
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
File: ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft (raw, json)
Hash identifier: gdK+IFSDrgyV2F6YmjMH0twtmSwH2OA5BCC8WKzs5AE=
Subject key identifier: 60:A0:BC:95:22:B3:61:07:CA:34:F7:79:AA:15:D5:AA:7B:26:71:A7
Authority key identifier: 66:C2:DB:0D:8B:69:0C:95:36:B0:6A:B7:CE:C6:5C:08:D5:76:3F:4F
Certificate issuer: /CN=A9131194/serialNumber=66C2DB0D8B690C9536B06AB7CEC65C08D5763F4F
Certificate serial: 6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
Manifest number: 6C
Signing time: Thu 21 May 2026 07:58:36 +0000
Manifest this update: Thu 21 May 2026 07:58:36 +0000
Manifest next update: Thu 28 May 2026 07:58:36 +0000
Files and hashes: 1: ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl (hash: VHFqe3pSmlc9wxVFRfUyH6X23CpgwUesawlJXeYtzQk=)
2: BCD0C756B3D111F09D2C6B5BC4F9AE02.roa (hash: 4o6d3Mckrzy48+xLI8bsyNkRAk7N9AqNPet+OzlxVP4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl
rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131194, serialNumber=66C2DB0D8B690C9536B06AB7CEC65C08D5763F4F
Validity
Not Before: May 21 07:58:36 2026 GMT
Not After : May 28 07:58:36 2026 GMT
Subject: CN=6a0ebb2c-3ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:2d:7c:98:db:b7:5d:45:c8:eb:b9:8e:7d:
96:64:36:d5:a6:e0:4f:7b:a8:c0:b2:9e:19:e0:26:
b9:3b:c6:26:39:cf:f2:6f:69:ad:f0:fd:e1:80:68:
69:06:6e:f3:99:9a:fd:d9:db:a4:f9:e9:75:8a:8a:
30:12:e5:05:af:3e:f2:05:2b:42:4d:3b:1c:9d:76:
7a:c0:f9:f6:70:ff:67:fc:b4:44:31:f9:b7:e0:d2:
f0:66:d4:bd:7a:24:5f:57:63:8c:b2:6a:69:8d:d1:
f0:eb:13:cf:6f:78:96:93:91:27:cc:43:f8:89:61:
4e:21:70:93:b1:ce:98:33:69:3b:62:77:23:c9:64:
b2:e4:5a:e5:af:2f:e9:10:ad:cb:4b:2c:97:6d:56:
95:0f:a0:f6:b6:d2:00:8a:99:1d:37:54:0b:a3:93:
7e:ca:bb:ed:79:9c:60:9b:c8:cb:dd:8c:13:59:3f:
f9:95:ac:5c:b5:9b:99:9a:ae:8b:66:fd:64:63:b8:
92:27:c0:11:39:b4:67:6a:7e:95:a8:6d:e6:e5:32:
06:e2:e5:11:fd:82:b5:cd:c4:bc:c2:4c:69:6d:83:
90:90:5e:6a:6d:12:0c:b9:09:90:d2:c9:40:d2:b7:
4e:4f:de:40:1b:53:95:e1:d2:21:d7:f6:42:4a:50:
af:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A0:BC:95:22:B3:61:07:CA:34:F7:79:AA:15:D5:AA:7B:26:71:A7
X509v3 Authority Key Identifier:
keyid:66:C2:DB:0D:8B:69:0C:95:36:B0:6A:B7:CE:C6:5C:08:D5:76:3F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:4d:1f:a7:b1:22:46:eb:8a:e9:7c:d3:54:b7:01:36:17:93:
