
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/ZgHBfRIOQOmc5fgdQtdVdDljP1I.mft
File: ZgHBfRIOQOmc5fgdQtdVdDljP1I.mft (raw, json)
Hash identifier: tyiF6IX1K0Q7z0AhP7gmlD+Ogl6dusiLnUQ4EZ2KYtM=
Subject key identifier: 58:22:35:3C:10:99:C1:04:4F:EE:5B:56:FA:07:3B:B5:0A:35:D9:FA
Authority key identifier: 66:01:C1:7D:12:0E:40:E9:9C:E5:F8:1D:42:D7:55:74:39:63:3F:52
Certificate issuer: /CN=A9148355/serialNumber=6601C17D120E40E99CE5F81D42D7557439633F52
Certificate serial: 1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgHBfRIOQOmc5fgdQtdVdDljP1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/ZgHBfRIOQOmc5fgdQtdVdDljP1I.mft
Manifest number: 12
Signing time: Sat 13 Jun 2026 09:14:26 +0000
Manifest this update: Sat 13 Jun 2026 09:14:25 +0000
Manifest next update: Sat 20 Jun 2026 09:14:25 +0000
Files and hashes: 1: ZgHBfRIOQOmc5fgdQtdVdDljP1I.crl (hash: ph5xEw9ckTzak9KptZEO8iZ7+EBigeOOqiizdm3aW0Y=)
2: 5BAEE25E5C1511F1A463B2F993833773.roa (hash: QAjB04e8BhjTa56xp5s1mLUlyQZMay4mhoLGvM2MXNo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/ZgHBfRIOQOmc5fgdQtdVdDljP1I.crl
rsync://rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/ZgHBfRIOQOmc5fgdQtdVdDljP1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgHBfRIOQOmc5fgdQtdVdDljP1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 09:14:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148355, serialNumber=6601C17D120E40E99CE5F81D42D7557439633F52
Validity
Not Before: Jun 13 09:14:25 2026 GMT
Not After : Jun 20 09:14:25 2026 GMT
Subject: CN=6a2d1f71-8d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:50:d9:33:44:b7:a1:23:7f:16:04:ce:38:8b:
43:8e:eb:aa:eb:56:9c:97:19:ab:db:94:be:50:e1:
48:71:4e:a2:1f:90:f6:c0:b1:74:0d:bd:b7:8a:73:
b6:c4:4d:a1:18:83:5b:95:2f:5b:03:52:a2:f3:56:
49:9b:31:44:d9:2d:e5:bc:48:37:40:52:97:a8:0b:
84:fc:fa:67:47:ee:40:81:bc:53:8a:75:e9:cf:73:
38:f2:04:60:26:3a:8a:43:d0:29:56:bc:64:17:30:
35:f7:ec:20:9f:09:2c:f6:7e:c5:18:d1:0b:f6:64:
0b:1b:90:10:00:0b:a7:44:2c:89:8a:9f:7d:a0:5c:
9f:96:08:47:41:ba:eb:09:8b:f2:c8:20:7c:c5:6f:
c6:de:7d:be:95:98:d5:f6:93:e7:85:af:c6:8c:93:
62:b5:fc:c4:9d:1d:59:58:81:4b:40:5b:48:84:b9:
40:c1:a7:97:b8:eb:eb:8a:d6:d0:bf:3b:f4:4b:b0:
b9:13:42:f2:7d:08:85:cb:9e:d7:01:85:f4:5c:be:
75:4c:89:d9:64:de:f4:2b:c4:49:ea:40:67:9e:3d:
a0:4e:58:17:2a:e6:81:39:e2:02:3c:4d:76:72:33:
54:eb:45:d0:f9:52:08:52:48:40:06:19:11:e2:68:
7f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:22:35:3C:10:99:C1:04:4F:EE:5B:56:FA:07:3B:B5:0A:35:D9:FA
X509v3 Authority Key Identifier:
