
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
File: ZvDB283xq8NO0RtGqQrjIBgCqVw.mft (raw, json)
Hash identifier: ub+FR5nrHdYrUe8AzNVIrSTdKbs8dc5EO4sDXISEp9s=
Subject key identifier: E3:05:FD:2C:14:29:D5:85:6F:44:09:BC:38:20:30:13:8D:FE:69:4E
Authority key identifier: 66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C
Certificate issuer: /CN=A912AED4/serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C
Certificate serial: 1915
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
Manifest number: 18F7
Signing time: Mon 22 Jun 2026 16:25:51 +0000
Manifest this update: Mon 22 Jun 2026 16:25:50 +0000
Manifest next update: Mon 29 Jun 2026 16:25:50 +0000
Files and hashes: 1: ZvDB283xq8NO0RtGqQrjIBgCqVw.crl (hash: r3cLCChDFWUnno3aFiIo0G/tRnEiqffUshuJh9ULAZs=)
2: C3C44D22ECA311EEAD3CC112C4F9AE02.roa (hash: pqDSzaWYlQqUrgyay2m9Z4YNozIYTNWuZnCi/imo924=)
3: 2E1E405E712D11EDA8C64C3DC4F9AE02.roa (hash: WT/ztJBPCnRbXAsKTFdhvipVvTOzMSRJMa+AX6jQ8aU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl
rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 16:25:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6421 (0x1915)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AED4, serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C
Validity
Not Before: Jun 22 16:25:50 2026 GMT
Not After : Jun 29 16:25:50 2026 GMT
Subject: CN=6a39620e-90f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1b:99:42:9c:f4:c0:40:db:2e:f8:b6:93:27:
46:5c:42:6c:51:fb:71:a4:77:c3:b9:61:86:4e:1f:
9a:4a:ad:eb:a3:67:f4:0f:b9:46:4b:e9:96:c1:d6:
aa:65:c0:7c:0f:e2:2a:ab:8c:99:ff:ba:9f:28:9d:
be:f8:6d:95:2e:ec:8b:88:3e:9e:10:d6:62:39:71:
df:ae:c5:13:2a:b3:9c:ec:8f:b6:a5:1c:2f:59:c2:
d7:50:7d:ca:3c:be:c9:91:8a:57:21:83:74:0c:f5:
9d:99:b8:7d:61:4b:ff:6d:47:aa:82:d3:05:05:4c:
a8:61:1c:f5:5c:50:15:df:a0:99:01:1b:27:60:ae:
13:69:52:47:c1:51:f7:76:42:4d:2a:80:8b:e8:67:
10:e1:f5:5e:65:cb:6c:36:d9:65:4e:66:fe:a4:ab:
fc:44:10:a1:40:61:9d:1f:4e:76:73:50:f9:62:52:
42:cf:5d:9a:d2:35:73:e8:ec:6a:9c:1d:d2:ca:ed:
c6:09:24:2e:15:cd:1b:93:0c:47:78:d6:3d:18:85:
df:11:3d:0f:ab:58:e1:a7:4e:12:13:53:00:17:9d:
fb:61:66:e3:ca:a1:50:cd:20:72:5a:50:0d:f7:9f:
c7:86:df:b5:9b:0f:16:14:13:e6:05:81:30:6c:91:
b3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:05:FD:2C:14:29:D5:85:6F:44:09:BC:38:20:30:13:8D:FE:69:4E
X509v3 Authority Key Identifier:
keyid:66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:53:57:b0:6d:29:60:7e:c2:7a:49:ef:1e:d8:35:d9:c4:1c:
43:2e:c6:9a:a4:04:d9:09:a4:fa:65:ad:6b:a4:51:f8:d4:d7:
14:5b:74:aa:ca:c1:c7:0a:45:41:0b:98:20:03:c3:7a:a8:f1:
ff:f0:e4:dc:2c:f4:7b:89:c7:01:c9:66:1d:ef:56:50:eb:90:
41:bc:14:3e:44:9c:72:d0:2f:22:7a:07:c9:d4:a6:8d:57:4c:
c8:76:44:8a:33:21:bf:a4:a0:6a:a2:dd:55:d6:8f:48:e5:d5:
79:de:4c:74:7a:22:b6:d2:30:dd:4c:ac:3d:61:80:21:cc:de:
b5:39:32:02:c4:9a:da:8c:a3:10:2e:25:a7:d5:39:e8:9e:dc:
a5:08:ad:c0:a7:fc:26:d1:94:0c:bf:9c:9e:aa:04:56:bb:2d:
cb:86:88:f3:00:d9:32:81:cc:fb:60:97:0e:34:37:6d:92:7e:
32:63:cd:ca:79:8b:72:d5:f9:d9:d8:8d:38:90:bf:9d:c0:42:
1f:45:6a:d5:8e:51:5a:cb:18:e8:0b:e7:3b:0e:43:fa:74:3e:
35:fc:91:6d:b7:d5:d7:3f:80:90:0e:38:a1:c2:54:57:f9:da:
fe:b0:88:4e:5a:eb:d1:53:05:aa:68:50:79:b8:28:0f:c0:ae:
35:2f:60:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:38 2026 by rpki-client