
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
File: zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json)
Hash identifier: 7854efGn27thDl9Ee12jAAQquZhZzJutAccBOPCjfBc=
Subject key identifier: 67:33:AE:7B:C3:5B:79:5D:35:FA:9C:54:3D:15:88:FE:11:0B:BF:F0
Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92
Certificate issuer: /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92
Certificate serial: 1577
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
Manifest number: 1550
Signing time: Thu 14 May 2026 16:47:47 +0000
Manifest this update: Thu 14 May 2026 16:47:47 +0000
Manifest next update: Thu 21 May 2026 16:47:47 +0000
Files and hashes: 1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: Aj8fXWQOaaBj10ra/bTi0gdWGr1gqcUqDgai6QTU88w=)
2: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: 0NwFrvM9IRvJJO9gyp3K+Hhph/Q11YURFU2ihH7vWSU=)
3: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: c3V4is6FxJWguSVJuid3bqOWHNBU9BhpqKFdoluzAPo=)
4: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: ZmY2QYzyAhSTsePe4zn0H+5k+aBVvIw3u0RjxVpoXEs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl
rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 21 May 2026 16:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5495 (0x1577)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144436, serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92
Validity
Not Before: May 14 16:47:47 2026 GMT
Not After : May 21 16:47:47 2026 GMT
Subject: CN=6a05fcb3-cb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7d:5b:11:c1:24:8d:7c:a9:8e:74:f6:40:6f:
33:9a:b3:34:06:b2:02:3b:11:60:ad:ba:5c:19:94:
0e:d6:6e:68:dc:d7:79:89:83:99:c2:0a:c6:fd:8d:
9d:ee:b6:52:10:e8:67:ab:a6:b8:94:b8:52:21:85:
dc:32:78:d6:3d:ef:4b:ba:2d:6f:a0:99:b4:32:b4:
bd:56:1c:f2:d6:f6:75:6e:17:fa:17:75:0e:ef:df:
b7:b8:bc:69:74:2c:5e:b5:87:7e:cc:6f:ec:da:4c:
de:82:6d:a0:4e:09:c4:71:6b:a9:ee:89:5a:b4:a4:
ef:79:9b:c9:ab:b3:a4:50:dd:52:3a:f5:53:b3:a9:
f2:f4:ea:32:be:98:5e:e4:1b:a1:2e:e7:39:af:84:
46:8e:6a:f2:57:d5:ee:3f:e4:17:a1:cb:a2:e2:c9:
a1:0b:a9:60:0d:66:8e:73:d0:1f:da:7c:84:6e:dd:
93:4a:a3:b2:86:aa:2a:8e:e3:8f:45:c2:ab:61:00:
e7:15:93:3e:8c:71:e2:63:e3:c8:95:b2:73:5e:eb:
51:99:11:0d:f5:7c:f8:5a:81:13:32:60:62:9f:7c:
5f:1f:08:65:f6:1c:08:5c:52:8d:f8:85:05:dd:68:
6e:45:59:cf:df:ff:b5:0f:1b:67:11:7e:79:e9:c3:
2f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:33:AE:7B:C3:5B:79:5D:35:FA:9C:54:3D:15:88:FE:11:0B:BF:F0
X509v3 Authority Key Identifier:
keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:76:3e:4b:7d:8e:fb:f0:bc:4b:33:a6:f2:39:fb:79:a2:aa:
08:3b:c5:db:b3:d4:4f:ab:e9:1a:81:dc:b8:28:7d:d7:7a:1a:
89:99:ed:cd:15:63:98:ce:ce:a4:b6:e3:31:d7:7e:83:7a:56:
aa:7c:25:2b:ed:de:d6:a9:1d:45:56:3f:15:df:d6:90:fd:7d:
49:25:9b:71:84:04:09:33:21:b0:22:28:dc:2c:2f:1d:d2:15:
42:d7:55:c8:67:a5:5f:1c:0e:7f:f6:9f:d1:66:09:ab:88:44:
69:7e:35:f6:3d:2e:78:17:38:61:af:df:ef:e2:51:66:85:2f:
c4:3b:6a:d4:06:d3:6b:a8:c9:7a:c0:9c:96:74:fd:1d:1f:34:
49:8a:3d:39:e3:6d:7e:e8:93:11:9d:45:10:56:68:8d:9f:b4:
e4:04:b2:41:65:4c:75:93:1a:ac:22:8b:bd:39:59:0c:43:7b:
a4:5f:f1:fa:5c:21:f9:34:4f:52:a6:df:38:dd:43:97:5d:17:
e1:f9:a1:f9:2a:d0:a5:7f:f3:10:34:59:52:13:53:b5:78:2f:
0d:3e:f8:ba:e5:d9:9f:dc:21:25:b9:f2:e1:7c:4d:2f:8e:43:
7e:4f:85:46:77:4c:42:de:7b:96:30:61:78:74:29:c7:e6:38:
bd:34:7c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 21:28:35 2026 by rpki-client