keyid:66:01:C1:7D:12:0E:40:E9:9C:E5:F8:1D:42:D7:55:74:39:63:3F:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/ZgHBfRIOQOmc5fgdQtdVdDljP1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgHBfRIOQOmc5fgdQtdVdDljP1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/ZgHBfRIOQOmc5fgdQtdVdDljP1I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6f:78:2d:a7:8d:e5:53:61:7c:bb:b3:5d:8e:b8:f4:af:b6:
be:95:b5:ef:08:7f:06:a7:fa:3b:55:4e:1e:ab:cc:f9:f5:5b:
40:96:f4:35:80:5d:de:5f:a4:2c:70:33:1d:a3:dd:ef:ac:ff:
40:17:8e:9c:86:33:1c:f5:95:18:5c:6d:1a:77:f9:a0:c8:84:
be:02:b4:8b:48:33:d6:36:ef:25:f1:2b:b3:c0:14:34:86:1f:
bd:01:dc:9c:2a:de:e9:d9:59:3c:7c:ba:6b:20:f9:9f:bc:09:
ce:a7:b0:d9:2b:20:95:dc:3f:8c:dc:fb:61:5e:b4:a7:ae:a0:
a1:ab:73:0a:a3:f1:b9:17:3c:b1:80:73:76:b4:12:d3:66:75:
29:de:d0:94:b4:cc:8a:09:d5:cb:9a:3f:14:75:d5:4b:93:eb:
88:c8:11:b6:2c:00:e6:71:1d:07:e2:24:5b:6d:27:e4:27:99:
4d:2d:83:f1:5b:b7:95:b7:fa:04:f4:94:d4:2f:fe:1f:bc:62:
8d:1b:da:4e:ac:68:7e:61:49:9f:7d:f1:67:08:bd:0c:af:88:
a4:38:22:56:6f:41:93:e0:1e:c8:45:a5:e5:bb:2c:b2:be:49:
83:c4:06:ea:53:d7:93:2a:04:cd:ea:32:1b:0a:d3:4f:9f:77:
3e:41:f1:0d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
ODM1NTExMC8GA1UEBRMoNjYwMUMxN0QxMjBFNDBFOTlDRTVGODFENDJENzU1NzQz
OTYzM0Y1MjAeFw0yNjA2MTMwOTE0MjVaFw0yNjA2MjAwOTE0MjVaMBgxFjAUBgNV
BAMTDTZhMmQxZjcxLThkNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCcUNkzRLehI38WBM44i0OO66rrVpyXGavblL5Q4UhxTqIfkPbAsXQNvbeKc7bE
TaEYg1uVL1sDUqLzVkmbMUTZLeW8SDdAUpeoC4T8+mdH7kCBvFOKdenPczjyBGAm
OopD0ClWvGQXMDX37CCfCSz2fsUY0Qv2ZAsbkBAAC6dELImKn32gXJ+WCEdBuusJ
i/LIIHzFb8befb6VmNX2k+eFr8aMk2K1/MSdHVlYgUtAW0iEuUDBp5e46+uK1tC/
O/RLsLkTQvJ9CIXLntcBhfRcvnVMidlk3vQrxEnqQGeePaBOWBcq5oE54gI8TXZy
M1TrRdD5UghSSEAGGRHiaH8VAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWCI1PBCZ
wQRP7ltW+gc7tQo12fowHwYDVR0jBBgwFoAUZgHBfRIOQOmc5fgdQtdVdDljP1Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4MzU1L0NCNTMyODk0NUMx
MTExRjFCQUY5REZDOTkyODMzNzczL1pnSEJmUklPUU9tYzVmZ2RRdGRWZERsalAx
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWmdIQmZSSU9RT21jNWZnZFF0ZFZkRGxqUDFJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4
MzU1L0NCNTMyODk0NUMxMTExRjFCQUY5REZDOTkyODMzNzczL1pnSEJmUklPUU9t
YzVmZ2RRdGRWZERsalAxSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA/b3gtp43lU2F8u7Ndjrj0r7a+lbXvCH8Gp/o7VU4eq8z59VtAlvQ1gF3eX6Qs
cDMdo93vrP9AF46chjMc9ZUYXG0ad/mgyIS+ArSLSDPWNu8l8SuzwBQ0hh+9Adyc
Kt7p2Vk8fLprIPmfvAnOp7DZKyCV3D+M3PthXrSnrqChq3MKo/G5FzyxgHN2tBLT
ZnUp3tCUtMyKCdXLmj8UddVLk+uIyBG2LADmcR0H4iRbbSfkJ5lNLYPxW7eVt/oE
9JTUL/4fvGKNG9pOrGh+YUmfffFnCL0Mr4ikOCJWb0GT4B7IRaXluyyyvkmDxAbq
U9eTKgTN6jIbCtNPn3c+QfEN
-----END CERTIFICATE-----
Generated at Sun Jun 14 13:24:06 2026 by rpki-client