
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
File: zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json)
Hash identifier: ptec0azC07QleHX5ZYrLP/b2Y2ESbQbpGzLMqSyXyhA=
Subject key identifier: 36:E4:9B:19:62:F8:C1:22:83:AD:6C:F7:0D:59:9D:B9:C6:1E:5F:FD
Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92
Certificate issuer: /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92
Certificate serial: 1595
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
Manifest number: 156B
Signing time: Thu 02 Jul 2026 16:51:27 +0000
Manifest this update: Thu 02 Jul 2026 16:51:26 +0000
Manifest next update: Thu 09 Jul 2026 16:51:26 +0000
Files and hashes: 1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: kJF7PraPP0Ksrjqzs3Fw8TtxkPt3XQg9yPRe0pGphzk=)
2: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: RpjUJKKJgD70N/wkyssWhxel6X/Ka6no31psFzNbWNw=)
3: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: 0nNrNCZxO5NCWKsCOYrw7NVk3Cc7PuquXVWOm8fdGaU=)
4: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: aqobxay9N5rxgG0wGFJlQUVc2oUjZpwd/M9MkMpKCt8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl
rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 Jul 2026 16:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5525 (0x1595)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144436, serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92
Validity
Not Before: Jul 2 16:51:26 2026 GMT
Not After : Jul 9 16:51:26 2026 GMT
Subject: CN=6a46970f-7601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:37:a7:9a:45:c2:e3:fe:ff:05:48:df:a6:03:
9a:6f:31:95:88:52:83:25:e2:b5:94:f7:90:c2:fa:
80:a1:f5:3f:0a:c6:77:87:af:6d:c6:3a:fd:90:67:
ea:33:c3:95:3b:42:b2:12:94:a7:bd:6c:20:63:0b:
34:5a:b0:9f:c7:c3:b2:9b:8e:f1:b2:ad:51:d7:c8:
f9:9c:66:eb:5c:6d:1c:bf:d1:7e:05:44:29:95:c4:
e2:60:98:05:e4:c1:bb:c1:1f:41:28:33:fc:da:f3:
85:f2:f9:01:b6:85:93:18:77:9b:43:7c:4b:26:11:
bf:ba:5e:eb:da:41:2c:f9:c3:85:43:f4:73:30:4a:
24:71:33:18:e1:97:be:68:6c:73:0c:05:32:de:e7:
53:de:7c:c2:5b:80:2c:0d:87:3d:c6:4b:e9:ef:ef:
cd:43:f9:8a:b5:53:02:56:0b:1f:c9:27:c5:e8:97:
a8:9c:fc:d8:1e:a6:18:71:e4:2e:6b:18:7f:18:e1:
9d:16:7e:8b:6e:29:3b:80:18:dd:48:39:25:a3:9b:
a6:7f:82:50:c5:48:48:89:d5:7b:89:bb:34:10:2b:
8f:39:0a:59:70:b2:df:d7:97:f6:f3:91:10:db:d0:
6f:d3:e9:2c:e0:35:4a:03:b1:a9:3e:f9:97:07:09:
54:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E4:9B:19:62:F8:C1:22:83:AD:6C:F7:0D:59:9D:B9:C6:1E:5F:FD
X509v3 Authority Key Identifier:
keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:87:73:67:8d:44:10:4c:bd:ff:d6:2f:e3:eb:52:2a:90:cc:
80:0d:ce:64:f1:fe:97:56:ae:6a:3f:29:16:5d:91:28:50:18:
55:9c:cb:26:64:01:c5:d1:f9:d8:08:be:5d:f7:08:8f:25:36:
be:98:a8:33:0f:36:b8:ea:be:18:b2:8e:7b:35:46:47:01:0a:
c7:86:43:8f:87:e0:83:9e:f8:44:32:a8:1e:35:59:4d:bf:a4:
b3:6d:63:bb:fb:9b:5f:02:2b:17:98:95:62:1d:30:a8:ff:13:
19:ed:a0:74:2b:e2:ba:16:f3:73:ad:03:04:7e:ed:cd:24:b3:
4c:d2:5d:6c:1a:25:ff:2a:9f:2a:2b:41:ca:df:d8:65:19:30:
c3:02:d5:8d:ce:4c:3e:98:99:5d:05:47:5e:21:60:c9:20:96:
16:8f:ad:23:ad:f7:2c:20:ec:e7:ba:a3:2c:1f:2f:88:f9:40:
e2:7f:17:04:3e:1a:60:24:6a:9f:d9:25:0b:22:81:75:1a:6d:
90:5e:be:d4:2a:07:1c:7a:24:45:66:3d:7c:67:5e:d8:8d:e8:
63:44:e6:99:82:71:20:24:f7:3a:30:6a:66:ab:7a:15:5a:67:
73:23:2e:83:b5:15:d9:00:72:31:9c:10:36:41:24:02:2b:68:
ac:7b:15:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:48:59 2026 by rpki-client