
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
File: ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json)
Hash identifier: 5Fud+VO+/ieD69YANNLW5lztvfO/Xb9xQHVzjLdkPrg=
Subject key identifier: 66:6B:91:87:30:90:79:8B:B2:20:E0:A1:7E:89:56:D6:B0:C5:91:73
Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA
Certificate issuer: /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA
Certificate serial: 01CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
Manifest number: 01C6
Signing time: Thu 29 Oct 2026 04:28:09 +0000
Manifest this update: Thu 29 Oct 2026 04:28:08 +0000
Manifest next update: Thu 05 Nov 2026 04:28:08 +0000
Files and hashes: 1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: USS3K+bT9hxiXnpP9L+eEUe98RX2Fha6Hqzv5rh6VMM=)
2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: Xp2kZwTI/Ulm1FSMvB8uIy/q/Twdd9bs92yBpmukUiI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl
rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 04:28:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463 (0x1cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA
Validity
Not Before: Oct 29 04:28:08 2026 GMT
Not After : Nov 5 04:28:08 2026 GMT
Subject: CN=6ae2cb59-8750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e3:4f:e0:81:36:86:56:05:ff:27:81:7e:e1:
9b:36:f2:9a:2c:66:63:b5:b8:3e:cd:5a:a5:31:4c:
a8:1b:ca:87:1c:b9:9f:dd:70:54:5c:21:88:0e:5b:
8f:07:1e:63:01:51:d7:5c:39:57:5a:15:4f:8b:5f:
6d:f1:d1:25:b6:f4:a1:40:3f:d8:52:15:c3:16:0e:
2e:90:c9:8d:3f:a0:a4:bb:a3:00:ac:4c:0a:ac:bd:
1a:f6:cd:16:ea:98:c5:b8:5e:29:a5:c9:c1:e3:91:
b6:fd:06:15:b2:6a:a5:f7:ec:ba:98:e7:08:d3:c2:
b4:92:cd:d2:66:73:60:a1:98:84:85:42:4c:61:4d:
64:68:b0:14:49:16:a6:20:d8:2f:d8:80:d3:28:89:
72:ac:a4:db:da:9e:8a:2c:6d:56:63:9b:08:75:db:
06:64:a0:e2:aa:ab:34:d2:76:35:36:d2:4b:47:2b:
e1:90:7f:da:67:e3:76:72:17:a5:7d:fe:61:32:8d:
cb:07:2d:5f:0a:d7:bd:69:d1:d2:2a:70:5e:52:62:
92:a9:d9:5c:7d:e4:4c:0e:8c:f5:d3:bd:13:54:19:
0b:3f:d1:f0:5b:15:72:f3:3a:41:8e:67:fb:cf:03:
54:96:e4:64:68:08:34:94:36:29:fe:dc:b3:bf:bf:
83:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6B:91:87:30:90:79:8B:B2:20:E0:A1:7E:89:56:D6:B0:C5:91:73
X509v3 Authority Key Identifier:
keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:90:bc:ca:ba:8f:52:97:25:fd:39:f6:16:aa:28:89:37:a7:
ce:05:8e:07:8d:44:30:4c:c5:61:9d:58:cd:95:ba:0e:2b:d4:
e8:55:2e:74:ad:98:eb:c7:4a:7c:c8:8a:01:3c:14:d9:1c:71:
6f:10:4d:99:aa:05:9c:dc:af:a5:07:66:a3:8e:82:58:79:9a:
fc:62:67:fa:58:6d:ec:48:f2:4c:82:93:58:6f:9a:f5:ff:e9:
ca:04:90:3a:40:89:e7:4e:f9:d1:ec:f7:d4:83:d6:9b:9a:91:
9c:7f:32:79:46:ef:9b:33:d7:73:40:b8:bb:65:68:b9:3c:d3:
a1:62:c5:bd:2d:fd:55:c7:0e:4b:d5:3a:51:0d:60:c8:bc:6a:
01:a9:c3:3f:ab:bc:95:f8:e0:c1:24:6e:15:a2:c0:68:f2:45:
60:6e:ac:d5:71:5c:ca:ca:c6:13:88:58:43:07:59:b9:50:26:
39:de:fa:0c:16:ec:b7:5f:dd:90:17:47:80:27:08:96:a7:a2:
e6:da:44:d1:95:34:05:c0:97:64:75:e8:13:84:04:72:81:56:
c5:e2:8e:9b:9a:80:13:9b:73:6e:78:5e:f0:4e:28:1b:9d:45:
3a:7f:cf:a8:54:75:3d:85:79:6f:44:28:17:e7:a8:81:3f:b0:
27:fe:23:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:09:54 2026 by rpki-client