
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
File: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft (raw, json)
Hash identifier: vtZrqmOjk5FdXSrMB018jtWI0Rr6CLJnsjdVFf2qzlA=
Subject key identifier: 68:14:CF:DE:78:29:B0:5B:50:45:F1:6A:B9:37:93:99:E4:F2:E6:F0
Authority key identifier: CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01
Certificate issuer: /CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801
Certificate serial: 0322
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
Manifest number: 031A
Signing time: Wed 07 Oct 2026 01:12:16 +0000
Manifest this update: Wed 07 Oct 2026 01:12:15 +0000
Manifest next update: Wed 14 Oct 2026 01:12:15 +0000
Files and hashes: 1: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl (hash: 02YGWbYLlQUXlTzx91mVJFtCrCHBA38b+8g33mLT8rs=)
2: 71CE3962337511EDAE4C4121C4F9AE02.roa (hash: SrZFCYfwkgEZN+fxU55BuSix1/7qyq8HmlWELE9+odk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl
rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 01:12:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 802 (0x322)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912672E, serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801
Validity
Not Before: Oct 7 01:12:15 2026 GMT
Not After : Oct 14 01:12:15 2026 GMT
Subject: CN=6ac59c70-f9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bb:3d:3e:d8:6b:da:f0:ed:d7:6c:05:d9:29:
70:67:f2:03:ce:db:c3:a9:e1:2a:16:a9:fe:f4:4d:
58:ee:83:7d:00:dc:94:b1:36:c2:c3:a2:85:22:ab:
ca:e5:ed:e3:60:43:89:a5:fa:78:99:af:6d:87:e6:
21:aa:4f:21:44:bc:c7:b0:68:02:84:42:ad:4e:59:
84:39:c1:92:8c:ff:59:b2:54:c3:b7:30:e3:8c:32:
b5:26:a9:2c:58:73:33:a0:59:5d:a3:7d:ca:b5:0b:
23:29:74:15:b0:f5:4a:d1:d7:14:fa:82:6f:99:db:
76:c2:6c:17:dc:25:2b:ed:5b:29:e3:08:cb:b0:94:
a5:22:75:ac:42:ee:c9:6f:47:f8:84:21:37:ad:a8:
cb:91:b6:69:ad:35:75:08:c8:5a:6f:51:ef:2c:36:
1b:f3:75:cd:dc:ec:80:4c:f5:58:9c:b9:56:df:d1:
45:b5:53:fe:d0:ef:08:54:1b:5c:96:a4:bd:8d:67:
d9:1f:8c:cd:35:af:a9:78:cd:08:c4:4c:2b:b4:2b:
6c:16:1c:58:84:2e:7a:5f:02:fb:c2:6c:12:cf:1f:
ed:dd:71:71:2f:9c:12:f1:a3:8f:fd:05:c8:72:80:
b6:0e:3a:67:0f:75:de:73:d4:b6:c4:ec:a7:e2:4e:
43:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:14:CF:DE:78:29:B0:5B:50:45:F1:6A:B9:37:93:99:E4:F2:E6:F0
X509v3 Authority Key Identifier:
keyid:CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c0:73:01:45:14:68:20:8c:9c:cf:f0:8c:29:eb:f2:16:e2:
4b:ab:b1:b0:4b:68:40:36:1b:1c:52:57:8c:56:d4:25:cd:3f:
ec:1b:93:57:18:e1:fc:6b:a6:b0:74:9b:34:b5:89:82:51:85:
2f:e3:3a:e3:7c:5f:54:3b:a5:89:2c:f0:f5:fd:82:03:07:e4:
93:67:3a:e5:49:54:63:6f:1c:7b:8e:79:66:77:c9:3d:63:c4:
b5:37:fd:b6:ed:a6:eb:de:f9:25:89:2a:eb:0d:e9:f1:95:5b:
ba:f0:0c:20:bb:09:fc:f4:10:a2:9e:00:0d:c4:4d:b0:72:e9:
4a:fd:25:91:d9:77:34:e5:21:ee:9f:be:b6:d5:b4:98:18:18:
a8:76:9e:64:e4:ec:28:85:f3:69:99:16:33:c2:09:e7:c7:07:
89:14:8a:fb:bd:53:8f:3c:5a:dc:06:1c:7e:a3:b3:01:91:75:
c9:ad:dd:e6:48:65:2f:e4:1d:f6:d4:7f:7a:a1:c3:db:cd:ab:
14:70:fd:18:d7:f2:7e:2d:b1:65:c4:db:0e:2b:bb:92:eb:e9:
34:9c:46:a0:7c:58:c6:3c:e7:43:9a:92:ff:aa:48:b9:c8:61:
be:e4:8b:13:b4:2e:7f:d6:97:26:cb:98:56:43:71:c0:cb:57:
f3:e6:4c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:10:54 2026 by rpki-client