
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
File: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft (raw, json)
Hash identifier: jFjaFEafavhZaGa324Gq3SEDQcBT7R4WCrxlv9vIBgM=
Subject key identifier: CF:1E:98:2A:51:F6:95:DA:AC:7B:B5:77:B9:7A:1E:35:85:D5:D1:C7
Authority key identifier: 64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E
Certificate issuer: /CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E
Certificate serial: 02E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
Manifest number: 02D1
Signing time: Fri 11 Sep 2026 01:16:46 +0000
Manifest this update: Fri 11 Sep 2026 01:16:46 +0000
Manifest next update: Fri 18 Sep 2026 01:16:46 +0000
Files and hashes: 1: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl (hash: TyTwwFQb5q4FiO+hQbP0/TLpNxQEQz3aygxlcjG+Mgc=)
2: 9333456E2D7511F0AE6EEE7CC4F9AE02.roa (hash: ZKWuilMC1mbTpNIhkFg3PCRossx3ZxzSiZXfGCxostY=)
3: 98F2F9C8762611F09B1FE90DC4F9AE02.roa (hash: KS7F+OziKhDMCnUVMBfodEKMFb07L8NYOvPjvyYchaI=)
4: 9261B5942D7511F0AE6EEE7CC4F9AE02.roa (hash: VgKZr+Yro+WCDJDk8+sd8xGuOog1T6cOqydm30PIbLc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl
rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 01:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 742 (0x2e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115AC8, serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E
Validity
Not Before: Sep 11 01:16:46 2026 GMT
Not After : Sep 18 01:16:46 2026 GMT
Subject: CN=6aa3567e-e052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:14:56:c2:41:45:5b:47:47:73:ff:a9:4d:22:
c3:65:4f:6e:80:f0:7a:ff:eb:de:4e:e7:be:a2:d3:
b7:0f:21:37:45:27:f2:5c:9e:bc:78:1a:58:3b:ae:
d8:71:ed:da:3e:14:dc:c9:4a:3c:cb:5e:30:5e:c1:
64:ad:5b:e7:f5:34:c1:02:44:54:2e:81:ba:1c:95:
45:08:81:5c:69:9e:46:12:17:c5:d2:a5:fd:43:ac:
3c:61:a0:ea:f7:4d:55:9c:ec:f0:32:39:68:ed:b1:
0e:97:5e:3c:e2:08:62:29:15:bf:7f:a3:c6:55:ed:
74:6e:64:cc:e6:c0:41:91:d7:02:63:02:fd:76:de:
15:cc:1d:72:84:36:73:05:12:1d:a3:71:31:de:a6:
66:3b:0a:04:7a:6f:7c:6b:5e:b8:39:c8:07:ca:b9:
d7:31:d9:b2:aa:0e:1e:bd:0e:52:a4:30:be:76:e7:
3d:1e:0a:f0:ef:6b:c6:64:3c:a8:b0:61:66:67:d3:
f0:04:61:39:9e:36:c2:ec:68:1a:53:68:4e:43:3f:
7c:e4:b4:84:fe:45:62:1e:2c:54:55:2d:cf:e8:98:
c5:29:39:04:36:36:64:16:e1:9a:bd:f1:5c:25:9b:
d9:94:6a:31:b2:c0:07:b1:a2:00:f6:83:d6:a8:c8:
95:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1E:98:2A:51:F6:95:DA:AC:7B:B5:77:B9:7A:1E:35:85:D5:D1:C7
X509v3 Authority Key Identifier:
keyid:64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:4c:49:f6:bd:f1:4d:83:e6:5b:f4:59:44:d5:75:c2:cc:01:
4d:a6:25:56:2e:b2:32:65:fd:46:b7:51:08:d3:ea:98:8d:e8:
fb:83:38:4e:3d:2f:67:48:fd:7c:84:42:03:00:0f:ee:27:c5:
b1:f2:cb:14:e7:1a:95:ec:1c:a4:bb:2b:38:aa:16:b6:5a:1d:
5f:96:de:ec:85:f8:93:35:27:39:74:14:90:35:9f:e1:5a:cc:
6d:fe:d9:23:a7:c5:53:3e:fe:e2:cf:41:19:18:32:62:ee:10:
0b:61:3d:88:f4:4d:7b:b0:c3:4e:73:ae:55:06:56:8c:04:a6:
a2:48:98:e4:a1:d8:9c:05:5c:78:39:06:ad:e5:c8:9f:1b:d5:
d5:43:32:ae:40:1f:57:8e:dd:d5:1b:c0:52:4c:ee:bb:d4:09:
81:87:b8:67:3d:0f:ed:3c:bf:02:e2:55:d1:50:5f:3a:aa:5b:
40:95:c3:aa:72:99:81:b9:7a:5a:1e:99:54:75:e6:71:bb:aa:
0e:9e:7a:06:e4:25:e4:ec:ed:af:86:93:e7:07:de:98:46:0a:
56:b8:a5:b4:fd:de:98:48:78:17:77:5d:0f:4e:2b:9d:d2:67:
25:f2:08:d0:55:a3:53:5e:17:12:78:2f:e4:10:45:97:5e:2e:
ca:bd:72:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:25:51 2026 by rpki-client