4c:cc:f6:15:3a:f9:de:d8:fa:6b:ff:ae:22:dd:6a:06:1f:90:
23:18:08:71:d1:c9:60:01:14:29:3c:29:3a:08:1f:f3:14:a0:
cd:3d:6f:35:01:50:da:8e:c9:7e:32:8a:43:32:80:64:16:64:
dd:ee:42:f8:24:65:b0:76:11:5d:bd:3c:21:69:5a:7f:18:2a:
0d:6d:fe:fa:49:4a:d0:b8:f4:00:a5:8d:6a:d3:23:e4:00:2f:
d2:08:38:a5:c8:8b:e7:0b:36:2c:6f:d4:83:7e:48:5f:5c:9e:
e3:c2:6d:80:58:23:29:41:d5:ec:54:ef:96:30:04:96:4d:0a:
62:16:10:10:e0:58:d7:62:8d:4d:90:29:b6:51:af:4f:13:be:
9c:c5:c6:3d:14:a3:42:4f:9b:2c:8f:7f:b3:44:a3:40:c7:31:
16:e3:1b:f4:94:34:43:50:13:11:bc:57:09:54:8b:32:92:58:
7f:e5:8e:50:29:e8:0d:b9:1d:45:6d:78:13:31:8f:2c:ab:79:
14:bb:45:4c:0d:21:f8:c0:56:f5:da:9f:b2:4f:f4:52:54:73:
48:08:5f:28:ab:d3:23:78:b0:9a:46:cf:a7:42:a4:53:bf:6e:
d0:d4:1b:58
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MTE5NDExMC8GA1UEBRMoNjZDMkRCMEQ4QjY5MEM5NTM2QjA2QUI3Q0VDNjVDMDhE
NTc2M0Y0RjAeFw0yNjA1MjEwNzU4MzZaFw0yNjA1MjgwNzU4MzZaMBgxFjAUBgNV
BAMTDTZhMGViYjJjLTNlZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCmoS18mNu3XUXI67mOfZZkNtWm4E97qMCynhngJrk7xiY5z/Jvaa3w/eGAaGkG
bvOZmv3Z26T56XWKijAS5QWvPvIFK0JNOxyddnrA+fZw/2f8tEQx+bfg0vBm1L16
JF9XY4yyammN0fDrE89veJaTkSfMQ/iJYU4hcJOxzpgzaTtidyPJZLLkWuWvL+kQ
rctLLJdtVpUPoPa20gCKmR03VAujk37Ku+15nGCbyMvdjBNZP/mVrFy1m5marotm
/WRjuJInwBE5tGdqfpWobeblMgbi5RH9grXNxLzCTGltg5CQXmptEgy5CZDSyUDS
t05P3kAbU5Xh0iHX9kJKUK9pAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYKC8lSKz
YQfKNPd5qhXVqnsmcacwHwYDVR0jBBgwFoAUZsLbDYtpDJU2sGq3zsZcCNV2P08w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMTk0LzI5REUxMkNBQjND
QTExRjBBNUMwN0I3RUM0RjlBRTAyL1pzTGJEWXRwREpVMnNHcTN6c1pjQ05WMlAw
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWnNMYkRZdHBESlUyc0dxM3pzWmNDTlYyUDA4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx
MTk0LzI5REUxMkNBQjNDQTExRjBBNUMwN0I3RUM0RjlBRTAyL1pzTGJEWXRwREpV
MnNHcTN6c1pjQ05WMlAwOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA4TR+nsSJG64rpfNNUtwE2F5NMzPYVOvne2Ppr/64i3WoGH5AjGAhx0clgARQp
PCk6CB/zFKDNPW81AVDajsl+MopDMoBkFmTd7kL4JGWwdhFdvTwhaVp/GCoNbf76
SUrQuPQApY1q0yPkAC/SCDilyIvnCzYsb9SDfkhfXJ7jwm2AWCMpQdXsVO+WMASW
TQpiFhAQ4FjXYo1NkCm2Ua9PE76cxcY9FKNCT5ssj3+zRKNAxzEW4xv0lDRDUBMR
vFcJVIsyklh/5Y5QKegNuR1FbXgTMY8sq3kUu0VMDSH4wFb12p+yT/RSVHNICF8o
q9MjeLCaRs+nQqRTv27Q1BtY
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:03 2026 by rpki-client