
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
File: zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft (raw, json)
Hash identifier: mqj9eXkY2eLJzsgxDc/70beQ8eo913iBc4VJUpKZSLU=
Subject key identifier: 38:F3:0E:45:C2:A8:02:96:6D:A6:D8:80:C9:E3:05:72:C3:F6:9F:03
Authority key identifier: CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1
Certificate issuer: /CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1
Certificate serial: 0537
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
Manifest number: 0528
Signing time: Tue 18 Aug 2026 23:58:53 +0000
Manifest this update: Tue 18 Aug 2026 23:58:52 +0000
Manifest next update: Tue 25 Aug 2026 23:58:52 +0000
Files and hashes: 1: zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl (hash: QntRVJKmwrBMNTlkacHsDkILyIkBEN8Cw5Jplqnf3io=)
2: 6E5D9F026AD211EF84B5841FC4F9AE02.roa (hash: ynmW2tXKon2Mm9XJxO05TX1KTfoacHd+1EhVNC9kNXU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl
rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1335 (0x537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E990, serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1
Validity
Not Before: Aug 18 23:58:52 2026 GMT
Not After : Aug 25 23:58:52 2026 GMT
Subject: CN=6a84f1bc-a125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:60:18:55:c6:22:c1:96:97:01:e8:c4:96:
53:3d:1c:2b:60:56:a1:f6:ff:b1:11:15:a2:3c:a2:
f1:7c:5f:18:83:89:66:49:ea:ae:27:7f:7a:2b:38:
76:74:9f:bb:50:3f:88:f3:88:69:67:f3:1f:09:55:
1b:c4:8e:e7:9c:75:99:ae:56:f2:14:2b:58:69:3f:
92:2b:db:8b:02:f6:61:fb:cf:98:66:7a:c5:15:7f:
15:5f:07:7b:4b:06:dd:35:7a:2c:5b:e5:26:b0:fa:
05:6d:70:95:36:e6:e5:b8:a8:89:28:84:14:ae:b8:
12:d6:00:7b:f0:a3:98:86:c8:0f:9b:cb:65:85:d5:
3f:14:06:03:55:5c:1a:56:7e:1a:a1:73:53:8d:e4:
f3:22:ef:90:2a:8f:e8:5b:b0:a6:cb:90:57:9b:27:
5d:11:53:ae:e7:9a:97:fc:2a:44:f7:08:ab:9d:73:
b1:12:9e:d1:e6:dd:3c:bf:ac:16:95:6f:01:87:c6:
e2:a3:da:29:00:96:0d:cd:b5:00:1b:11:0d:75:10:
a5:af:63:ea:c6:ed:da:82:46:76:5e:70:1e:92:a2:
9b:15:b0:60:1e:0e:fd:cf:de:d5:23:e9:81:8c:b1:
bb:2f:e4:ba:ef:c9:5e:6f:85:31:20:95:99:e6:4e:
77:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F3:0E:45:C2:A8:02:96:6D:A6:D8:80:C9:E3:05:72:C3:F6:9F:03
X509v3 Authority Key Identifier:
keyid:CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:3f:e8:f0:65:24:91:24:a1:87:bc:73:6f:4b:6e:7f:94:48:
37:48:72:f0:ab:ff:b8:39:84:fc:68:cd:9e:cc:58:01:8a:c7:
03:1c:ee:83:76:ea:8d:2f:2f:ea:aa:34:50:e0:44:ba:95:2c:
b2:c4:9f:b5:29:76:1e:2b:7b:38:0c:c0:6e:a6:85:37:4d:fb:
eb:83:f0:15:af:1d:8e:3c:15:5e:3f:4e:44:b4:e5:4b:f4:43:
0e:62:a0:8b:92:01:db:d0:90:54:9a:fb:d9:59:8f:95:74:c6:
9c:95:0a:21:8e:57:82:63:cd:8e:a3:f7:9c:a8:1b:ce:55:98:
a6:28:e4:e5:8e:e8:35:5f:0b:9a:8e:31:04:6e:9e:4f:ee:db:
b0:56:e8:40:da:b3:64:08:2d:c1:6a:f0:61:4a:1e:48:45:f0:
8c:bf:95:6d:2b:45:f7:04:23:65:aa:70:18:bd:69:a9:f3:e7:
4c:ce:cf:f7:2d:06:86:25:61:b7:2a:41:3b:46:df:d3:14:40:
f7:08:c5:60:cb:18:13:9d:de:3d:24:c7:71:33:fd:72:f8:7c:
6b:cc:15:14:cd:31:34:79:16:d7:ca:02:f4:42:25:81:30:65:
ba:8c:6d:0d:7e:55:8c:d6:a1:a7:cb:a6:4f:9d:bc:58:82:2e:
49:6c:61:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:29:02 2026 by rpki-client