
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft
File: zcaQgy8tEjXavx7zF_EbaV7r2k8.mft (raw, json)
Hash identifier: uFC2p6gYsJZqyqo/gkjzeMKlG443XNoOAYIAlFDsXzI=
Subject key identifier: B1:41:F4:BF:90:BA:D2:03:00:DA:73:CC:14:4A:6F:50:A1:2A:45:22
Authority key identifier: CD:C6:90:83:2F:2D:12:35:DA:BF:1E:F3:17:F1:1B:69:5E:EB:DA:4F
Certificate issuer: /CN=A9166D02/serialNumber=CDC690832F2D1235DABF1EF317F11B695EEBDA4F
Certificate serial: 49
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft
Manifest number: 46
Signing time: Fri 05 Jun 2026 08:54:03 +0000
Manifest this update: Fri 05 Jun 2026 08:54:02 +0000
Manifest next update: Fri 12 Jun 2026 08:54:02 +0000
Files and hashes: 1: zcaQgy8tEjXavx7zF_EbaV7r2k8.crl (hash: BDJlfun9aNMTJev2etbNqiSzMsXds09XKWS4+uswN7g=)
2: 01AB053800E611F1BE6C33EC376F56BC.roa (hash: kmY0qRrvIDIK9Tv6KUtstC/wtlPYaFhtrXRSIWFN1NU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.crl
rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 08:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166D02, serialNumber=CDC690832F2D1235DABF1EF317F11B695EEBDA4F
Validity
Not Before: Jun 5 08:54:02 2026 GMT
Not After : Jun 12 08:54:02 2026 GMT
Subject: CN=6a228eab-6937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f0:cd:6f:54:36:1e:84:e8:40:81:ec:ce:ba:
b5:ef:0b:5d:fd:d0:59:67:70:d0:49:65:21:6d:83:
5a:9d:7d:6a:3d:2b:53:88:1b:db:62:99:61:1b:9d:
87:9d:47:63:cf:3b:3a:fb:e3:22:4d:79:8a:42:e2:
3c:1b:d6:3c:ff:00:61:d8:14:36:fe:e0:b3:fd:e4:
f7:a2:dc:03:1a:79:23:be:60:2c:c3:a7:7d:d4:ae:
fb:9a:01:cc:d3:bc:11:4f:29:d1:c5:0e:b2:5a:1e:
cb:03:c5:98:54:ee:66:08:6f:b3:34:10:de:24:ca:
ea:d5:7a:f0:1f:3e:1e:5a:b7:94:7d:63:b6:ed:f4:
45:ef:e4:bc:d3:5a:bc:0a:7f:95:02:cb:bf:51:62:
ae:27:75:ae:e6:1b:41:5d:9e:76:60:4d:6a:a4:82:
1a:bf:c4:3e:4d:35:c1:70:45:e3:73:94:33:2e:c0:
17:7c:61:ce:4e:e4:bc:82:d3:a9:b3:6b:11:67:05:
cc:d2:c1:28:0c:04:3e:3a:90:6e:b8:9e:df:c9:b1:
8c:d1:66:7d:a9:64:30:63:fc:cb:93:69:bf:92:24:
db:a3:dd:5e:9c:2e:cd:b5:00:29:53:51:8f:82:bc:
33:54:5f:bb:8e:50:fa:52:22:3b:50:69:05:4a:29:
ed:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:41:F4:BF:90:BA:D2:03:00:DA:73:CC:14:4A:6F:50:A1:2A:45:22
X509v3 Authority Key Identifier:
keyid:CD:C6:90:83:2F:2D:12:35:DA:BF:1E:F3:17:F1:1B:69:5E:EB:DA:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:0a:5d:39:65:5d:52:93:93:68:26:e1:23:9b:08:6d:5e:88:
1f:47:25:cf:0f:9c:25:5c:f3:a5:ab:36:fb:b0:77:bd:15:7a:
04:d7:b8:55:e1:43:4f:1a:8c:78:58:1a:eb:13:73:02:22:ff:
0e:2a:2d:2d:b5:d4:69:bc:aa:99:4e:60:5e:c9:2f:5b:bd:77:
54:c7:98:0c:f8:ba:31:67:cc:50:b7:37:49:15:cb:af:7a:7b:
e6:01:e8:03:97:74:ef:01:cb:00:36:7a:7d:97:ff:c5:f5:b8:
bd:4d:94:ec:92:da:0b:f3:d5:8e:02:74:0b:c8:94:71:86:4c:
0a:39:b6:e3:63:7e:67:b5:8f:81:6b:f7:0e:14:23:a2:79:62:
e7:ec:d2:99:44:18:b2:15:22:94:e3:4c:05:32:cc:2a:ef:7a:
ed:d9:a4:83:a6:af:88:46:b9:15:00:1e:f4:b9:cd:de:f4:1c:
73:cf:33:01:4f:9a:b8:b0:72:31:e0:7c:3b:86:ec:79:78:b1:
65:fe:d1:4a:d4:74:56:15:af:ec:dc:78:78:5e:57:2f:14:6e:
24:a2:68:32:36:32:e6:7c:14:20:ab:a6:1d:66:4f:a5:bf:e3:
7a:f8:1d:6d:bd:9c:23:29:dc:bc:31:ea:1c:fd:73:25:8b:78:
fd:e1:d5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:58:28 2026 by rpki-client