
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
File: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft (raw, json)
Hash identifier: D9sVBvolWVliY/n4pdWurgBpD0YvsYyT1zGfmjcivSk=
Subject key identifier: 67:AA:9F:7A:70:D6:ED:68:E5:03:AF:12:86:42:1C:0F:BF:F1:DE:AE
Authority key identifier: 64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD
Certificate issuer: /CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD
Certificate serial: 0939
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
Manifest number: 0931
Signing time: Mon 22 Jun 2026 20:15:07 +0000
Manifest this update: Mon 22 Jun 2026 20:15:06 +0000
Manifest next update: Mon 29 Jun 2026 20:15:06 +0000
Files and hashes: 1: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl (hash: As+kp3VjZgoDkKHP0EP7g+bYKY7W6lz7ebjzFKK9+wc=)
2: CA44DDA6C5A111EAA8D93F54C4F9AE02.roa (hash: FnGXHW3NTkfV5VQ0kQwJy6k6mXA3xyfslsGAqppArLE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl
rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 20:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2361 (0x939)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145C9B, serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD
Validity
Not Before: Jun 22 20:15:06 2026 GMT
Not After : Jun 29 20:15:06 2026 GMT
Subject: CN=6a3997cb-9d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:1f:6e:5f:88:a9:97:f8:75:63:0f:8c:f6:
c1:2e:2c:ad:ce:52:68:86:ca:8f:88:80:f4:1d:1b:
c0:7f:eb:b9:b7:03:4d:8b:52:9a:5b:ec:d1:b7:a5:
40:ae:4a:45:7e:50:34:ff:7d:e3:73:e8:23:c7:9f:
c7:dc:b7:c8:38:ca:99:e8:ae:d7:c5:24:23:fc:43:
2a:b7:f4:8e:ad:6a:2b:a7:86:93:25:dd:18:e3:2e:
7a:d2:07:19:04:9c:ee:11:8f:a4:c8:3f:08:d5:34:
49:8b:07:a6:52:e9:46:65:ae:4f:45:4c:cb:54:89:
74:d5:59:d9:fd:25:65:ac:45:b4:67:16:18:16:c1:
a9:5e:41:00:04:7a:80:da:b1:a3:c0:6a:63:7e:de:
9f:8b:bf:2d:a1:00:5d:88:c7:5f:d2:71:b6:90:56:
47:32:93:1c:b9:32:e0:06:6a:7b:c5:86:8b:1a:71:
89:c9:27:a8:f6:d4:5c:bd:4b:5e:4e:8c:3c:83:bd:
74:81:8b:46:84:80:33:d8:46:2b:a2:94:db:b0:52:
07:30:94:51:e5:32:30:dd:f2:15:d3:21:7f:98:8e:
01:09:04:10:0e:08:10:c8:e1:e4:c1:85:6d:db:77:
68:f7:89:cc:27:bd:25:37:2d:a7:a2:3e:14:36:b7:
b1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AA:9F:7A:70:D6:ED:68:E5:03:AF:12:86:42:1C:0F:BF:F1:DE:AE
X509v3 Authority Key Identifier:
keyid:64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:15:2e:0f:3c:69:2e:8d:e2:2b:be:38:52:2a:04:01:0e:0e:
fb:7d:32:8b:9b:78:2c:dc:b7:e9:bd:9b:d9:28:20:f4:30:10:
16:f9:7d:e7:40:d1:33:36:26:1a:68:66:fe:02:07:ed:c3:e0:
90:1c:7e:a3:5b:da:81:ba:56:da:c5:8e:a2:9d:66:80:f7:1b:
67:c5:8e:55:5d:fc:fc:cf:1a:28:07:d0:9c:91:c8:4d:79:83:
fb:23:50:2d:23:e3:08:70:b6:5a:18:6e:f4:03:69:88:61:3a:
8d:50:57:eb:e9:63:77:a7:56:1e:5c:d4:99:df:40:80:42:0f:
85:9b:ae:83:6e:74:ee:45:a0:cd:41:bb:20:22:f6:ba:f5:93:
0b:3e:bd:77:62:a5:20:59:0f:80:1a:16:83:4b:68:e4:8d:8b:
5e:68:19:8a:17:b2:04:35:7f:94:5f:e7:b6:02:80:73:6a:fc:
ad:2a:85:7b:1d:9a:2b:d8:b2:ee:f6:d8:d0:ae:e7:bc:d5:48:
6f:af:b6:7c:46:95:6e:e1:5c:12:10:14:13:79:f1:7b:17:79:
5b:2d:8b:dc:71:c4:03:84:8d:77:cc:36:50:cf:4d:27:41:5c:
83:78:1a:ef:9a:48:a4:b6:10:68:e0:28:da:79:b8:d6:ce:09:
21:08:2e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:13 2026 by rpki-client