
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
File: zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json)
Hash identifier: IldaGU0kkWebO/nn7ygxuZ7VlN4h+WSX5SJfNqhPnak=
Subject key identifier: 17:4A:02:D4:0D:18:58:30:F4:27:39:08:E6:FF:47:83:A5:94:88:8E
Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92
Certificate issuer: /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92
Certificate serial: 15AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
Manifest number: 1582
Signing time: Sun 16 Aug 2026 16:53:31 +0000
Manifest this update: Sun 16 Aug 2026 16:53:30 +0000
Manifest next update: Sun 23 Aug 2026 16:53:30 +0000
Files and hashes: 1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: NUkskW9xJniCr9k6fb0BaFaLwP6O6XRSzhlnJMU/cQ8=)
2: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: 0nNrNCZxO5NCWKsCOYrw7NVk3Cc7PuquXVWOm8fdGaU=)
3: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: aqobxay9N5rxgG0wGFJlQUVc2oUjZpwd/M9MkMpKCt8=)
4: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: RpjUJKKJgD70N/wkyssWhxel6X/Ka6no31psFzNbWNw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl
rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 23 Aug 2026 16:53:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5548 (0x15ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144436, serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92
Validity
Not Before: Aug 16 16:53:30 2026 GMT
Not After : Aug 23 16:53:30 2026 GMT
Subject: CN=6a81eb0b-deab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:ef:82:94:95:1b:49:56:27:e6:08:ed:51:
19:15:19:33:d4:5f:b5:1b:ec:0e:ac:a8:f6:95:d7:
e6:d3:55:f2:18:f4:c0:e9:62:af:9a:77:67:d6:fa:
03:cb:be:44:4b:2e:71:3c:01:c6:9a:02:7f:0a:72:
81:7d:3c:d1:b1:fa:98:cc:fa:0d:81:f6:ac:1a:b7:
cb:1a:f5:43:7b:aa:aa:2a:67:0c:29:65:1b:98:88:
3a:73:8d:cc:79:00:d6:31:68:cc:73:a5:e4:65:45:
ba:ea:13:1f:ff:b3:1d:49:48:a7:97:05:ec:0f:92:
fc:b4:45:e5:69:59:8f:53:36:73:91:6b:f1:05:6b:
09:a9:f7:50:9c:e5:ea:2b:c0:b6:ff:8b:4b:db:66:
c1:f1:b0:1f:1a:f7:d1:8a:3a:fa:0c:1f:ef:13:76:
b3:95:b9:a6:d4:4f:26:27:25:00:9a:64:53:21:66:
aa:ff:85:9f:c2:4b:49:d9:97:0e:7d:ee:44:c3:45:
bc:2a:4f:ab:82:a5:76:e3:04:05:c1:bd:44:ef:50:
f2:dd:2f:5c:02:41:c5:64:72:98:db:e7:38:0f:7f:
71:2e:1e:55:c7:81:3e:ba:54:54:f6:50:58:de:47:
ff:f0:c2:60:64:06:2c:ca:b9:31:a6:52:f5:34:67:
d2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4A:02:D4:0D:18:58:30:F4:27:39:08:E6:FF:47:83:A5:94:88:8E
X509v3 Authority Key Identifier:
keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:b8:d0:98:58:f4:80:e1:d2:57:bc:18:ad:ab:22:30:b6:7d:
f6:84:31:78:ff:e9:43:45:e5:65:e5:92:c0:86:ce:a1:e5:d6:
71:46:9b:1f:d4:41:8c:c5:12:49:00:97:0c:25:85:d1:f6:a6:
ae:aa:f2:c7:31:e4:23:9e:17:47:45:73:62:d5:0f:4e:4a:dc:
52:58:24:9e:c4:f9:c6:ff:ca:4d:2b:c5:ab:10:5c:b8:d8:c1:
29:2e:5b:b4:b3:8c:a4:88:a6:a7:65:4e:b9:b8:b3:34:ba:60:
2b:59:c2:7f:de:c7:f5:bc:a4:1e:c8:fc:e9:47:f4:c9:c7:7c:
05:53:de:ae:c1:f5:0b:69:b9:f0:ca:e4:28:0b:42:db:d9:11:
f0:6e:09:c4:92:20:3a:9a:45:e4:2b:21:72:c6:63:49:28:d5:
88:58:1c:24:30:0a:fb:5a:e4:f9:18:9b:5e:0f:b2:09:40:45:
f0:c0:fe:43:70:e7:a3:6f:cc:91:91:91:29:66:86:0f:52:b8:
0c:0d:9f:5a:76:a6:f2:f4:83:4b:0f:6c:a7:a7:d9:3c:80:9e:
ca:34:80:45:a4:2b:bc:03:73:78:14:cc:23:27:c8:12:41:05:
3f:96:73:47:ce:ce:9f:5e:e5:ec:c1:f2:bf:f5:22:57:4b:51:
f2:da:e7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 01:09:50 2026 by rpki-client