
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
File: ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft (raw, json)
Hash identifier: DsQHbs2Xm6f5tk3scaSizI42uwmZBi9jjCcF4QoKm+M=
Subject key identifier: 3F:F6:C1:CE:60:68:19:BA:72:3E:C1:3F:FE:A6:04:E1:25:0D:03:6F
Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9
Certificate issuer: /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9
Certificate serial: 0234
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
Manifest number: 0227
Signing time: Tue 07 Jul 2026 03:36:54 +0000
Manifest this update: Tue 07 Jul 2026 03:36:53 +0000
Manifest next update: Tue 14 Jul 2026 03:36:53 +0000
Files and hashes: 1: ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl (hash: /UvsL6wMcKByEr6beHslyrAWcyUEGxRlQEbMR/b+vAs=)
2: BEB0BA5031D711EE8DF6CB20C4F9AE02.roa (hash: b/Saiu1AabxrsPj47AXLm3MK1rkDbyAOEnOPk0nFsqA=)
3: D459D92C31D711EEBE1BFD20C4F9AE02.roa (hash: IBvzA5r6hVshNungWhQmp5lB9eEIYNrjugpKnBqI56I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl
rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 03:36:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148456, serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9
Validity
Not Before: Jul 7 03:36:53 2026 GMT
Not After : Jul 14 03:36:53 2026 GMT
Subject: CN=6a4c7456-49d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:70:ad:68:a6:5d:7c:e8:81:ee:e7:72:c6:01:
39:3b:01:d7:3f:36:4f:1d:88:c7:a7:b8:57:50:a4:
0d:90:c5:2d:5d:ba:27:6a:29:fa:62:89:0a:85:82:
de:3b:34:2e:53:ae:ab:35:d9:d5:43:8d:fa:43:cc:
c4:d9:82:50:2b:2b:82:e7:1f:9f:4d:ad:6d:68:3c:
81:e3:0c:da:40:95:49:47:2e:61:c7:c0:31:85:0a:
38:ec:a5:0c:f2:07:87:bf:2a:64:4f:e9:29:49:5e:
eb:aa:c4:07:aa:4b:cd:b7:71:79:dc:7f:0e:da:b4:
dc:79:b4:94:32:63:ee:d7:96:65:8c:40:6c:5a:b9:
67:31:02:f0:53:3e:37:00:5e:8a:43:db:14:ff:bb:
11:fa:16:81:8c:61:f1:11:bc:84:7a:88:06:a9:a7:
f3:01:bb:2d:05:2d:4c:91:8d:3e:3a:57:7f:78:41:
db:f5:8d:51:35:b3:76:43:ae:4c:9a:59:61:45:5a:
72:c3:c6:1f:15:e6:76:12:0e:8d:cc:84:f1:ec:1a:
52:4e:08:f4:a5:ef:16:6d:6b:9a:89:c8:e0:1f:12:
df:ca:99:6a:c7:f9:b1:1d:21:ed:6c:7c:2e:42:24:
a0:0a:29:46:2c:bc:e1:23:a9:5a:c2:54:12:88:2c:
b8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F6:C1:CE:60:68:19:BA:72:3E:C1:3F:FE:A6:04:E1:25:0D:03:6F
X509v3 Authority Key Identifier:
keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c8:8c:c5:94:56:5d:f5:c7:62:5d:a1:58:10:17:3b:90:eb:
c7:58:ff:5e:54:8d:ed:d7:d0:ce:39:b3:6f:76:e4:41:d0:39:
e4:11:cc:1c:1c:4e:07:a3:8c:3f:a0:e2:06:2a:32:8d:e9:40:
9f:6c:1f:01:18:94:c4:15:b4:b0:69:41:0a:2b:03:f2:01:3a:
9f:5f:e8:55:e9:2b:38:2e:9f:5e:6e:2a:97:e4:de:d3:74:b6:
94:e3:e1:c4:9a:32:e6:85:91:92:8c:2e:28:6b:84:1d:4e:ae:
58:2d:b0:28:8a:77:47:9e:8a:e4:2a:3a:df:8b:9c:f8:e0:11:
b3:80:01:7b:c1:7e:64:59:7f:ae:d4:5c:0b:8e:12:00:5e:0e:
b8:f0:e5:dd:13:e9:15:1c:cc:e2:10:ba:82:74:be:8e:02:d7:
b6:0e:35:21:4e:45:6f:9b:a2:0f:94:2b:ca:22:cf:c6:68:72:
4e:cd:55:91:3f:e9:1e:89:32:1d:6b:a9:6e:72:87:ce:98:6b:
4b:11:4e:42:44:f0:59:01:07:ac:5e:b9:57:18:79:27:2b:30:
95:ab:4e:9d:b1:8f:1a:d3:2e:e8:53:ea:2d:86:6b:82:46:d8:
f3:d5:19:ea:83:d8:29:e0:fb:57:6a:4c:98:05:ef:7c:0e:97:
4e:b9:99:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 16:52:06 2026 by rpki-client