
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft
File: ZfzR8nTT59WOTQyihVjTS2sVLWc.mft (raw, json)
Hash identifier: +/AbHSmk0C90QmSy9iCLomj4AaH1zCGaDoiMG+JlmPE=
Subject key identifier: 63:57:9F:CE:07:AF:34:9E:C6:9D:78:A2:34:87:49:2D:8E:05:BE:B5
Authority key identifier: 65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67
Certificate issuer: /CN=A911F7D0/serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67
Certificate serial: 1207
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft
Manifest number: 11FC
Signing time: Tue 18 Aug 2026 17:20:23 +0000
Manifest this update: Tue 18 Aug 2026 17:20:22 +0000
Manifest next update: Tue 25 Aug 2026 17:20:22 +0000
Files and hashes: 1: ZfzR8nTT59WOTQyihVjTS2sVLWc.crl (hash: YafT/IU9HwtAdE9slSrXYRc+JqU/PrVam/K+z+ikNqI=)
2: 1BFF84B0131611E991379440C4F9AE02.roa (hash: pP9sfTlQFZwgEZOIynMioM1x60lYpa7dMZDxjqtV5Ts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl
rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4615 (0x1207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F7D0, serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67
Validity
Not Before: Aug 18 17:20:22 2026 GMT
Not After : Aug 25 17:20:22 2026 GMT
Subject: CN=6a849456-7bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:51:c6:76:01:b5:3e:3f:76:95:fe:53:9c:a7:
82:9d:55:f4:a2:15:de:8a:a7:77:d6:cd:24:2f:e0:
0c:4f:7a:ac:27:13:4d:ee:9f:52:4c:7e:a5:db:0c:
e4:af:47:a7:b4:bf:f7:79:13:cb:b5:0a:32:3a:0a:
7c:91:2f:3e:e4:fb:80:8d:7f:3c:e9:ec:25:fb:17:
22:8e:20:68:d6:68:bb:53:ee:67:e5:56:1f:5e:b6:
8e:0c:9d:cb:47:dc:e8:92:d4:73:a8:71:1b:bf:43:
54:28:2e:9c:53:d0:92:28:b1:82:dc:00:b4:04:74:
e3:85:6d:21:bd:ce:11:bb:6f:bd:60:43:c4:58:52:
7d:de:86:a2:f7:41:f0:ca:34:f6:22:ee:90:c3:0d:
47:bf:76:2a:45:7a:04:32:47:97:7a:5e:88:18:a8:
12:f7:9f:30:11:ec:01:77:0a:02:0d:9b:22:16:b4:
45:99:7b:31:00:43:74:cf:56:8a:db:26:52:84:98:
1f:27:b8:f5:c6:9a:da:70:84:cd:a5:9a:2f:c4:6a:
d8:96:8f:dd:ea:23:3a:02:b7:cc:3c:5d:6b:a7:62:
e2:8a:47:c9:c8:b5:21:05:94:0e:d0:3f:fc:6c:4c:
a4:4c:1a:4c:9e:2b:db:a2:d6:a4:8b:68:2b:25:3d:
80:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:57:9F:CE:07:AF:34:9E:C6:9D:78:A2:34:87:49:2D:8E:05:BE:B5
X509v3 Authority Key Identifier:
keyid:65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1b:19:d3:d2:39:8a:cc:39:58:15:6d:1f:e6:74:c0:9f:ec:
d2:a5:3d:f9:d7:34:52:e2:ce:a8:49:66:56:32:b5:47:3a:2a:
c8:8a:ac:f3:ba:d7:e2:9e:ea:2c:3c:2a:c1:d5:e3:8e:16:15:
ab:19:88:1e:c4:29:dc:f9:cc:ab:60:d1:09:20:bb:4a:ea:9a:
1c:83:94:71:40:0c:50:88:dc:91:fa:ba:7f:b1:12:e4:a0:91:
83:77:1c:96:46:67:a6:f6:6b:49:d3:1c:69:55:8b:5b:78:92:
32:75:cf:98:6c:9e:45:c6:f4:ff:db:2c:94:18:df:8f:09:a9:
90:d6:5d:77:0d:55:10:61:12:39:6c:af:de:be:50:63:5c:45:
69:26:e6:57:55:06:9d:0d:3f:db:de:ab:ba:58:f0:44:37:fc:
fd:f7:36:34:28:97:fb:27:cb:57:53:a2:71:a6:7e:ee:9a:8a:
38:24:a5:d3:5a:5f:0f:36:44:b9:37:67:3d:87:c5:47:e3:0b:
33:3c:f3:e9:49:61:e5:9b:ca:e3:41:91:5e:c2:f9:80:53:52:
af:a5:12:6d:78:7c:4e:2b:a5:d7:ff:a0:f1:c8:88:a7:26:87:
17:56:a4:2a:19:7b:2e:f7:09:e4:69:59:d7:6a:63:38:a9:bf:
6e:df:80:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:10 2026 by rpki-client