
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft
File: zES2e9GPRfbhN63kcxM1pVGmYSc.mft (raw, json)
Hash identifier: llLH9WRAAoqjqraaUlE5sy2Na6xOKaeM0sAexhqcDn8=
Subject key identifier: 9E:DF:15:68:C6:B2:45:D7:D0:7C:63:85:B6:46:55:A1:87:CA:1E:50
Authority key identifier: CC:44:B6:7B:D1:8F:45:F6:E1:37:AD:E4:73:13:35:A5:51:A6:61:27
Certificate issuer: /CN=A916523A/serialNumber=CC44B67BD18F45F6E137ADE4731335A551A66127
Certificate serial: F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft
Manifest number: F6
Signing time: Fri 09 Oct 2026 06:58:07 +0000
Manifest this update: Fri 09 Oct 2026 06:58:06 +0000
Manifest next update: Fri 16 Oct 2026 06:58:06 +0000
Files and hashes: 1: zES2e9GPRfbhN63kcxM1pVGmYSc.crl (hash: TGKsiKHke5/QCtH1un586+NISWO3OUzL9h0AzQA2tMw=)
2: 469F3FE44CDF11F08D2EFF16C4F9AE02.roa (hash: a0gJVidh3CzBFwIa6hJB8PakgEK14/bCQvJ2r5FU3Og=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.crl
rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 06:58:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916523A, serialNumber=CC44B67BD18F45F6E137ADE4731335A551A66127
Validity
Not Before: Oct 9 06:58:06 2026 GMT
Not After : Oct 16 06:58:06 2026 GMT
Subject: CN=6ac8907e-a735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:62:22:4a:d1:c5:89:01:b2:20:91:77:cd:f5:
37:0f:c9:e5:8c:b1:fe:99:fe:60:10:87:76:f8:3b:
6d:05:4c:06:99:4c:c8:ac:c9:96:26:8f:8f:25:bc:
d5:66:15:c8:42:cd:14:d9:85:99:16:5b:8d:93:f4:
d6:f0:64:ee:37:a3:1d:94:4e:85:84:b2:fc:1d:d5:
b1:da:59:0f:80:81:97:73:3d:31:67:0b:7d:98:79:
fd:34:1a:96:0a:00:e6:aa:bc:9e:f2:b9:50:29:5a:
06:80:8b:d1:d3:c5:94:f6:ba:4c:fd:22:39:fa:f6:
98:79:68:9b:ce:f4:55:21:02:f1:77:ba:da:4c:45:
a8:fa:bb:4c:90:ef:2b:91:a1:63:f4:96:5a:82:e2:
7c:d4:3b:0d:bf:cf:91:48:44:ad:04:41:db:f5:c6:
ce:1f:eb:1d:67:09:be:4e:c7:2b:1f:c8:39:f2:51:
4e:f9:e3:93:2a:4f:27:b6:0b:c5:91:4e:d3:13:1f:
d7:a7:ea:ee:af:f7:41:4d:10:0d:9b:08:a9:74:40:
aa:d2:5b:c6:e4:95:89:9d:20:4b:45:7d:db:ad:8b:
fd:53:3d:f5:10:2b:a8:ac:d1:4c:5b:e9:5a:a4:30:
48:64:9d:40:d0:c0:75:c0:3d:d2:54:49:35:81:4c:
e8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DF:15:68:C6:B2:45:D7:D0:7C:63:85:B6:46:55:A1:87:CA:1E:50
X509v3 Authority Key Identifier:
keyid:CC:44:B6:7B:D1:8F:45:F6:E1:37:AD:E4:73:13:35:A5:51:A6:61:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:ff:bc:7e:9e:ff:12:79:dc:d9:de:ac:9b:d4:af:23:fc:22:
