
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft
File: ZGscQagf9-WCtezcHO9UzmEVJWM.mft (raw, json)
Hash identifier: J+fkhFMnWCLwQWnvHu/ciy+2USi4EACHyxnb+hmRpk0=
Subject key identifier: E7:34:F1:6D:87:36:DC:56:03:C6:D0:D3:2A:A0:B1:2B:3F:CB:39:6E
Authority key identifier: 64:6B:1C:41:A8:1F:F7:E5:82:B5:EC:DC:1C:EF:54:CE:61:15:25:63
Certificate issuer: /CN=A9129D4A/serialNumber=646B1C41A81FF7E582B5ECDC1CEF54CE61152563
Certificate serial: 1E19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft
Manifest number: 1E0C
Signing time: Wed 20 May 2026 16:05:23 +0000
Manifest this update: Wed 20 May 2026 16:05:22 +0000
Manifest next update: Wed 27 May 2026 16:05:22 +0000
Files and hashes: 1: ZGscQagf9-WCtezcHO9UzmEVJWM.crl (hash: Nsj3b38LUQUMW8zHN7H05gBcDyd4Ccf+QBU2cEgqxqI=)
2: 810AF2B0AC9611E6A37EC415C4F9AE02.roa (hash: RTq7wgTLkv30DUnIUtm+GYtNb5yd3oaZyhu7ZUToBX8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.crl
rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7705 (0x1e19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129D4A, serialNumber=646B1C41A81FF7E582B5ECDC1CEF54CE61152563
Validity
Not Before: May 20 16:05:22 2026 GMT
Not After : May 27 16:05:22 2026 GMT
Subject: CN=6a0ddbc3-2c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:1c:b4:27:c4:e2:ee:4b:f3:57:35:4c:46:
b2:af:c6:f1:d8:81:ea:aa:ee:76:ee:8e:99:8c:14:
dc:47:e4:97:eb:1d:e9:fc:f6:71:d6:fd:8f:1b:6f:
1d:3f:90:7c:91:e9:92:6d:24:3d:40:05:1f:d7:c8:
6c:c3:61:af:e8:a7:f8:79:78:cc:8c:74:a3:06:2c:
2a:7d:f3:f0:d4:9c:dc:c3:db:7b:17:96:25:18:8c:
bb:66:68:e0:e0:16:49:be:48:c5:1d:29:23:19:5e:
96:3b:00:25:9a:16:bd:37:71:91:cd:66:ec:2e:07:
e4:00:c4:90:72:e4:66:67:6a:26:e0:82:e7:2d:33:
dc:ae:16:c9:8b:f1:67:c1:17:ce:c5:50:36:27:9f:
ba:7e:16:24:67:a2:4d:7e:f9:2b:ef:17:8d:46:1d:
d9:4c:99:20:4f:ab:35:fe:ab:69:97:9c:91:78:ea:
cc:5e:d3:18:8c:44:5b:b9:24:4d:6c:83:bd:b5:fe:
2f:8c:cf:57:2c:ec:ca:da:7b:e7:7d:ce:e3:34:78:
c6:e1:9e:d9:4d:65:9d:26:60:42:f3:e4:b2:41:6c:
ca:94:fa:31:2e:5a:d4:4b:d5:9e:31:83:05:d7:ef:
1a:78:9d:85:5b:99:92:0a:5b:ff:ab:36:16:c5:49:
64:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:34:F1:6D:87:36:DC:56:03:C6:D0:D3:2A:A0:B1:2B:3F:CB:39:6E
X509v3 Authority Key Identifier:
keyid:64:6B:1C:41:A8:1F:F7:E5:82:B5:EC:DC:1C:EF:54:CE:61:15:25:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:ec:70:f7:68:42:35:f8:6e:7b:97:8a:38:53:da:46:11:21:
42:87:9c:aa:fd:fc:ca:c6:1e:b7:55:2e:bd:a0:14:9b:27:b7:
f9:c9:0b:22:0a:40:17:32:86:58:01:cd:f8:c7:b2:0f:34:b0:
65:d8:ce:02:e4:e9:48:c3:8e:6f:73:ce:02:e5:7d:ca:ac:e8:
18:75:24:4d:75:4a:72:58:49:93:9d:01:78:c5:ce:d0:04:8c:
ae:5d:cf:32:fc:bb:b7:f8:3d:32:5c:df:f8:92:52:f6:98:3e:
db:3d:c2:53:aa:30:5a:61:94:3a:e6:66:97:2e:eb:b9:cd:fa:
18:29:5b:9f:68:84:ad:98:70:41:45:fc:b3:43:59:26:f5:2a:
06:08:61:5e:34:90:f0:6f:f9:71:70:cd:d8:58:f2:36:49:12:
46:15:a5:00:1d:6c:40:24:6e:97:5e:60:be:ca:8c:2e:21:ed:
7b:33:64:1e:1f:13:f9:62:9e:e8:8e:54:ea:57:e9:a9:f8:24:
b3:ed:1c:ce:65:23:fe:0a:e4:f7:26:f5:7f:e8:34:f3:7e:d1:
d8:da:86:52:bf:32:cc:b7:7d:d7:b0:ec:25:33:52:55:a9:7f:
91:38:df:dd:c3:f9:ad:0e:b3:1d:2f:f4:e8:6d:2c:04:14:91:
b7:f3:f4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:59 2026 by rpki-client