
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
File: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft (raw, json)
Hash identifier: SZ3oV7rYI9JVSc3w2jsRGCO2G6tOf42TbHWFKZKHE/Q=
Subject key identifier: 95:DE:66:88:03:A2:1F:49:92:92:9F:E8:F3:F3:9B:18:3A:69:B0:99
Authority key identifier: 64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E
Certificate issuer: /CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E
Certificate serial: 02CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
Manifest number: 02B9
Signing time: Mon 27 Jul 2026 02:45:09 +0000
Manifest this update: Mon 27 Jul 2026 02:45:08 +0000
Manifest next update: Mon 03 Aug 2026 02:45:08 +0000
Files and hashes: 1: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl (hash: E2zomeuKvfceSr084nTkB7bglU4pSl0Tvj5U0wuqYOI=)
2: 98F2F9C8762611F09B1FE90DC4F9AE02.roa (hash: KS7F+OziKhDMCnUVMBfodEKMFb07L8NYOvPjvyYchaI=)
3: 9333456E2D7511F0AE6EEE7CC4F9AE02.roa (hash: ZKWuilMC1mbTpNIhkFg3PCRossx3ZxzSiZXfGCxostY=)
4: 9261B5942D7511F0AE6EEE7CC4F9AE02.roa (hash: VgKZr+Yro+WCDJDk8+sd8xGuOog1T6cOqydm30PIbLc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl
rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 718 (0x2ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115AC8, serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E
Validity
Not Before: Jul 27 02:45:08 2026 GMT
Not After : Aug 3 02:45:08 2026 GMT
Subject: CN=6a66c635-b733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:88:f7:02:c6:6b:83:0c:05:36:30:bd:bb:
b2:8a:44:e3:55:73:67:c5:86:6a:68:74:56:33:dd:
25:c8:51:7d:2d:02:0f:80:bf:3c:fc:32:a0:9f:03:
49:54:82:33:4c:b9:1b:aa:06:de:20:cb:84:08:d0:
c9:33:c0:80:63:eb:9c:23:4f:a8:a8:de:62:e3:72:
ff:dc:c8:7a:be:1f:2e:9d:d0:f5:8a:15:6e:3b:2d:
6b:70:f6:47:3c:6c:23:90:d1:73:01:16:76:b3:48:
82:e2:22:e3:bd:31:36:00:87:38:86:d1:8d:86:d0:
53:20:18:f1:f8:0f:ab:f1:4a:bd:bb:6f:8c:21:e7:
c0:01:7d:84:ab:a4:bb:16:1e:1b:cf:8b:e8:41:ea:
95:89:12:11:2a:88:eb:56:b6:d5:25:ac:1c:7c:53:
4d:2e:3f:e2:25:48:15:8c:63:cc:2a:0e:66:7a:55:
91:fd:63:d1:3d:dd:87:bd:30:38:0f:2a:5e:01:38:
47:94:ba:30:20:41:fd:42:d7:04:2a:5d:44:9f:e4:
d8:6a:53:0c:f9:25:83:55:cc:b3:d7:fd:af:a8:0e:
bf:37:b7:40:97:33:1f:10:69:75:02:de:5f:58:0e:
36:8f:67:1c:67:59:3d:8f:19:1b:03:43:88:97:e7:
b8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DE:66:88:03:A2:1F:49:92:92:9F:E8:F3:F3:9B:18:3A:69:B0:99
X509v3 Authority Key Identifier:
keyid:64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:d5:47:a9:b3:14:8a:ef:8b:3b:47:5a:d5:4e:15:cc:22:86:
21:20:38:60:0b:db:55:da:31:22:9f:ba:5e:94:92:54:46:76:
b4:f5:6d:8b:d5:86:19:fa:ff:ea:59:71:31:75:79:f8:39:a3:
ff:a6:81:1c:8b:47:c9:59:93:7a:2a:5a:35:5c:e7:f2:9f:ea:
8b:6f:b6:89:40:00:4a:c4:67:19:c1:44:2a:18:3a:11:01:8d:
46:c3:a7:e3:d3:78:67:e1:98:50:01:e6:48:06:d5:be:ec:38:
84:6d:9b:ca:4b:91:69:3a:84:a1:49:ed:1e:1f:0d:f9:09:e4:
46:b2:94:bf:6c:eb:10:59:e7:f9:d7:a8:29:c9:e1:cb:00:eb:
57:3f:58:94:0e:9d:b1:e7:1b:0f:27:16:36:99:e8:d2:17:d1:
f6:09:eb:0c:e9:db:a9:9c:34:6b:dc:8c:d3:cb:60:00:21:58:
07:e0:d8:68:23:0c:0a:82:1d:72:8a:ee:6c:18:e8:44:f4:78:
cf:ef:68:0b:a2:58:d9:a7:b8:09:4e:78:84:e9:22:bb:02:0c:
a6:da:e0:6e:76:b2:11:7b:14:53:39:bd:34:14:9e:d6:ed:11:
44:b4:da:65:29:41:32:ff:13:e0:9e:9a:e9:9a:3b:54:98:6a:
2d:17:e8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 22:52:55 2026 by rpki-client