
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft
File: ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft (raw, json)
Hash identifier: 5LJdFq7fiQ0i/GeSCSnbPslbgHdt6WjANWP9FDr9o4M=
Subject key identifier: 18:FD:E8:C7:5E:37:EF:A1:7A:5D:16:A2:80:4A:9B:B4:29:0F:47:C2
Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
Certificate serial: 1BD5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft
Manifest number: A2A6
Signing time: Fri 24 Jul 2026 08:54:56 +0000
Manifest this update: Fri 24 Jul 2026 08:54:56 +0000
Manifest next update: Fri 31 Jul 2026 08:54:56 +0000
Files and hashes: 1: ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl (hash: PghQc55ojn/Fn2Ut9uKZGu2jMr6qNGjsm0OUmaE8s5w=)
2: FC6A19D892D511EC8FBFF32AC4F9AE02.roa (hash: OXGvG47egb4PF/onwPC9e0QERfLfAY+ZqPCLmsNj8TE=)
3: 20C6F2EC699D11EAA33EAE83C4F9AE02.roa (hash: noBHpHcIG4F8PCP16+JaDrGG+bfZLo/xyhvvRrrAwbc=)
4: 4FF339D8F01D11EB8C4B505BC4F9AE02.roa (hash: kzmw6JQnHsEPxWEaFvMAvmSNfBwkvf6++ngi0TT5BK0=)
5: 3D68F8C29A4A11EA94706012C4F9AE02.roa (hash: gxt7j0/qgDHDY4eOy9nTFq4yiN1wN4Azb/F6N/jLPQo=)
6: E38D6798533911F18A27312FCB833773.roa (hash: gk5/uS+O/CM+N18jIFqFxpCeyO2gku+HcapU0YVTG5c=)
7: 959AC422557911EBBD21EB2FC4F9AE02.roa (hash: YKfVc/1kWhtiSN/JgbbvpApeCbmTeJDdHpPmRnKp0f8=)
8: ACC8833824DE11EDAEC0E529C4F9AE02.roa (hash: H0mHu5foM/0Hr0y7LJoGoqxfCYM8HtP6k45eEW8ACTA=)
9: C89FD6DA557611EBA04C290BC4F9AE02.roa (hash: IDu51NoCXLX0fGSXN0JfKGuNOGTw6RNrNximD3D412U=)
10: 9907DC46D4BC11EF9BDDAF2EC4F9AE02.roa (hash: t2gJHzvcOWvCsvCryzv4e3nkQa2GgkkDGSrdogOaQTc=)
11: 1BF3A43C15BE11EF93ABFD7DC4F9AE02.roa (hash: lhNS+ojnip3W9c6D2+vK5Jj0fFUXb3jMTgYthGAVWGE=)
12: 0B24875C7A4411EB804B7430C4F9AE02.roa (hash: +Z0l5rtFf9gejJdRbzGI1Tev7wUao9HHsXdVWsy9gIw=)
13: 191363A69DD911EC99D91668C4F9AE02.roa (hash: 9ywt3YgdGMPifjHDU8GOY5yDR3rcKL5WS/6sXlZSwSk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl
rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 08:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7125 (0x1bd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6D5D, serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
Validity
Not Before: Jul 24 08:54:56 2026 GMT
Not After : Jul 31 08:54:56 2026 GMT
Subject: CN=6a632860-ba69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a8:4d:65:65:1e:f8:0d:af:44:9d:3a:9c:22:
f5:a9:1b:a1:28:ed:8b:af:f9:6e:25:e0:0b:25:72:
7e:13:25:1d:8e:21:91:36:e6:21:b7:55:ed:07:5d:
29:73:56:c9:df:c9:d0:92:c2:7e:19:a2:8b:96:47:
34:e1:6d:2e:92:f2:21:83:f7:25:68:8a:29:af:12:
48:a7:62:da:d3:f2:9b:1c:27:e4:5c:55:97:a4:af:
35:45:5c:fa:a2:eb:e5:a8:71:88:4a:cf:e5:8c:0e:
91:56:66:f8:8b:2a:3a:15:b1:8c:a5:0c:6a:40:32:
1d:8c:fc:74:64:83:2c:2c:e6:38:12:f2:c8:b5:79:
a0:a4:c5:f2:1c:fa:26:ae:83:f8:c3:1c:4c:ff:e5:
b2:ef:93:dd:27:b9:af:aa:9a:2f:c9:2e:ab:36:ab:
