
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft
File: ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft (raw, json)
Hash identifier: chwLpPwmsqmmoxvhRYC+RnzHKghuCwYE4qrY+Io7Vdo=
Subject key identifier: A2:30:40:65:AC:DF:17:7F:DE:4C:29:C8:78:2D:03:D6:27:E5:28:0A
Authority key identifier: 64:93:B1:9F:7C:BF:DF:19:04:BC:75:2A:A8:E4:A3:43:06:26:54:05
Certificate issuer: /CN=A911DF56/serialNumber=6493B19F7CBFDF1904BC752AA8E4A34306265405
Certificate serial: DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft
Manifest number: DA
Signing time: Sat 29 Aug 2026 06:38:16 +0000
Manifest this update: Sat 29 Aug 2026 06:38:16 +0000
Manifest next update: Sat 05 Sep 2026 06:38:16 +0000
Files and hashes: 1: ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl (hash: saLrGXKSZCXBZV24K7U2RTnOqcQ3qyUoxA90NHVBs9Y=)
2: D24B5EDE93C911F09C542E6EC4F9AE02.roa (hash: s8SPE1fuhHGCWfjRI4Arz3DIriyv/pjOPJwncxjTFHw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl
rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Sep 2026 06:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DF56, serialNumber=6493B19F7CBFDF1904BC752AA8E4A34306265405
Validity
Not Before: Aug 29 06:38:16 2026 GMT
Not After : Sep 5 06:38:16 2026 GMT
Subject: CN=6a927e58-750f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:02:e2:f0:2f:c8:bd:b7:09:2e:e9:2a:0b:60:
32:e9:42:00:57:d5:23:8e:44:8d:10:2a:e5:c7:f4:
e8:8c:85:21:cd:51:92:ad:f0:d6:af:e5:74:b0:09:
c8:0e:62:a6:8b:32:23:1a:42:dc:86:e0:17:52:1b:
24:95:21:ec:ff:ba:df:b7:bb:cd:0a:38:00:a0:f7:
e2:ec:2d:b6:76:42:48:33:69:ec:2c:e5:0c:d5:14:
1d:51:d8:79:5d:74:69:9a:ed:62:2e:1e:88:ef:de:
24:3f:20:8c:e2:b6:28:cb:03:e9:16:a5:40:a5:9f:
5d:5b:7e:8f:48:09:33:07:33:20:de:02:50:0f:3f:
d8:b4:13:79:3f:36:f5:1a:65:35:67:84:fa:c3:4e:
3e:b1:02:dc:5c:bf:7c:e3:00:a7:f2:85:5c:86:ff:
4c:62:a0:3a:2f:a9:e4:9d:1d:cd:5f:d6:68:41:d0:
bb:6c:1c:85:5e:4b:7e:cd:15:7b:a1:00:17:0a:64:
f2:ba:cf:00:57:35:d3:8f:f3:ae:61:e8:7e:6a:43:
00:e3:d1:c7:6f:85:88:c8:7d:3c:bb:87:0a:b5:9b:
ae:f7:87:72:db:49:b9:e0:09:ce:c5:7f:8b:a8:1d:
b1:4a:ca:8a:da:98:88:57:19:e0:4b:eb:53:f1:66:
63:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:30:40:65:AC:DF:17:7F:DE:4C:29:C8:78:2D:03:D6:27:E5:28:0A
X509v3 Authority Key Identifier:
keyid:64:93:B1:9F:7C:BF:DF:19:04:BC:75:2A:A8:E4:A3:43:06:26:54:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:85:c9:5e:df:5b:99:47:46:53:35:6c:49:51:97:09:11:33:
f4:34:24:15:20:7d:fb:90:24:0e:a6:7c:8e:24:c9:98:5a:7b:
64:23:19:73:5c:a9:71:60:47:21:1a:ee:44:77:8b:ad:60:c8:
e2:37:58:7d:98:a3:ad:08:a5:36:10:82:77:dd:b6:77:40:ba:
a0:f1:60:37:32:f5:a4:96:44:1f:0e:05:6f:4e:8f:83:92:9b:
9d:33:72:48:24:fb:0a:7f:06:37:e4:03:cc:b8:1f:c8:ab:d9:
e5:07:cd:67:9d:d7:d4:ab:7b:50:1a:14:35:95:26:d3:d9:38:
ac:bc:f4:ce:31:9d:58:c0:3b:57:2a:e4:68:ea:86:f3:ed:6d:
d3:be:e4:9b:56:01:7e:7f:4f:0a:16:48:4c:7a:4f:49:2c:68:
62:f4:fc:6e:c6:6d:04:22:72:0e:cc:ac:98:06:cf:da:10:e7:
2d:e6:9d:fb:90:82:a5:b9:15:1e:15:40:be:f4:7e:6d:89:b3:
07:f6:f1:b2:cb:ae:04:f6:0c:42:8e:7a:14:48:c3:d1:f1:2e:
c4:25:15:fe:df:4c:5d:8c:fe:a1:7a:c4:5e:7c:bc:4a:4b:b3:
f8:c2:5b:82:6a:82:c6:d5:df:3e:b6:35:91:4c:ca:49:15:8d:
d0:fe:0a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 30 09:32:27 2026 by rpki-client