
$ rpki-client -vvf rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft
File: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft (raw, json)
Hash identifier: X4KjoCkQAsPNiymoQtRSES7JYDP4suNiiiTPLg/Ut/Y=
Subject key identifier: 44:96:B0:7B:E1:47:A3:AF:9C:A2:4B:72:0D:5F:F3:48:18:0A:B2:8B
Authority key identifier: CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9
Certificate issuer: /CN=A913459F/serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9
Certificate serial: 165B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft
Manifest number: 165B
Signing time: Wed 20 May 2026 16:42:23 +0000
Manifest this update: Wed 20 May 2026 16:42:22 +0000
Manifest next update: Wed 27 May 2026 16:42:22 +0000
Files and hashes: 1: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl (hash: A8UlsimoItuGc4ZkmLi9tcllpb6kvC2PKED86O4Ey7Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl
rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:42:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5723 (0x165b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913459F, serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9
Validity
Not Before: May 20 16:42:22 2026 GMT
Not After : May 27 16:42:22 2026 GMT
Subject: CN=6a0de46f-8ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6c:3a:c2:6d:bc:4b:62:7c:bd:f6:de:05:75:
a0:49:3a:c1:bb:b1:52:cb:bb:33:54:58:16:ed:57:
bf:33:cb:55:14:6e:ab:6e:e3:31:ed:d7:fb:3e:b1:
1f:43:23:5a:2e:88:a3:99:44:46:df:4c:07:61:e1:
80:6b:62:f3:e7:29:1e:52:15:12:bb:e2:1a:6c:88:
58:7d:08:ef:e4:ba:68:66:81:6d:7e:a3:2f:fc:e4:
50:30:5c:12:57:7a:3f:7f:71:3a:0c:70:24:62:f8:
31:24:6b:25:6b:63:13:f9:b7:6d:4f:ab:2d:87:3f:
75:9d:9f:45:fc:97:bb:64:c3:79:1a:98:23:4f:9c:
58:23:86:96:67:3a:bb:b0:c7:ca:0e:35:41:b0:d6:
68:58:93:6b:69:f4:3b:b9:a0:db:be:3c:05:62:84:
39:df:10:1b:0d:c7:42:f7:13:33:ee:56:49:39:3b:
de:ba:93:2c:74:46:01:11:6e:4c:1f:88:9c:16:27:
3b:cc:07:4b:ae:31:e1:b7:e2:6c:7d:1c:fa:cc:4e:
a2:9d:d5:8b:2b:59:d4:bb:45:c2:19:6c:df:3c:d0:
8b:e3:1c:8f:b5:df:b3:f5:47:3a:de:08:fd:de:5e:
52:39:4a:0e:6d:b4:5b:b4:80:19:f0:10:61:46:4f:
c6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:96:B0:7B:E1:47:A3:AF:9C:A2:4B:72:0D:5F:F3:48:18:0A:B2:8B
X509v3 Authority Key Identifier:
keyid:CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a5:f8:e8:2b:b2:98:b0:8c:26:33:29:50:44:39:93:6f:b6:
a0:df:40:15:d7:0a:d1:73:94:c7:65:a5:7a:42:9a:07:06:12:
f3:35:87:2b:26:20:a9:80:58:c5:50:34:d6:6c:a9:1e:bb:d7:
73:8f:68:f5:06:72:d3:cb:cd:05:d9:f0:41:ea:70:a7:22:74:
6a:bf:92:65:ce:e6:aa:b9:da:1f:19:f7:51:80:80:2b:40:3c:
e7:42:49:19:f2:38:02:17:7b:5c:7a:51:3e:a8:24:84:7d:b1:
a9:96:95:99:97:ce:34:1c:e3:6b:53:6f:f0:4c:0c:46:6a:6f:
c6:0e:b9:fe:ca:76:ef:e6:ba:df:67:18:d3:19:b2:db:a4:0d:
4f:02:71:8f:28:50:52:22:ac:8a:09:4e:08:ee:88:f5:cf:8f:
0d:cb:ef:c5:c3:8d:d4:36:9c:4f:08:ce:b5:a9:47:0d:e8:03:
6e:ad:e6:a2:7f:d7:be:ca:33:6f:78:73:3a:0c:f5:b2:3f:cc:
26:3c:5a:f6:56:64:ba:48:bc:b4:1e:da:fc:65:de:75:e7:ad:
d5:1b:de:f2:4d:43:45:25:31:53:d4:e1:74:8c:40:70:0f:c5:
bf:cd:5a:97:89:82:b4:3e:a1:ca:a8:23:df:48:58:e4:62:57:
b1:85:e7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:28:49 2026 by rpki-client