f1:ce:e1:20:f7:bb:2f:8c:3a:06:e8:04:71:a2:fe:
2a:b2:bd:92:d4:dc:fc:d0:16:7a:de:15:45:78:44:
ca:15:d4:b9:3d:67:eb:cc:c4:ba:50:d4:5c:3a:49:
3d:db:36:c2:a3:d3:14:5a:98:74:c7:12:ee:23:40:
c8:4e:01:65:40:2c:73:6e:09:39:6e:e4:22:b8:82:
f7:4d:b3:d2:71:2a:48:c9:88:d3:fa:f7:67:80:10:
a4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FD:E8:C7:5E:37:EF:A1:7A:5D:16:A2:80:4A:9B:B4:29:0F:47:C2
X509v3 Authority Key Identifier:
keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:ce:19:81:b1:be:f4:c0:eb:98:7d:b2:4a:39:9a:9a:6c:70:
79:ef:e5:0d:25:61:74:ba:cc:d9:62:78:57:0f:03:f0:07:33:
87:fa:60:0c:1d:88:7e:5f:a0:87:e3:3d:04:87:5f:b1:80:d2:
ae:b3:c0:27:46:2e:64:25:c6:14:5f:05:4a:8c:00:63:9c:57:
61:89:e2:fe:4f:a2:c4:2e:93:de:65:ec:d9:9e:5a:b1:0a:ed:
f6:43:97:8e:1d:09:16:a6:e0:57:9f:3c:cb:6f:37:4d:12:08:
8f:f7:7b:05:98:50:01:d0:d3:a7:0f:db:15:0a:41:8f:2c:4a:
88:29:66:4a:4d:79:38:30:72:de:89:6d:13:41:d2:c7:1e:55:
6c:63:d8:6f:28:96:c4:ee:26:75:33:85:78:67:4e:5c:85:ab:
00:10:68:8f:2e:64:3c:9d:ea:a4:53:ac:21:51:e2:ab:07:4c:
b9:8a:9c:49:10:d1:9d:4d:e0:de:2e:6c:9f:11:33:37:9a:89:
47:86:dd:d0:2e:7f:96:98:7a:32:1a:e6:d6:16:10:29:ee:26:
db:b8:db:3e:6f:07:bd:71:4b:d8:6a:8b:31:d8:ae:ac:27:cc:
5f:7f:44:5d:7f:79:71:e0:5f:6e:9c:35:d9:4b:4c:ac:f0:ea:
77:fb:b3:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICG9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTZENUQxMTAvBgNVBAUTKDY0QTY2NTgxNkFFRkVENzNCMzA3NTAwN0RBNTMzN0FD
N0RFQzRCODEwHhcNMjYwNzI0MDg1NDU2WhcNMjYwNzMxMDg1NDU2WjAYMRYwFAYD
VQQDEw02YTYzMjg2MC1iYTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmqhNZWUe+A2vRJ06nCL1qRuhKO2Lr/luJeALJXJ+EyUdjiGRNuYht1XtB10p
c1bJ38nQksJ+GaKLlkc04W0ukvIhg/claIoprxJIp2La0/KbHCfkXFWXpK81RVz6
ouvlqHGISs/ljA6RVmb4iyo6FbGMpQxqQDIdjPx0ZIMsLOY4EvLItXmgpMXyHPom
roP4wxxM/+Wy75PdJ7mvqpovyS6rNqvxzuEg97svjDoG6ARxov4qsr2S1Nz80BZ6
3hVFeETKFdS5PWfrzMS6UNRcOkk92zbCo9MUWph0xxLuI0DITgFlQCxzbgk5buQi
uIL3TbPScSpIyYjT+vdngBCkGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBj96Mde
N++hel0WooBKm7QpD0fCMB8GA1UdIwQYMBaAFGSmZYFq7+1zswdQB9pTN6x97EuB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE
ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdYT3pCMUFIMmxNM3JIM3NT
NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pLWmxnV3J2N1hPekIxQUgybE0zckgzc1M0RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdY
T3pCMUFIMmxNM3JIM3NTNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACc4ZgbG+9MDrmH2ySjmammxwee/lDSVhdLrM2WJ4Vw8D8Aczh/pgDB2Ifl+g
h+M9BIdfsYDSrrPAJ0YuZCXGFF8FSowAY5xXYYni/k+ixC6T3mXs2Z5asQrt9kOX
jh0JFqbgV588y283TRIIj/d7BZhQAdDTpw/bFQpBjyxKiClmSk15ODBy3oltE0HS
xx5VbGPYbyiWxO4mdTOFeGdOXIWrABBojy5kPJ3qpFOsIVHiqwdMuYqcSRDRnU3g
3i5snxEzN5qJR4bd0C5/lph6Mhrm1hYQKe4m27jbPm8HvXFL2GqLMdiurCfMX39E
XX95ceBfbpw12UtMrPDqd/uzmA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:58:50 2026 by rpki-client