
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft
File: ZTy4p1ENubbBon2HfSEh5t9CGYI.mft (raw, json)
Hash identifier: jQZAV+HitrF/Djj4ZZs9t21m+D+WqRUOFvkm40Troms=
Subject key identifier: 29:B0:FD:D6:18:BF:6A:47:AA:62:50:A3:68:1C:BD:3A:BD:07:B1:77
Authority key identifier: 65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82
Certificate issuer: /CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982
Certificate serial: 019C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft
Manifest number: 0181
Signing time: Wed 23 Sep 2026 04:47:19 +0000
Manifest this update: Wed 23 Sep 2026 04:47:18 +0000
Manifest next update: Wed 30 Sep 2026 04:47:18 +0000
Files and hashes: 1: ZTy4p1ENubbBon2HfSEh5t9CGYI.crl (hash: 0lLzkSINVs73SZZ3NqrHfANJS8iK8krh0AtKQZRl7qU=)
2: 7AF7C814840211F1973E26E995A30FBC.roa (hash: is6JOCj8UH69lDcFhNaVF+Wuwi+xpA8ahsitf2M2Xz8=)
3: 6B7CC19C73B811F08DDFF784C4F9AE02.roa (hash: 7qNyR1XtX/IJK6zuiRl0X5DJ2rVIeGFSUiO8ugtPsRU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl
rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:47:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFC94, serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982
Validity
Not Before: Sep 23 04:47:18 2026 GMT
Not After : Sep 30 04:47:18 2026 GMT
Subject: CN=6ab359d7-a3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8b:1b:e3:c9:8f:78:a0:fd:1f:0d:45:f4:eb:
f3:58:38:2e:1c:92:a8:81:24:74:cb:6d:0b:cf:e6:
6f:b1:6d:b3:37:47:9d:1b:32:c8:0f:f9:22:21:28:
95:87:81:c9:4e:da:c3:d7:44:de:ef:02:d4:97:00:
f6:17:82:fd:43:61:48:a5:1b:78:d3:d5:4f:1b:6e:
34:27:63:6a:2d:84:81:13:1f:4a:33:24:18:d9:b4:
67:70:3a:e4:95:6e:8d:a2:e0:b4:f2:b5:8f:fe:ca:
34:19:7b:8d:38:b2:4f:1d:95:34:9f:6e:dd:15:df:
3f:a7:ca:c1:5e:46:6b:16:a9:71:f6:68:5b:c1:da:
57:95:83:40:27:49:4c:2d:39:42:13:b9:63:ac:ac:
7d:f6:c5:aa:17:d0:0f:8d:dd:f4:b9:af:53:7e:cc:
94:81:6b:fa:e3:1f:bf:fc:6a:21:76:2b:78:bb:9d:
68:8e:28:19:c8:28:6f:1a:95:4b:c8:32:d4:31:0c:
00:11:29:38:f0:5a:70:b0:ff:e7:44:4f:31:aa:5f:
af:4d:74:2a:4e:bb:97:32:b2:79:b5:ec:87:7b:10:
2a:e6:b5:70:01:63:47:ed:92:30:96:8a:6b:97:55:
f2:79:7d:53:81:3f:4f:1f:8e:ee:65:ff:50:34:20:
1d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B0:FD:D6:18:BF:6A:47:AA:62:50:A3:68:1C:BD:3A:BD:07:B1:77
X509v3 Authority Key Identifier:
keyid:65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f3:34:58:a6:98:c5:a0:56:f2:7e:dd:bf:ae:fe:e9:9e:3a:
b4:cf:18:9c:db:71:e5:5d:07:2f:f4:bc:45:25:81:4a:b5:bd:
af:14:41:c3:79:91:b2:06:03:0b:b4:a1:bb:74:12:d1:c4:a9:
df:5d:e8:38:9f:5a:f9:6c:75:b5:5e:d7:f5:7d:8e:05:42:9f:
1c:ea:16:71:1a:a7:a1:ba:39:12:de:5f:77:c4:02:a2:11:06:
13:64:72:ec:81:e1:96:29:d2:4c:58:65:5b:d9:8c:ce:9f:60:
60:cb:b8:22:a0:76:f1:e9:58:56:00:3d:5d:7a:69:7e:aa:a0:
a0:99:32:f6:52:1c:c3:f7:ab:8a:75:e7:3d:e2:92:d3:c6:3d:
09:c3:3e:42:51:a6:1b:5a:4e:da:ef:9c:47:28:64:9c:94:12:
de:60:a2:ee:11:91:0c:e7:00:92:94:14:d8:6a:c2:56:07:83:
2f:ff:be:72:02:34:34:2f:9d:37:16:ee:cf:10:d8:b0:70:0c:
95:57:d2:b7:11:92:b2:d2:63:b9:9d:4a:0a:e9:97:31:69:e6:
aa:fe:0e:85:89:68:34:51:8e:98:c4:8d:e3:7a:4c:91:f0:55:
b1:56:fc:e7:75:0f:46:3b:e7:9c:18:30:2a:08:37:3a:ee:fc:
46:e5:07:4e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUZDOTQxMTAvBgNVBAUTKDY1M0NCOEE3NTEwREI5QjZDMUEyN0Q4NzdEMjEyMUU2
REY0MjE5ODIwHhcNMjYwOTIzMDQ0NzE4WhcNMjYwOTMwMDQ0NzE4WjAYMRYwFAYD
VQQDEw02YWIzNTlkNy1hM2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7osb48mPeKD9Hw1F9OvzWDguHJKogSR0y20Lz+ZvsW2zN0edGzLID/kiISiV
h4HJTtrD10Te7wLUlwD2F4L9Q2FIpRt409VPG240J2NqLYSBEx9KMyQY2bRncDrk
lW6NouC08rWP/so0GXuNOLJPHZU0n27dFd8/p8rBXkZrFqlx9mhbwdpXlYNAJ0lM
LTlCE7ljrKx99sWqF9APjd30ua9TfsyUgWv64x+//Gohdit4u51ojigZyChvGpVL
yDLUMQwAESk48FpwsP/nRE8xql+vTXQqTruXMrJ5teyHexAq5rVwAWNH7ZIwlopr
l1XyeX1TgT9PH47uZf9QNCAd8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCmw/dYY
v2pHqmJQo2gcvTq9B7F3MB8GA1UdIwQYMBaAFGU8uKdRDbm2waJ9h30hIebfQhmC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkM5NC9BOENEMDE2NDk0
REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnViYkJvbjJIZlNFaDV0OUNH
WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1pUeTRwMUVOdWJiQm9uMkhmU0VoNXQ5Q0dZSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RkM5NC9BOENEMDE2NDk0REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnVi
YkJvbjJIZlNFaDV0OUNHWUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC/M0WKaYxaBW8n7dv67+6Z46tM8YnNtx5V0HL/S8RSWBSrW9rxRBw3mRsgYD
C7Shu3QS0cSp313oOJ9a+Wx1tV7X9X2OBUKfHOoWcRqnobo5Et5fd8QCohEGE2Ry
7IHhlinSTFhlW9mMzp9gYMu4IqB28elYVgA9XXppfqqgoJky9lIcw/erinXnPeKS
08Y9CcM+QlGmG1pO2u+cRyhknJQS3mCi7hGRDOcAkpQU2GrCVgeDL/++cgI0NC+d
NxbuzxDYsHAMlVfStxGSstJjuZ1KCumXMWnmqv4OhYloNFGOmMSN43pMkfBVsVb8
53UPRjvnnBgwKgg3Ou78RuUHTg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:30:58 2026 by rpki-client