
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
File: ZvDB283xq8NO0RtGqQrjIBgCqVw.mft (raw, json)
Hash identifier: JLNeNwx21RK5sYWlH6mLtOyPIlHd0i1UuAA6TncmsB0=
Subject key identifier: 2E:E8:20:50:EF:67:B3:02:4E:EB:3A:50:B7:11:D9:BC:D2:5F:2B:CE
Authority key identifier: 66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C
Certificate issuer: /CN=A912AED4/serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C
Certificate serial: 193D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
Manifest number: 191D
Signing time: Mon 31 Aug 2026 16:25:29 +0000
Manifest this update: Mon 31 Aug 2026 16:25:29 +0000
Manifest next update: Mon 07 Sep 2026 16:25:29 +0000
Files and hashes: 1: ZvDB283xq8NO0RtGqQrjIBgCqVw.crl (hash: UjP+vkWg6qDqHlKkIJ68sXjpfFfkZzRGtLr2VwoLUW8=)
2: 2E1E405E712D11EDA8C64C3DC4F9AE02.roa (hash: aHRIc+5CEvfGNn9qNiJ3tH0QVf127hgvqFUAwDmOHGU=)
3: C3C44D22ECA311EEAD3CC112C4F9AE02.roa (hash: ZgyNp/+kaqwVStVmnjZ3bnZAYkWgSQvrw8uSupm7tj4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl
rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 16:25:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6461 (0x193d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AED4, serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C
Validity
Not Before: Aug 31 16:25:29 2026 GMT
Not After : Sep 7 16:25:29 2026 GMT
Subject: CN=6a95aaf9-d52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:67:60:65:6e:18:e1:69:de:54:36:43:08:
16:81:78:64:e4:51:23:64:1e:7c:1d:4a:49:5d:f0:
f7:7b:e9:1c:66:71:fd:aa:b8:bb:07:29:09:c0:95:
7d:46:e9:a4:50:47:19:b2:03:51:7d:66:20:8c:dc:
66:1c:6f:b7:f7:42:dc:a6:60:7d:31:a1:6e:c6:b4:
65:9a:e3:aa:77:e0:08:1d:09:83:01:c7:3a:ac:b8:
52:25:53:3d:ec:a0:3a:77:e9:00:c0:1a:9a:95:6f:
3a:ab:9a:f8:35:1a:e7:69:30:b5:29:3d:db:db:98:
6b:ce:1d:09:4c:5b:53:9d:57:c2:b6:d2:46:a7:b9:
a0:a7:f4:da:f9:a6:49:a8:82:13:23:83:de:04:4f:
ca:cd:f5:f8:1d:6e:4f:f2:e5:36:0c:78:19:54:6f:
f8:8a:66:49:cd:dd:33:0e:5f:66:93:74:0b:fa:1f:
34:e6:eb:dd:00:e8:5d:48:7e:1b:df:2e:f6:7b:78:
0b:57:17:1e:53:b2:c0:d7:9d:17:a8:2c:e0:2b:cd:
ae:c2:4b:6a:0e:8d:7b:87:78:ac:09:fc:02:77:d2:
32:4b:c4:fc:aa:70:84:94:64:81:12:5a:d4:ff:ec:
11:d1:93:8d:c6:4c:34:92:b4:6e:d6:1a:e8:57:f2:
a2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E8:20:50:EF:67:B3:02:4E:EB:3A:50:B7:11:D9:BC:D2:5F:2B:CE
X509v3 Authority Key Identifier:
keyid:66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:71:c5:d3:52:e4:b4:17:11:05:99:07:10:f7:e9:5a:44:8b:
1a:fd:a6:c0:c5:bb:c7:a8:36:53:25:34:92:0f:89:d5:02:db:
6b:39:84:52:49:2b:87:7a:4d:58:24:f1:30:16:2f:63:b1:ce:
b0:c3:b4:1a:1d:1f:e6:30:1e:7a:68:0a:8c:80:8b:1b:c7:cc:
dc:ae:a0:c1:a7:0a:35:81:03:1f:d2:d9:10:b3:1f:f8:45:fd:
50:9e:09:ca:64:00:1c:ff:36:35:5f:76:40:5c:82:c8:44:e3:
6e:59:e8:78:3f:23:03:33:ac:7a:97:09:ec:ad:e7:2a:18:4c:
ae:03:83:1f:d8:c5:81:13:23:d3:60:75:5d:d4:17:b2:33:b9:
7a:af:7b:59:5a:44:95:c5:84:3b:a2:06:a5:81:44:b3:4c:3e:
ec:4c:55:9b:34:76:02:73:02:df:5a:2f:de:9c:3a:11:50:57:
94:9f:22:08:6f:18:c3:9e:53:52:e7:ca:8d:53:88:44:61:4e:
14:86:1d:46:a4:02:9a:31:3c:7a:60:3b:59:a0:83:f4:1b:71:
9f:94:d2:c8:39:66:fc:13:5e:2e:f0:36:db:b4:48:c2:81:30:
d1:36:97:69:e5:41:65:da:9d:58:ae:7e:2e:cb:84:b4:3d:4a:
42:58:a3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:36:25 2026 by rpki-client