
$ rpki-client -vvf rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft
File: ZH6czEtpiBWTjDs2e84wggMOI0c.mft (raw, json)
Hash identifier: myo8INtFzVxNEIK9uHFJ/pMEaI7YQnKtofYCQ5UKxeU=
Subject key identifier: E1:19:A4:AD:70:8E:A9:3E:39:E5:06:B8:D2:43:65:04:A6:A2:11:F2
Authority key identifier: 64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47
Certificate issuer: /CN=A918216E/serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347
Certificate serial: 0326
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft
Manifest number: 031F
Signing time: Sun 05 Apr 2026 00:52:58 +0000
Manifest this update: Sun 05 Apr 2026 00:52:57 +0000
Manifest next update: Sun 12 Apr 2026 00:52:57 +0000
Files and hashes: 1: ZH6czEtpiBWTjDs2e84wggMOI0c.crl (hash: XtEMSCk6vOEG/y0LNH1sxHsd0RY6fF2neo9TBWIQHkI=)
2: D26D6D160BF111EDBBF4F61BC4F9AE02.roa (hash: U+McpX1TNvalACsR1hdrJBiy7pAGaKnrL90ovh0zNZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.crl
rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:52:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 806 (0x326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918216E, serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347
Validity
Not Before: Apr 5 00:52:57 2026 GMT
Not After : Apr 12 00:52:57 2026 GMT
Subject: CN=69d1b269-8348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:7e:7c:ea:a4:25:dc:3d:ed:32:00:cf:aa:
b1:5d:53:11:64:7c:43:0a:97:74:86:a5:b6:49:6b:
e8:f2:ca:27:18:34:e8:84:a4:51:81:1e:30:74:ef:
92:37:c9:08:5f:32:af:76:12:6b:0b:50:af:95:16:
3a:71:08:a1:a4:77:29:9a:49:c1:04:13:e3:3a:e5:
d5:c2:9d:28:27:b2:4f:be:33:07:6e:df:ae:e1:61:
25:24:3e:0b:36:9f:aa:74:14:f0:29:0e:aa:e2:8f:
82:cc:8d:f7:55:b9:39:51:be:82:7a:26:1e:10:e8:
71:fd:38:94:b5:0f:1e:a3:7b:d0:bb:f0:60:fd:b4:
a0:fc:6a:dc:70:65:ff:34:ef:d8:ad:a6:bf:41:6f:
a0:89:df:f6:fd:0a:64:f1:71:bc:7f:d4:1a:57:6f:
af:6f:48:6a:ac:53:52:b9:b1:a8:b9:9a:e1:e3:c9:
1b:fd:63:15:63:00:d2:83:27:67:1b:32:bc:ad:c3:
da:e5:eb:6e:5a:a6:0a:c2:a1:c5:6d:1a:4c:3c:18:
12:c5:ce:67:f4:00:be:ce:86:2e:5b:41:7c:2d:d9:
c9:ae:94:ab:9d:94:5b:a8:07:cb:5c:64:de:b4:0f:
4c:ee:ff:1a:df:14:ff:0d:cb:35:0e:00:25:46:cf:
79:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:19:A4:AD:70:8E:A9:3E:39:E5:06:B8:D2:43:65:04:A6:A2:11:F2
X509v3 Authority Key Identifier:
keyid:64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:ea:ae:24:23:dd:e8:44:71:9c:58:ef:bd:4f:ba:e5:9b:17:
5e:5b:51:00:fb:6d:7b:a2:62:87:ec:d4:27:4b:66:43:6d:7b:
00:67:34:1e:e1:d9:71:70:98:70:b9:87:ec:79:8a:7d:2c:2e:
dc:c6:1f:73:83:bc:7a:51:bf:df:00:df:98:7b:94:b9:99:0f:
67:c0:1e:ce:6d:64:c7:1e:0d:8f:6b:e3:d4:93:60:bf:74:c0:
ae:7c:4c:5f:7c:f0:23:bb:51:90:90:bc:3c:b7:44:3b:eb:10:
c8:b7:f1:d3:a9:a9:1f:a3:2f:21:66:81:c6:e0:48:c9:df:7e:
49:21:af:3c:47:95:d7:ae:70:96:55:53:7f:a0:27:01:57:a4:
2f:9a:df:0e:66:43:8f:d5:54:97:0a:2b:f6:3c:01:a2:5a:e1:
02:22:e7:d1:d4:e9:57:89:9a:04:8c:48:00:78:c4:ed:49:29:
80:df:ea:2b:c2:a0:4a:e0:1e:26:78:83:46:79:a8:3e:ed:d6:
40:c7:92:0b:e5:fb:b5:14:94:6f:6c:0a:46:16:fc:31:73:a3:
fe:fd:d5:ad:cb:ff:53:a6:8c:48:03:de:7e:2c:cd:d9:5b:a9:
21:41:3f:be:42:32:d3:e7:d5:2b:bb:9e:f8:22:dd:55:32:10:
b2:ba:9d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 21:10:24 2026 by rpki-client