
$ rpki-client -vvf rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
File: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft (raw, json)
Hash identifier: D5E4XP+Yt6lmFHDtkqWUp6VbZ7RFVBP5v58hffcVu9U=
Subject key identifier: 4A:9A:2C:12:6F:B6:1D:CE:0F:F3:26:99:43:9C:9E:35:EC:F1:07:2B
Authority key identifier: CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01
Certificate issuer: /CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801
Certificate serial: 0309
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
Manifest number: 0301
Signing time: Wed 19 Aug 2026 01:32:26 +0000
Manifest this update: Wed 19 Aug 2026 01:32:26 +0000
Manifest next update: Wed 26 Aug 2026 01:32:26 +0000
Files and hashes: 1: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl (hash: HiCDfysr1QJ2sa1T8M5JApEBzRutbayXSQzwmcMhw5o=)
2: 71CE3962337511EDAE4C4121C4F9AE02.roa (hash: SrZFCYfwkgEZN+fxU55BuSix1/7qyq8HmlWELE9+odk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl
rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 777 (0x309)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912672E, serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801
Validity
Not Before: Aug 19 01:32:26 2026 GMT
Not After : Aug 26 01:32:26 2026 GMT
Subject: CN=6a8507aa-633d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8e:2a:fd:a8:5b:32:37:da:71:f4:32:5c:ed:
dd:cd:6f:b7:78:67:ad:7e:a5:5a:01:4f:d1:83:6a:
0a:35:1a:b5:9d:13:cf:7f:69:53:55:78:cb:75:23:
07:1b:be:80:e4:a4:e3:0e:21:59:24:3d:b6:ef:00:
53:c0:71:a4:59:40:56:24:6a:2a:49:b9:86:5b:16:
c4:91:7d:07:12:58:33:fa:bd:a7:d3:9a:8e:64:45:
70:0b:db:4a:9e:32:67:14:a8:35:37:5e:7b:ae:0f:
2d:6c:a4:4d:a5:9a:6d:dc:5b:52:b4:8d:51:28:46:
b4:3d:42:fd:32:8c:ee:c1:54:de:8a:27:5f:a5:7c:
f9:5d:3f:13:ee:a6:6c:7c:5c:f9:84:08:d0:b3:56:
b0:50:40:aa:aa:be:1e:f6:a7:f9:e9:49:01:bd:74:
a8:48:00:dc:06:55:c1:ba:36:de:e5:5b:4f:ee:27:
f6:21:c6:ff:3d:de:19:fd:0a:dc:1a:ef:1a:f4:47:
e0:67:25:35:c9:73:76:dd:a4:e0:f2:5d:6a:7b:55:
f0:fe:46:72:cc:27:a2:b6:8b:66:7a:cc:b3:0a:f6:
03:4d:77:ea:2e:10:65:8e:1c:a9:07:87:11:0e:50:
e7:05:36:1b:8f:5e:24:2c:54:98:4a:a7:d4:43:09:
dc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9A:2C:12:6F:B6:1D:CE:0F:F3:26:99:43:9C:9E:35:EC:F1:07:2B
X509v3 Authority Key Identifier:
keyid:CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:fb:41:b2:23:1a:f9:22:a3:a6:55:c5:88:c5:0a:75:58:ef:
28:4d:b6:21:c7:e6:54:3e:26:9b:57:9d:9e:62:65:45:21:9f:
40:17:0a:73:1a:d3:a9:4b:86:13:aa:35:a3:a9:13:c1:63:b9:
68:2f:40:7d:89:01:8d:df:75:dc:32:0d:b1:f2:70:da:fa:a0:
08:8b:9f:23:bb:55:9e:05:10:4d:66:2d:0b:79:11:c2:cd:c7:
71:81:99:3b:d9:2a:d9:a6:55:6d:c3:f6:d0:c6:fa:22:91:4e:
5a:78:92:ef:a0:e8:8e:f5:36:0d:40:e0:af:6b:83:a4:fd:a2:
cc:73:87:49:59:e4:eb:39:1f:6b:63:34:6a:07:b1:d9:13:0f:
f8:40:76:1d:c2:60:56:af:61:4a:95:19:ee:76:ed:ef:44:4e:
3b:af:73:aa:ee:b1:84:b6:d2:68:c4:26:bd:22:51:3c:f5:91:
38:72:8a:c8:9f:33:a0:7b:cc:cb:47:b2:44:b1:e1:63:d9:26:
2a:91:bf:1d:0c:7a:df:a0:1f:60:16:6c:fa:bf:f0:ab:1a:ec:
87:6c:c0:cd:80:fc:5c:52:2f:46:89:d8:bc:49:85:56:95:5b:
3d:51:fb:e4:56:5f:99:b6:b7:96:34:a9:d8:b6:06:3c:a5:b5:
5d:85:64:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:44 2026 by rpki-client