
$ rpki-client -vvf rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft
File: ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft (raw, json)
Hash identifier: CJxuD9eWmJungOTHJcviYEPysko6ypjG+Bt+nUfPs+I=
Subject key identifier: D9:6C:45:0C:B3:F8:89:26:EC:97:A4:EE:4F:DA:CE:3F:B4:D9:D9:43
Authority key identifier: 64:64:A8:D4:CB:7A:6B:C9:2B:94:9D:1A:1E:6F:09:93:33:C5:6D:F1
Certificate issuer: /CN=A91694A4/serialNumber=6464A8D4CB7A6BC92B949D1A1E6F099333C56DF1
Certificate serial: 09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft
Manifest number: 08
Signing time: Sun 21 Jun 2026 09:14:24 +0000
Manifest this update: Sun 21 Jun 2026 09:14:23 +0000
Manifest next update: Sun 28 Jun 2026 09:14:23 +0000
Files and hashes: 1: ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.crl (hash: ce6/V6Zcew9oMEH0QLlp+y9PxG36eIdahqU+KSsOlKY=)
2: CCB3F0C665C411F19AAB55CC8147A888.roa (hash: 6HsQ3Z7sCMaiW2glN0WOtCM/Fh9gJPdbJXQJdZ4RzC8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.crl
rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Jun 2026 09:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91694A4, serialNumber=6464A8D4CB7A6BC92B949D1A1E6F099333C56DF1
Validity
Not Before: Jun 21 09:14:23 2026 GMT
Not After : Jun 28 09:14:23 2026 GMT
Subject: CN=6a37ab70-66d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4c:24:f1:6e:b1:db:9f:2c:90:10:f7:b2:59:
ae:fb:ad:be:0d:57:7b:1c:80:d0:5f:3e:a2:7e:eb:
60:7b:94:79:3e:af:94:5c:5a:2d:27:76:08:64:78:
cc:42:37:25:69:2a:d1:8a:92:f7:f7:e2:8d:12:5d:
7c:99:09:f0:a1:88:c8:61:a0:1b:53:e5:33:5f:61:
b3:fb:66:26:be:88:6f:9e:ff:31:50:e3:5a:f2:cb:
62:35:ab:57:8b:59:6a:77:b4:10:52:2e:62:d6:99:
46:2c:5b:f8:6e:4b:a9:52:5d:fc:6c:be:b0:0b:f4:
14:bb:c8:fe:8e:15:dd:f6:7a:d4:c1:c4:76:4d:3f:
24:01:3b:99:bd:b7:63:e9:f2:c9:a4:d0:34:bf:f7:
bf:65:07:18:6c:bf:b9:ba:bc:2e:af:fe:a9:30:09:
10:cd:f0:12:fd:c7:ee:97:29:49:8b:99:54:25:86:
59:f9:ae:81:61:56:64:12:7e:1b:cd:40:1f:9f:50:
e7:94:32:03:26:64:ec:de:5f:89:38:c3:2a:2e:03:
54:83:95:47:5b:ff:df:ad:88:cc:bd:d1:21:9d:7b:
e3:fe:99:78:3e:fd:ce:43:e0:cf:3d:57:8f:08:e4:
1d:0e:a7:8d:2e:c8:4f:be:cb:25:27:cc:65:2a:d5:
2f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6C:45:0C:B3:F8:89:26:EC:97:A4:EE:4F:DA:CE:3F:B4:D9:D9:43
X509v3 Authority Key Identifier:
keyid:64:64:A8:D4:CB:7A:6B:C9:2B:94:9D:1A:1E:6F:09:93:33:C5:6D:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:53:97:2b:9d:7a:bb:3b:c7:47:05:f4:87:5e:96:81:b2:e1:
40:68:11:d9:c3:44:9a:79:9f:00:22:26:20:f4:81:0f:1b:b0:
e7:f3:ab:75:36:f4:0b:d4:cd:fb:53:48:b0:32:37:b9:4e:ba:
ac:67:bd:93:7f:c2:0b:85:0f:a9:a8:19:c8:40:5d:1d:99:f8:
bf:49:16:da:14:e7:69:d5:92:6b:0e:78:ce:b8:28:c9:b5:6b:
4c:bd:37:28:4e:7e:68:af:98:4e:27:7c:4f:fb:1e:d8:fe:4e:
77:38:c0:dc:6c:60:4d:d5:4c:be:74:51:6f:cc:59:8b:20:42:
cd:73:da:8d:5e:38:88:87:fc:a8:0a:c8:1d:b7:1a:0a:c2:3f:
33:ac:ff:9f:4e:66:8a:8c:0d:3a:52:27:91:ad:8e:25:31:d1:
c0:a5:08:f6:29:25:08:3c:68:72:e0:97:ca:7e:4f:16:3a:ad:
04:c2:1b:25:9a:98:57:b1:82:4a:f1:88:1e:3d:ff:3b:d4:13:
f0:c9:79:b4:a4:f8:30:d2:c4:ec:d8:5f:ef:93:71:d2:8e:48:
51:cd:72:e1:56:18:dd:7a:d7:32:63:4b:5e:47:04:c0:e3:d6:
d4:bc:99:c5:d1:5c:08:9b:eb:7f:b7:2f:00:b4:e8:e0:3e:37:
bd:0e:4f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 11:58:38 2026 by rpki-client