
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
File: zEJAcHQQNjc16_bvsZT7Zw80X0I.mft (raw, json)
Hash identifier: 8nMGPz1NFcU7iYObdKpfDCrfy9Er5n35tXJU9dK3Cd8=
Subject key identifier: C9:A5:4C:FB:51:09:BD:68:FF:9F:40:15:EB:63:07:6E:17:C8:CA:03
Authority key identifier: CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42
Certificate issuer: /CN=A9160AEE/serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
Certificate serial: B8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
Manifest number: A8
Signing time: Fri 17 Jul 2026 08:39:17 +0000
Manifest this update: Fri 17 Jul 2026 08:39:17 +0000
Manifest next update: Fri 24 Jul 2026 08:39:17 +0000
Files and hashes: 1: zEJAcHQQNjc16_bvsZT7Zw80X0I.crl (hash: 1tX8FyP/abyMxv5H1q1KPQFggZdKKZxn8uXhHQGMr5w=)
2: 6FBBA45AFD2711F0B1802E18426F56BC.roa (hash: InU5YhYgQdECTfOQlDj5F02bMyaCjuUJFEGGYk6O1Jc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl
rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160AEE, serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
Validity
Not Before: Jul 17 08:39:17 2026 GMT
Not After : Jul 24 08:39:17 2026 GMT
Subject: CN=6a59ea35-a07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3d:ef:14:38:5a:e2:79:34:90:d0:8f:0a:1e:
ee:e0:64:64:1f:7f:46:f2:19:e9:10:fd:a1:75:71:
94:d7:e9:b1:94:11:07:3a:55:51:b8:aa:1d:aa:6a:
3a:95:c9:82:e5:94:0b:b3:9d:a6:46:35:d1:82:01:
c8:82:cb:0f:f8:ad:e7:60:d8:59:ca:9b:91:70:f7:
18:3b:17:7a:94:a2:3c:e1:d8:29:e7:79:f1:3a:0b:
74:05:bb:df:af:0c:e1:95:5a:c6:6c:3c:b5:1f:d1:
b6:a0:09:e2:00:2e:5f:c9:fd:21:62:7b:ee:02:0d:
ca:fb:94:4c:99:f5:8b:ec:d2:44:5c:b9:52:fd:cd:
d4:94:a8:35:32:2e:1b:66:3e:d9:b9:a9:21:b6:8d:
8e:9e:b0:68:6f:7b:04:88:bf:38:8f:f9:6e:b2:44:
14:58:98:2c:eb:9b:f0:e8:97:a4:b5:fe:c2:d1:33:
0b:8e:93:d1:68:ef:33:4b:91:29:9c:7f:4b:fe:ad:
b1:ca:6c:38:59:b8:6e:65:c9:d6:95:01:19:c2:22:
19:7c:8d:b1:e8:db:b4:07:69:9f:a7:9d:f4:2c:f1:
19:96:96:30:60:90:aa:67:4f:66:25:8f:3d:26:65:
cb:6d:07:d7:17:34:5e:ad:5e:77:f0:6e:0e:ce:b6:
02:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A5:4C:FB:51:09:BD:68:FF:9F:40:15:EB:63:07:6E:17:C8:CA:03
X509v3 Authority Key Identifier:
keyid:CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e8:18:84:8c:c7:30:e6:34:13:04:bb:e2:a7:aa:16:91:76:
e7:a4:db:13:d4:9a:c4:24:f5:ac:32:c0:4c:87:45:e3:cc:7c:
2c:a7:0f:8c:23:b8:37:70:e4:22:27:af:79:d1:d4:8b:66:2b:
ff:6f:2e:78:b3:b2:87:31:31:28:08:7a:93:7a:92:ba:9a:01:
fb:76:2e:e8:30:95:df:d1:f2:04:0e:c7:e2:47:37:4b:5c:40:
11:a6:28:63:44:ed:40:19:3d:d4:7e:ea:8a:89:8b:08:f5:8b:
80:8e:19:1a:49:2c:54:6b:12:84:df:85:78:79:5b:9f:3d:1b:
8a:17:7b:9b:3d:ca:a5:42:11:11:71:29:d6:b2:fc:8e:ed:07:
f8:0f:69:2c:6c:92:fb:41:c3:df:7b:a3:1b:ef:1d:d9:07:7c:
4d:83:2d:ba:9b:bc:47:4c:20:b5:9d:b7:76:13:e0:7c:a3:30:
fc:7a:13:35:2f:7b:a0:45:9e:0b:26:3b:b7:7e:c8:1d:8d:96:
0d:36:10:eb:d6:17:b4:82:d5:cf:32:2e:7e:a8:24:5e:69:ad:
8e:77:74:d2:87:11:54:5c:59:38:2f:73:3b:82:81:1b:ea:68:
e8:06:b5:78:20:e4:80:af:e5:0f:f4:08:b1:84:bb:ef:b4:0e:
32:2f:ad:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:43 2026 by rpki-client