
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
File: ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft (raw, json)
Hash identifier: fGHtqKI8iElBJDoSXsTa4Cy+LlMePbngN/JfCnKx+Vs=
Subject key identifier: 4C:04:70:69:79:1E:BF:52:0B:37:23:AD:34:A6:41:24:1E:35:58:CB
Authority key identifier: 64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44
Certificate issuer: /CN=A914E3F8/serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444
Certificate serial: 09E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
Manifest number: 09E7
Signing time: Tue 18 Aug 2026 20:07:26 +0000
Manifest this update: Tue 18 Aug 2026 20:07:25 +0000
Manifest next update: Tue 25 Aug 2026 20:07:25 +0000
Files and hashes: 1: ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl (hash: sDQDxlHFlP9/aIiOlZJQ+4mpSUaBWapfFfnabJzrDZs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl
rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2536 (0x9e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E3F8, serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444
Validity
Not Before: Aug 18 20:07:25 2026 GMT
Not After : Aug 25 20:07:25 2026 GMT
Subject: CN=6a84bb7d-e0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:85:b4:9c:6a:9b:14:5b:0d:6c:e9:d8:e9:c3:
85:dc:e7:fb:e0:84:d6:f9:3e:96:55:71:07:95:5b:
59:96:d9:0d:96:de:89:a4:5b:4b:61:48:8b:2e:aa:
81:f7:ed:cf:c9:c2:4d:c6:61:10:52:1b:99:63:b6:
ba:5f:68:3e:30:ce:37:f2:d7:21:cc:0c:17:2e:c1:
54:cf:c7:64:f0:c8:4b:4d:e6:cd:c2:df:f8:60:0d:
aa:cb:dd:43:17:60:7f:55:53:6b:13:04:ff:10:da:
94:b4:b9:3b:fe:cf:65:e6:d9:26:9a:a3:28:b3:f6:
6d:6d:1b:04:a8:5b:0d:51:bb:b3:17:bd:a3:96:33:
c6:8c:d2:6d:0b:4b:89:2b:c3:ef:48:a7:19:bc:3c:
a1:86:97:9d:d7:55:3f:6d:85:82:2a:ef:25:1f:63:
5a:7d:19:73:cc:f8:2f:e6:a5:64:b7:d9:3f:d4:e9:
f2:b8:d7:ce:fe:f5:14:39:3a:d3:ab:b6:05:96:ca:
3e:5e:34:1b:da:cc:ae:74:ba:6d:68:ff:93:96:b8:
ab:d7:d5:99:56:4a:b0:f0:8a:22:e9:b4:02:47:dd:
92:77:a7:38:32:30:11:82:6f:c9:0b:67:22:1f:7d:
6a:ff:04:09:c8:ec:8a:e8:73:60:da:62:3c:3b:47:
fc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:04:70:69:79:1E:BF:52:0B:37:23:AD:34:A6:41:24:1E:35:58:CB
X509v3 Authority Key Identifier:
keyid:64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:17:18:3f:2f:20:97:10:1a:87:28:73:15:bf:bb:58:34:67:
52:f9:80:cb:e8:a3:53:35:94:81:fc:38:0a:d2:bf:7f:e0:ba:
de:cc:fd:e3:79:c2:0d:b8:6e:95:fa:e8:c9:0a:b9:35:65:b7:
b3:6f:16:6c:d7:72:fa:61:fc:02:19:92:39:50:57:fa:d9:bc:
59:77:ba:1f:b3:ce:e3:43:c9:4c:d8:bf:d1:6e:e3:59:76:34:
e6:cf:7f:6d:88:43:92:be:48:68:53:bc:96:86:c2:d6:e0:ac:
dd:5e:3d:ca:33:28:4d:fc:32:d4:30:70:9a:17:c4:7c:13:f0:
b2:44:1c:93:fd:51:87:92:fa:05:5a:3b:2f:c2:66:fb:9e:b1:
7b:c7:93:33:43:7f:d1:9d:7b:4a:2f:c7:be:90:80:04:ae:68:
0d:00:b1:4e:41:13:53:0f:0a:45:a6:c8:28:48:54:0b:f8:63:
81:4e:92:79:5e:53:33:bd:6f:5f:9d:42:c4:14:ab:be:2e:23:
bf:5a:6e:bd:6f:c3:59:2c:08:71:16:b3:6f:e1:e5:02:7e:3b:
c9:8d:e2:ff:73:6c:bd:ba:33:2e:fb:d0:23:cb:04:e9:e4:d5:
c7:93:31:1b:39:a4:bb:a3:a9:31:8d:58:9d:5d:6f:0b:2d:a5:
7a:e1:07:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:25 2026 by rpki-client