
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft
File: ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft (raw, json)
Hash identifier: KHuPsN+1YVzzllmEXR3XGfwg3G53obVxqeykWZRYK7I=
Subject key identifier: A8:FF:11:4F:D9:7D:55:42:40:7E:29:EE:E3:80:C4:77:E0:21:1C:63
Authority key identifier: 64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13
Certificate issuer: /CN=A911B5AC/serialNumber=6451553E09DC24DDDBC54073E6625B1A16E75213
Certificate serial: 88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft
Manifest number: 87
Signing time: Fri 17 Jul 2026 02:22:48 +0000
Manifest this update: Fri 17 Jul 2026 02:22:48 +0000
Manifest next update: Fri 24 Jul 2026 02:22:48 +0000
Files and hashes: 1: ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl (hash: IY8iwTrXfJh3PANC6T4JRtfdRQEtDG//qdmPHZLVSyI=)
2: 94734132744F11F187348A036EA30FBC.roa (hash: j2i6IW/kxZ1OsDTycHA9hM2N9ZMvryaZuqMT34VfdNg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl
rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 02:22:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5AC, serialNumber=6451553E09DC24DDDBC54073E6625B1A16E75213
Validity
Not Before: Jul 17 02:22:48 2026 GMT
Not After : Jul 24 02:22:48 2026 GMT
Subject: CN=6a5991f8-27b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:91:5d:85:92:30:42:9c:41:9f:d0:29:3e:95:
a4:48:94:ec:c5:c2:b1:bd:83:cb:41:aa:f8:97:a0:
9e:6a:4e:89:81:85:ad:4e:ac:1f:b3:63:f7:2c:a6:
47:70:5e:d4:bb:9d:93:a7:30:8f:5f:83:9a:74:d2:
a1:b5:33:08:d4:cb:14:de:d3:c9:26:5a:2c:e0:14:
83:23:dc:a1:3d:0b:ee:f8:9c:93:fe:66:dc:99:c0:
77:5e:90:ca:4c:e0:26:bb:1f:1a:d6:7a:8e:50:e2:
ce:c5:11:ca:f5:38:3c:ae:52:0f:ad:fb:bc:e1:af:
2c:67:fe:9a:3f:67:8f:e0:1c:95:af:9a:a2:05:d5:
bb:19:66:b9:4a:04:ec:e5:38:64:1a:80:76:91:11:
f5:45:51:80:09:22:c9:9d:ff:33:98:57:e8:9f:79:
fd:e9:65:a5:0a:39:d8:1a:22:98:ee:71:b8:10:b3:
9d:27:db:54:40:eb:48:d8:b7:47:8a:dd:57:e0:f7:
e8:39:1a:24:37:3e:10:9f:aa:cb:61:e5:53:9b:03:
0c:96:37:e1:95:5e:28:1e:0f:99:f5:9c:63:06:00:
d7:4d:ee:c6:c5:7c:71:58:1f:35:e9:64:51:cd:4d:
e2:e9:d5:ed:fc:a4:ed:af:26:7a:d8:60:83:91:d6:
45:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FF:11:4F:D9:7D:55:42:40:7E:29:EE:E3:80:C4:77:E0:21:1C:63
X509v3 Authority Key Identifier:
keyid:64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:84:58:1c:ed:55:29:bb:b4:04:17:88:26:0f:0a:97:7d:51:
33:92:73:34:fd:43:64:f0:45:a7:46:59:b5:73:a2:ae:b4:f7:
5d:3b:0b:81:d1:39:e3:3e:8e:94:14:39:c3:da:d3:56:f1:ef:
51:13:af:52:68:d1:2d:24:7c:6a:dc:e4:5e:08:ae:8d:af:fc:
2f:58:4a:07:7d:72:24:8c:2b:90:89:3e:39:e6:4c:c9:20:d1:
da:de:c6:7c:4a:af:d1:1b:ba:db:b7:92:5a:12:dc:ed:f6:67:
07:36:3f:86:2f:a1:fa:73:53:80:71:02:10:5a:0d:38:50:99:
15:0e:18:ff:dc:ca:86:88:61:00:d0:ea:ac:80:19:ab:3b:0e:
56:a9:1b:14:51:db:02:20:17:1f:40:fb:6e:98:14:e0:4c:0b:
a9:fb:19:2d:65:68:02:15:28:46:c2:bf:48:c7:b8:1d:df:04:
6c:a1:26:1d:7b:22:54:c7:59:77:8d:04:00:8d:c6:be:4b:9e:
c5:59:9f:5d:d4:49:e7:3e:c2:77:f3:77:2d:60:e8:fe:57:f7:
3d:5c:d5:74:bd:b2:6c:62:cc:d0:d7:c4:d1:91:db:0d:f6:f4:
65:00:81:73:b8:16:0c:75:fb:cb:8c:1e:33:b5:c9:37:05:09:
a2:0e:3e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:08 2026 by rpki-client