
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft
File: ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft (raw, json)
Hash identifier: lAK6HPg/oeT5l+GaesrVX+m8G0FAa3IZOuI9dP+gK/I=
Subject key identifier: 5C:85:EA:5D:9E:58:FD:85:6F:71:4C:7B:50:40:79:A3:7F:83:F1:16
Authority key identifier: 66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71
Certificate issuer: /CN=A9173F6C/serialNumber=663C4E99B6B6B23293FA42B612B2422992972671
Certificate serial: 01DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft
Manifest number: 01DA
Signing time: Tue 23 Jun 2026 03:46:40 +0000
Manifest this update: Tue 23 Jun 2026 03:46:39 +0000
Manifest next update: Tue 30 Jun 2026 03:46:39 +0000
Files and hashes: 1: ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl (hash: kPMV4/13cRK4TJrQqFAfjU0XcUWUE+8iqIqZy8VUbJo=)
2: 430FB1B69FC411EEBA6AB80AC4F9AE02.roa (hash: J9Q0fospq9ZatXjfck0bQd1+CpXH2kLag8vk4D7Q214=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl
rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 03:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173F6C, serialNumber=663C4E99B6B6B23293FA42B612B2422992972671
Validity
Not Before: Jun 23 03:46:39 2026 GMT
Not After : Jun 30 03:46:39 2026 GMT
Subject: CN=6a3a01a0-b2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6d:b1:77:ae:a5:05:c0:7e:80:f9:4f:3f:6d:
70:f1:e3:05:a2:43:54:5e:3e:54:9b:51:9d:ef:a9:
e9:bc:b8:a7:d0:1b:34:ad:ad:3f:90:24:6f:67:cd:
8a:5b:85:4a:69:95:ba:67:6a:78:9a:e9:0c:9f:b4:
99:66:33:54:3b:aa:ef:1b:f0:74:07:a6:71:e8:87:
f5:6e:74:ae:17:19:51:b1:88:4b:3f:10:ee:ac:5d:
55:cb:cc:ec:d8:cc:3a:fb:a9:21:4a:1a:f1:05:2b:
4d:b0:04:20:ac:a1:72:40:17:50:ec:dd:85:24:7e:
61:92:cf:80:de:74:28:6e:82:bc:c3:81:39:ff:76:
27:8e:55:46:23:4c:e9:d1:ee:bd:b3:40:9c:ba:6d:
81:f5:47:3c:a7:e0:b0:ab:2f:36:a9:ea:e0:06:d0:
f4:10:e2:e8:ef:d2:a4:8a:01:bb:8e:ad:11:b2:65:
2d:d4:a8:70:8d:b4:f1:30:9b:ac:ad:9c:47:5a:48:
a1:17:c0:bb:2c:1f:5d:2b:98:39:f4:81:c9:38:9c:
a5:94:b1:e8:09:3a:b0:ae:ca:92:2b:f1:c0:e6:0a:
c2:7d:af:1a:61:d1:0c:73:f7:01:1f:01:7c:c0:e9:
ee:02:29:b8:09:93:61:a8:a6:36:84:c8:8f:80:87:
bc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:85:EA:5D:9E:58:FD:85:6F:71:4C:7B:50:40:79:A3:7F:83:F1:16
X509v3 Authority Key Identifier:
keyid:66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:db:0b:d7:b0:97:52:d1:2d:49:4b:05:04:4e:3a:b4:63:f1:
44:67:b3:98:76:e1:84:1d:df:96:2e:f9:99:1d:15:1d:cf:cb:
a6:ee:44:38:87:68:af:e4:7f:4e:37:a4:6c:e3:77:7c:77:47:
49:24:7c:8c:a7:a1:26:8d:45:a0:66:4d:c0:cf:e7:9d:b7:4f:
40:fa:c5:2f:b5:7a:7e:5e:71:0e:c5:89:89:98:57:1d:2e:fd:
68:70:08:58:a0:17:33:11:8a:af:49:cb:2c:49:24:d1:d5:5d:
cd:98:aa:2d:75:ae:0f:cd:17:69:4e:75:7c:d9:a2:73:e3:19:
3c:76:aa:17:aa:fa:ce:18:02:67:c9:34:bd:b2:2f:4b:00:99:
fe:5f:c3:13:78:9c:24:b7:39:42:dd:44:c0:74:e1:d1:2b:40:
59:24:40:69:14:cf:8b:b0:e5:00:1e:24:9e:19:2e:31:53:a9:
67:e8:f2:39:1f:24:6d:75:b9:d1:dc:88:55:a7:78:fd:8f:e2:
11:44:f5:7b:29:8d:ac:f3:49:03:dc:60:69:d0:e8:ea:3c:70:
97:f4:07:8c:36:7f:00:61:75:f2:b2:e1:35:c1:f9:18:ca:34:
87:6c:cd:2f:ee:51:a0:43:33:e4:11:7d:b6:f0:59:a6:3e:92:
69:23:ae:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:28:50 2026 by rpki-client