43:ca:20:a9:fb:4a:7f:9d:f1:8f:28:3e:fa:98:be:05:70:f3:
96:75:8c:cf:4d:33:29:cf:ea:ab:bb:66:51:e2:6a:c0:09:16:
01:54:17:fd:5e:a4:7f:d8:79:3f:a2:0a:79:47:b3:aa:08:42:
2e:7f:bb:6e:99:00:71:7d:0f:d0:18:a4:51:5f:6f:eb:e4:c1:
97:80:fe:a2:72:43:8b:c4:58:c0:bd:fc:98:4c:1a:15:08:ba:
0b:fc:d3:33:2c:9c:57:46:b5:61:37:63:aa:54:32:c8:1d:15:
a5:d1:c2:58:95:95:e5:35:d0:dd:89:79:8a:15:95:52:cd:31:
00:f6:22:54:76:c9:42:06:ef:df:b8:7a:74:da:e4:e0:6b:7e:
c8:f3:7d:32:cf:f0:de:75:63:2b:63:09:41:90:95:71:e4:34:
a9:55:6a:c2:b1:41:f8:73:3e:e3:7d:55:4b:d1:5e:2e:94:12:
f3:e0:87:71:59:55:45:3e:bf:0a:08:94:b8:c2:c4:de:57:65:
54:66:bf:5e:ca:e7:b9:53:06:6f:6d:5e:e3:51:46:fb:66:37:
82:c5:c6:a5:b0:40:8d:97:c3:46:11:c3:43:ed:0e:37:fa:e4:
fe:d2:67:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjUyM0ExMTAvBgNVBAUTKENDNDRCNjdCRDE4RjQ1RjZFMTM3QURFNDczMTMzNUE1
NTFBNjYxMjcwHhcNMjYxMDA5MDY1ODA2WhcNMjYxMDE2MDY1ODA2WjAYMRYwFAYD
VQQDEw02YWM4OTA3ZS1hNzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnWIiStHFiQGyIJF3zfU3D8nljLH+mf5gEId2+DttBUwGmUzIrMmWJo+PJbzV
ZhXIQs0U2YWZFluNk/TW8GTuN6MdlE6FhLL8HdWx2lkPgIGXcz0xZwt9mHn9NBqW
CgDmqrye8rlQKVoGgIvR08WU9rpM/SI5+vaYeWibzvRVIQLxd7raTEWo+rtMkO8r
kaFj9JZaguJ81DsNv8+RSEStBEHb9cbOH+sdZwm+TscrH8g58lFO+eOTKk8ntgvF
kU7TEx/Xp+rur/dBTRANmwipdECq0lvG5JWJnSBLRX3brYv9Uz31ECuorNFMW+la
pDBIZJ1A0MB1wD3SVEk1gUzoTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ7fFWjG
skXX0HxjhbZGVaGHyh5QMB8GA1UdIwQYMBaAFMxEtnvRj0X24Tet5HMTNaVRpmEn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTIzQS9FNzVCODc4QzRD
REQxMUYwQkZBMDhGODBDNEY5QUUwMi96RVMyZTlHUFJmYmhONjNrY3hNMXBWR21Z
U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pFUzJlOUdQUmZiaE42M2tjeE0xcFZHbVlTYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTIzQS9FNzVCODc4QzRDREQxMUYwQkZBMDhGODBDNEY5QUUwMi96RVMyZTlHUFJm
YmhONjNrY3hNMXBWR21ZU2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAy/+8fp7/Ennc2d6sm9SvI/wiQ8ogqftKf53xjyg++pi+BXDzlnWMz00zKc/q
q7tmUeJqwAkWAVQX/V6kf9h5P6IKeUezqghCLn+7bpkAcX0P0BikUV9v6+TBl4D+
onJDi8RYwL38mEwaFQi6C/zTMyycV0a1YTdjqlQyyB0VpdHCWJWV5TXQ3Yl5ihWV
Us0xAPYiVHbJQgbv37h6dNrk4Gt+yPN9Ms/w3nVjK2MJQZCVceQ0qVVqwrFB+HM+
431VS9FeLpQS8+CHcVlVRT6/CgiUuMLE3ldlVGa/XsrnuVMGb21e41FG+2Y3gsXG
pbBAjZfDRhHDQ+0ON/rk/tJnVw==
-----END CERTIFICATE-----
Generated at Fri Oct 9 19:57:24 2026 by rpki-client