
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft
File: ZrIR6cz336FdfNNyNqX1gvGUUwo.mft (raw, json)
Hash identifier: sMlTSiPOclf98QmRa+Evs0E6kaBc/vKwUAWkqO8e7GM=
Subject key identifier: 5B:6A:5E:DE:12:2A:CE:ED:C1:31:D1:26:52:C9:A6:69:D8:A8:4A:D7
Authority key identifier: 66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A
Certificate issuer: /CN=A9162C2C/serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A
Certificate serial: 063F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft
Manifest number: 063B
Signing time: Tue 18 Aug 2026 23:03:05 +0000
Manifest this update: Tue 18 Aug 2026 23:03:04 +0000
Manifest next update: Tue 25 Aug 2026 23:03:04 +0000
Files and hashes: 1: ZrIR6cz336FdfNNyNqX1gvGUUwo.crl (hash: HJfvxJsMkHNAtdcu01tFPUPaD3e2uwF8xK8c3A87QuI=)
2: B9FDAFA436D511F09007A616C4F9AE02.roa (hash: 14hjxCWDN1Xl0Tkh1WoOKZgmhqThzo7epHMxj3MS5qU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl
rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1599 (0x63f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162C2C, serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A
Validity
Not Before: Aug 18 23:03:04 2026 GMT
Not After : Aug 25 23:03:04 2026 GMT
Subject: CN=6a84e4a8-ac84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:14:94:46:81:79:a7:7e:0d:49:cc:f1:01:
42:9b:8c:44:f0:8e:d4:f5:51:b7:1e:de:88:52:b0:
a2:58:fc:92:ae:b1:fc:d7:a4:1b:74:39:7a:ea:30:
4f:05:20:d9:83:d4:f8:8a:7d:4b:25:da:96:97:c4:
07:1b:0b:a9:14:89:20:5e:5e:bb:20:e3:f8:3e:7d:
00:c5:be:9c:bb:de:45:b5:a7:af:1e:cb:0f:0d:36:
9f:6a:74:5e:51:50:67:21:62:31:aa:33:6f:8e:87:
4c:6f:57:27:7d:f9:39:f5:68:20:c0:69:24:b0:78:
3b:02:3b:c8:53:c1:da:7e:c6:ad:fe:69:cc:0a:aa:
45:45:f9:55:41:ea:72:a9:bf:b2:57:05:b4:dc:29:
86:6e:c6:fb:9f:26:01:97:90:b8:fa:5e:17:e5:8f:
d8:2c:93:3c:a5:94:a9:c5:ad:cb:54:14:55:3c:91:
1a:22:ca:47:2e:f9:62:6a:1a:1c:6f:33:6d:e8:ca:
5a:3f:b7:e1:72:4d:9e:05:9c:b0:73:64:b4:4f:d2:
f3:3c:4a:b2:3e:fc:75:6e:de:75:33:db:09:4c:17:
0f:d0:d5:ce:4a:da:02:76:35:fc:2e:98:bc:19:00:
53:5c:44:d3:3c:88:a9:48:b6:b3:dc:b0:b7:e1:ed:
ff:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6A:5E:DE:12:2A:CE:ED:C1:31:D1:26:52:C9:A6:69:D8:A8:4A:D7
X509v3 Authority Key Identifier:
keyid:66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:18:be:3a:51:7f:4a:ff:93:28:7e:57:87:0f:0b:07:e1:44:
97:89:96:7c:c5:29:d7:88:38:7d:25:95:d6:6e:bf:cd:ab:71:
85:d4:03:b3:0b:a8:05:92:26:c5:12:dc:a2:56:78:97:0c:45:
30:25:f1:90:18:7c:d3:ed:e3:a9:a1:7b:48:79:e2:7e:d9:f3:
5c:47:21:25:4f:39:33:14:7c:9c:82:a7:84:6b:f7:02:43:6a:
c4:4e:2d:13:e5:88:c3:1a:f5:ea:f2:d3:09:dc:ea:d9:a0:e6:
a0:19:12:2e:4a:6f:d0:01:f3:82:47:3f:90:2e:3c:e6:d0:17:
92:eb:8a:3f:01:99:e2:27:14:b1:56:0f:57:36:f4:f0:11:36:
d5:b6:69:92:05:f4:91:2d:df:05:55:f0:c3:e8:58:cd:7f:65:
62:49:79:36:67:bc:2c:48:cd:1e:00:09:ab:be:0a:be:05:9b:
37:c3:0f:21:00:da:cd:9d:72:67:14:64:59:a2:e0:c3:ba:14:
6a:54:ca:48:12:57:d0:f4:de:14:bd:53:f5:a6:21:78:92:f0:
86:57:ea:ca:fa:15:57:9b:f9:2d:cf:a3:e4:12:c1:ef:a9:c9:
f7:33:5a:eb:e5:81:10:5b:fc:23:86:79:a0:9c:fa:51:7f:30:
0b:d2:c0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:57 2026 by rpki-client