
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft
File: zm6S_KABf3WmLfkoXo18IQt6vAI.mft (raw, json)
Hash identifier: 4Mz1CK8wVIt51BS4b91OIwiF58mSBR3bx3xEfr01kMM=
Subject key identifier: 98:14:79:DF:05:12:40:07:FD:17:46:A8:88:B3:A4:E0:5A:CE:5B:DF
Authority key identifier: CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02
Certificate issuer: /CN=A9199BCC/serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02
Certificate serial: BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft
Manifest number: BC
Signing time: Sun 05 Apr 2026 06:23:44 +0000
Manifest this update: Sun 05 Apr 2026 06:23:43 +0000
Manifest next update: Sun 12 Apr 2026 06:23:43 +0000
Files and hashes: 1: zm6S_KABf3WmLfkoXo18IQt6vAI.crl (hash: cfSHs8EFvzw1db/C8BSbEMuJXoHMHxSOoKs11ZmnnfU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl
rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:23:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199BCC, serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02
Validity
Not Before: Apr 5 06:23:43 2026 GMT
Not After : Apr 12 06:23:43 2026 GMT
Subject: CN=69d1fff0-4f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:0e:f2:81:ad:23:3b:08:e1:36:ef:6b:8c:
a6:b4:fa:31:8c:aa:b2:55:ff:32:e4:0e:03:b4:83:
3f:29:d9:1d:6e:9e:e4:49:6f:c5:af:68:72:4f:2f:
68:f5:a3:4d:86:f2:66:de:bb:8a:97:7f:a7:2f:2e:
2f:70:d7:31:d2:98:1a:b0:2d:eb:b1:1c:3b:d2:2e:
cf:94:7e:60:65:11:5a:cb:df:20:bf:a9:ec:5d:70:
fb:dc:60:b8:ab:03:f3:ac:e7:dc:d5:17:1e:a6:86:
c7:b7:a2:0c:12:06:0c:fd:5e:11:35:71:9c:80:1f:
70:ae:74:f0:d9:ac:02:4a:ec:f0:45:bd:b2:ac:07:
b3:ce:e5:cd:05:61:2d:dd:21:ed:2f:53:a9:7f:9a:
55:e0:4e:71:d6:b6:f0:5e:1a:34:d7:75:82:74:ad:
79:d6:52:1c:8c:7c:3f:68:d4:4a:5d:e6:f2:3c:8f:
9c:70:ba:34:8d:79:d2:9d:dc:8b:95:da:47:cf:a9:
6f:35:f0:d5:03:ae:f0:b2:f9:5e:3b:d3:3a:69:80:
b4:7f:01:77:c4:29:9e:31:f9:df:95:6f:3a:28:84:
9f:43:0e:d5:cc:a1:84:73:24:91:67:ab:b0:f3:e4:
71:88:32:92:28:19:1d:93:70:8e:4a:16:af:c5:8e:
48:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:14:79:DF:05:12:40:07:FD:17:46:A8:88:B3:A4:E0:5A:CE:5B:DF
X509v3 Authority Key Identifier:
keyid:CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:56:d5:fd:43:10:3c:17:d5:f0:52:b8:47:a7:53:c5:1d:10:
a9:2e:ff:98:d6:4e:85:d6:e0:07:90:95:94:3c:22:36:b2:07:
75:42:ac:3a:a8:0c:9c:2e:76:c8:4d:24:c5:44:31:37:00:26:
00:d1:50:1e:f0:ba:4a:24:82:e1:e6:c8:a6:7b:a7:be:6a:36:
cf:d3:1d:93:8c:f0:03:94:29:09:11:9e:db:3b:77:4b:3a:18:
6a:eb:a9:7a:89:eb:f7:8e:97:90:f6:8b:6d:3b:ca:8f:bc:2d:
ab:40:90:55:db:72:67:fe:fa:f6:89:a7:3d:39:43:96:1e:85:
ff:ef:7c:01:44:e1:96:99:d9:20:19:86:08:8f:da:83:a2:a3:
0f:df:fd:29:4d:ae:68:06:0c:0c:38:ee:5c:52:bb:ba:54:98:
35:8c:62:4a:d0:18:f6:10:09:77:53:bf:68:50:94:54:bf:6b:
49:c0:f2:51:94:f3:91:a2:e8:97:e9:2e:a5:0f:36:76:9c:ba:
ec:d9:47:30:dd:b1:8c:a1:ae:1b:23:f7:27:59:e1:a6:33:08:
14:9a:69:0a:67:9d:bc:e8:93:78:f8:ad:2d:df:d9:70:5d:23:
41:4f:5e:1c:6e:08:5f:88:aa:1b:b0:fa:31:67:23:15:af:bf:
57:e5:43:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:39:49 2026 by rpki-client