Q0JEQjAxMUYwODdFREU5MjlDNEY5QUUwMi9fWkZIcnZhak1O
R04xTW5QMkdRdkR0cW51UWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANZh/gjVrTUsWswqVAtce2v32tYKOEB/SYBRa0pzKhYfDU/Lbll9+H4nXYNxn
FFG9sMtk/vNc9te9DWdXWxOyJqQV3ceIP4gdcLQ0dNA3qNRixrd4jLM+ifKGOXHF
+yuZIS6wUOtR4Rjgp+w4sP9Mr5npvV3ChwYD24P6bin1k7CEv7Dk+zECmBVp6cI9
SIU39ciDbtmoAx3o+eajse6Mr88gNt1vOOL219lDFFklYs7odmqTXeklgidV4gFu
txpBVAaPMAqM7ChFXyGDjTzKRDJbbfpzEUxr0M7DIvOuJL5911GiseSlEjnhrk6C
RKYiEhkx2x9BHvR45c1ow05SUg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 08:56:51 2026 by rpki-client