
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
File: ZhNNob_trAyRnSax9_nhaK-dK04.mft (raw, json)
Hash identifier: oOg+jb9vqk/7ou6xz2r/mVrIv6msNyzyQRoPA/yWewU=
Subject key identifier: CD:37:40:B1:54:4E:00:D8:1B:19:3B:E6:5E:95:BF:98:41:42:72:BF
Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E
Certificate issuer: /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E
Certificate serial: 0122
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
Manifest number: 010C
Signing time: Sun 05 Jul 2026 06:51:14 +0000
Manifest this update: Sun 05 Jul 2026 06:51:13 +0000
Manifest next update: Sun 12 Jul 2026 06:51:13 +0000
Files and hashes: 1: ZhNNob_trAyRnSax9_nhaK-dK04.crl (hash: LKOUUPyv3rAEInaIe8+qZPmKY3WAFKlD5NeXhkl3Pec=)
2: 015250F6309311F084231321C4F9AE02.roa (hash: BeulAEPDoFLGO9UYVAx1+bgz0obUOcmmrn0Kzh9wNG8=)
3: B8104C9E531511F189594BAEBE833773.roa (hash: lrI09dlEBCTooAeOU2Wr6Z8X0DDGHdt7h2TqH79QhUw=)
4: 25922C44F3CF11EFBCC75246C4F9AE02.roa (hash: SFDboHNXYkxFP4C1ts24MrwCHP6KpG7hvpdePdBynPw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl
rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 06:51:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E
Validity
Not Before: Jul 5 06:51:13 2026 GMT
Not After : Jul 12 06:51:13 2026 GMT
Subject: CN=6a49fee1-185b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:52:c9:1c:f6:ca:94:7a:fb:27:6d:54:d6:7a:
7c:1b:53:0d:04:4f:f3:7e:72:c2:23:91:2d:fb:c7:
82:13:44:26:d5:f4:ac:7d:0c:35:8b:34:b0:82:46:
d1:02:ab:fb:c5:f9:22:bc:5d:28:38:c7:fb:36:c6:
cd:65:9c:b0:95:ed:35:fb:31:cf:a6:6c:e2:e8:42:
57:2d:b4:7f:a9:70:7f:73:60:db:a7:85:7e:97:ed:
e3:ae:2d:b6:29:eb:63:0b:f7:28:9f:8f:f1:d4:e6:
ae:29:07:77:cb:74:a6:a8:ff:57:4b:4f:56:3f:47:
47:b9:5c:12:6f:4f:be:0e:cd:75:67:f0:ab:6f:52:
e7:b8:20:28:ba:de:0f:10:41:2f:1a:36:0c:49:6f:
7b:86:f6:e0:df:8b:5c:38:0d:d1:10:b9:b7:e8:a3:
10:57:29:61:9e:6a:f3:e0:37:b0:66:39:9c:57:8a:
85:8f:47:72:ad:31:59:f2:ef:c1:e9:11:1a:c3:b1:
d0:51:60:ff:98:88:89:46:d1:e3:4f:2a:bb:63:8a:
ae:39:19:e3:62:62:be:1d:71:2d:a4:67:a7:4b:28:
30:f9:91:38:ca:14:f8:d3:b0:12:34:fb:85:fa:34:
dc:f2:cf:9c:88:00:45:a0:c7:e8:8e:e5:0e:52:a8:
0f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:37:40:B1:54:4E:00:D8:1B:19:3B:E6:5E:95:BF:98:41:42:72:BF
X509v3 Authority Key Identifier:
keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:d6:9f:a2:53:67:d7:4f:02:9e:32:50:82:ee:63:41:54:50:
79:10:1d:c0:c5:ff:2b:8f:16:37:03:ec:66:47:58:87:07:82:
32:86:1f:77:6a:5a:cd:10:0a:58:4c:25:f7:3f:e3:23:f1:4c:
e3:b3:61:f7:7b:f7:c1:3e:3a:8b:71:07:bf:97:15:4f:0f:57:
3c:f5:ed:a3:f8:19:a9:5c:c6:d0:60:fe:74:bf:f5:7e:d6:23:
6e:01:3c:75:94:94:79:90:02:52:d8:8d:a5:46:36:79:bb:35:
59:b3:20:11:12:4e:be:0f:2b:89:e4:a0:95:d1:4d:a8:39:09:
cf:14:e8:9a:bb:dc:02:4d:27:2d:58:0a:7d:08:42:7b:bc:bf:
ee:d3:61:03:1b:6c:ac:28:8a:9d:64:50:a2:63:d0:c5:65:9e:
f9:74:2a:8e:ac:21:95:e1:02:38:74:17:57:59:e0:2f:cc:4f:
d8:b1:aa:d8:e9:7e:bc:ab:4c:dc:e3:19:fa:9f:67:f3:89:0e:
57:b4:3c:d9:bf:e8:16:da:57:f5:f2:3e:5f:ba:3a:d6:6e:02:
04:02:55:68:f3:30:c6:60:df:85:1b:7e:a9:8f:e0:0f:73:43:
8a:4f:bd:9b:16:7c:d5:89:4a:89:68:9f:07:41:48:cc:31:e7:
7b:83:a4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:09:09 2026 by rpki-client