
$ rpki-client -vvf rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft
File: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft (raw, json)
Hash identifier: mi9OXy2+N3wQiVC/GsCsyfHoYij+e6chywvH1ovGoVE=
Subject key identifier: 9D:E5:7C:36:A8:A8:91:B6:6C:67:CE:21:DA:0E:9C:CB:49:B3:38:6C
Authority key identifier: CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9
Certificate issuer: /CN=A913459F/serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9
Certificate serial: 1689
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft
Manifest number: 1689
Signing time: Tue 18 Aug 2026 16:50:50 +0000
Manifest this update: Tue 18 Aug 2026 16:50:49 +0000
Manifest next update: Tue 25 Aug 2026 16:50:49 +0000
Files and hashes: 1: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl (hash: jhYX2IUUTTcNwc1jA8NI8C1rT5O25atZBrCdrhddZFs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl
rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 16:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5769 (0x1689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913459F, serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9
Validity
Not Before: Aug 18 16:50:49 2026 GMT
Not After : Aug 25 16:50:49 2026 GMT
Subject: CN=6a848d69-f45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:50:12:ed:8b:b3:94:e0:01:84:2b:9e:eb:2a:
21:85:71:c6:bc:85:80:f4:64:5a:28:4e:04:2e:b1:
5f:86:fb:e7:c3:19:cd:6f:1b:b7:83:0d:b3:7e:ec:
21:c7:ae:cd:20:d5:e2:05:b6:ea:b9:7b:ce:48:0f:
05:5e:c9:04:9f:fd:80:40:3b:a4:73:8c:c8:72:15:
42:30:73:4c:d5:84:12:07:3e:55:bb:ad:45:6e:2f:
9f:ac:92:a8:89:02:9a:36:a6:66:ae:74:63:2c:82:
c0:75:bb:b9:ec:aa:28:87:3f:ae:20:62:93:d8:85:
04:9f:45:ac:81:a0:78:57:81:75:73:78:8e:84:f8:
77:f9:52:13:d5:c7:51:69:47:a1:78:39:8a:8e:96:
f4:7e:c3:16:15:6c:92:f2:ca:b5:66:d4:45:94:e4:
0c:0f:21:af:c3:36:f8:ac:b3:99:39:53:c4:9c:b7:
40:72:64:58:f5:48:b8:c7:81:5f:34:a5:ed:1a:c8:
d8:90:0f:18:f0:d8:f5:03:54:ca:67:7e:55:a5:61:
c2:62:0c:94:a5:d7:a6:8d:36:19:ac:e0:02:41:1a:
9e:1f:39:b8:40:3a:e6:a7:60:73:a3:5e:6d:8a:6f:
35:c0:f2:c0:b7:79:4a:e7:58:08:d7:f1:e8:0c:cd:
03:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E5:7C:36:A8:A8:91:B6:6C:67:CE:21:DA:0E:9C:CB:49:B3:38:6C
X509v3 Authority Key Identifier:
keyid:CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:43:bd:03:79:24:89:82:77:8e:05:b9:06:4e:41:93:cc:7a:
ee:f4:cd:59:f1:5d:94:6e:f8:62:e9:64:82:f7:08:76:5e:3f:
41:27:8f:23:23:58:db:61:74:6d:80:6a:b3:24:41:1c:70:a0:
83:98:ca:1c:ca:be:83:05:1d:88:c6:8d:c0:de:0d:36:e3:74:
c2:dc:0e:aa:3e:f8:6a:04:8a:f5:09:a4:62:0f:a0:80:b7:9c:
08:f4:58:36:72:3e:58:f0:57:8f:00:57:94:a3:d6:8c:47:f2:
84:dd:a9:77:17:12:b5:51:2e:51:85:a2:bd:0d:62:8d:75:92:
d4:fb:44:e8:7e:d8:64:6b:e0:15:2a:78:eb:ca:44:ea:be:a0:
b2:f6:39:d5:ab:a9:d3:75:fc:36:3b:c5:14:19:34:3f:9c:02:
f2:f7:3a:2f:36:cd:d4:33:f4:df:19:6b:6c:84:f3:75:02:e4:
2b:f7:7d:c3:c6:a2:65:1d:99:23:b3:3c:a8:db:34:60:cb:5f:
7f:66:af:1b:74:03:66:c6:20:2e:b6:b4:1f:90:e9:c2:25:89:
67:e9:d7:a6:4d:d9:6f:c5:62:62:a9:40:27:36:e7:0c:a3:0d:
08:c4:bd:9c:ae:4c:3a:c7:3c:b9:7e:2f:4d:24:fa:c7:9b:a7:
32:95:7c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:18 2026 by rpki-client