
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/ZgHBfRIOQOmc5fgdQtdVdDljP1I.mft
File: ZgHBfRIOQOmc5fgdQtdVdDljP1I.mft (raw, json)
Hash identifier: 9Jwd/9roEwCq8x0av61X+/evJR8FPExebm+1Cki47tg=
Subject key identifier: 68:B0:83:91:16:1A:D4:36:B2:E8:FB:12:FA:67:B1:29:F6:76:9A:B4
Authority key identifier: 66:01:C1:7D:12:0E:40:E9:9C:E5:F8:1D:42:D7:55:74:39:63:3F:52
Certificate issuer: /CN=A9148355/serialNumber=6601C17D120E40E99CE5F81D42D7557439633F52
Certificate serial: 30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgHBfRIOQOmc5fgdQtdVdDljP1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/ZgHBfRIOQOmc5fgdQtdVdDljP1I.mft
Manifest number: 28
Signing time: Wed 29 Jul 2026 10:32:09 +0000
Manifest this update: Wed 29 Jul 2026 10:32:08 +0000
Manifest next update: Wed 05 Aug 2026 10:32:08 +0000
Files and hashes: 1: ZgHBfRIOQOmc5fgdQtdVdDljP1I.crl (hash: YzXhL4rvEYiO/bd9Uy8cRkkyO+6GpmcEeESLzfNERGw=)
2: 5BAEE25E5C1511F1A463B2F993833773.roa (hash: QAjB04e8BhjTa56xp5s1mLUlyQZMay4mhoLGvM2MXNo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/ZgHBfRIOQOmc5fgdQtdVdDljP1I.crl
rsync://rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/ZgHBfRIOQOmc5fgdQtdVdDljP1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgHBfRIOQOmc5fgdQtdVdDljP1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 10:32:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148355, serialNumber=6601C17D120E40E99CE5F81D42D7557439633F52
Validity
Not Before: Jul 29 10:32:08 2026 GMT
Not After : Aug 5 10:32:08 2026 GMT
Subject: CN=6a69d6a8-0d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1a:bf:e3:55:c0:23:95:fa:96:06:af:b7:2e:
3b:74:13:a3:79:b9:0e:9c:c6:6a:9c:02:c9:9d:70:
25:a7:f0:dd:33:d3:78:e6:fd:16:ce:54:bb:24:0e:
28:25:86:71:8c:93:4d:b7:e1:3e:69:1a:47:ec:e0:
fc:d2:03:08:43:a6:33:05:a0:b6:2a:b4:93:39:9d:
74:25:ce:01:55:a4:75:4f:90:c6:fb:3b:db:c4:67:
77:aa:6f:37:81:b9:51:20:1b:37:68:97:07:63:56:
34:61:13:36:bf:af:6c:69:07:08:5c:d9:a8:da:95:
24:cd:ae:da:5c:07:03:47:2b:67:97:bb:f9:e1:24:
aa:19:af:98:8d:3d:d8:2c:47:79:1d:f8:f2:5a:b5:
14:8d:63:9a:70:d9:30:d1:90:59:ed:72:10:64:83:
a9:ff:a7:ba:52:35:ee:d6:69:e9:10:fd:25:e5:c1:
75:f0:f8:13:35:97:d2:de:82:61:cb:45:e4:dc:a7:
5e:97:c4:6c:50:b9:d5:54:02:98:88:67:57:30:a0:
9f:7c:bd:c3:df:73:e9:ef:0f:85:d9:66:71:66:1d:
4a:40:86:73:5d:69:0f:c2:72:3e:fc:5b:5c:b0:88:
63:f4:18:db:d2:ff:63:1a:42:2b:97:b6:be:e9:5f:
dd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B0:83:91:16:1A:D4:36:B2:E8:FB:12:FA:67:B1:29:F6:76:9A:B4
X509v3 Authority Key Identifier:
keyid:66:01:C1:7D:12:0E:40:E9:9C:E5:F8:1D:42:D7:55:74:39:63:3F:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/ZgHBfRIOQOmc5fgdQtdVdDljP1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgHBfRIOQOmc5fgdQtdVdDljP1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/ZgHBfRIOQOmc5fgdQtdVdDljP1I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:1b:92:16:1a:05:23:ea:58:63:38:a9:26:4d:f5:de:1e:3a:
be:b9:37:d8:b2:09:1e:53:0f:6b:36:d7:7d:a4:65:dc:6c:41:
29:a0:f2:2f:ca:ba:2f:30:c2:17:92:d8:33:ce:ef:36:4d:06:
17:89:26:00:a1:93:56:15:66:60:5b:d4:de:8c:9e:5c:f6:cd:
9d:f8:5c:3f:4a:2b:07:ff:71:bb:74:07:58:c9:4f:9a:f7:d8:
64:e6:61:20:5b:6f:3f:16:b5:db:8d:bc:37:2a:16:89:d2:72:
e9:74:04:59:8e:e3:01:6b:07:3c:76:d1:24:6e:d2:0b:12:e4:
ae:bc:a5:6b:1d:2c:3c:12:d7:7c:19:de:76:fa:1b:ae:e4:73:
81:b9:4c:52:e6:07:02:4e:4b:58:0c:be:22:29:df:3e:4e:8e:
aa:22:19:68:6d:49:4e:74:f8:da:bb:01:04:66:96:27:70:cf:
e1:65:ad:de:07:12:35:8e:71:dd:bd:e9:af:a3:09:11:3e:2e:
c6:88:b6:c7:f4:d1:f3:bf:6a:22:37:71:1f:74:66:51:fe:46:
f8:ba:ce:ab:d6:3c:2c:66:f7:2d:03:07:87:fa:49:67:fe:eb:
a8:0e:48:55:81:13:a7:1d:aa:16:9c:44:6d:0d:0d:68:15:1e:
3a:8a:a3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:27:29 2026 by rpki-client