
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft
File: ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft (raw, json)
Hash identifier: TXhXUqZsIj/K6fz8dWkhyKOuxq2ERMrn61U57mPkrdc=
Subject key identifier: 5A:8D:77:F7:2F:E8:BC:1F:76:B5:BC:FC:E1:0C:7B:72:B8:FA:C5:56
Authority key identifier: 64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75
Certificate issuer: /CN=A9175F43/serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275
Certificate serial: 0112
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft
Manifest number: 010C
Signing time: Mon 01 Jun 2026 06:49:02 +0000
Manifest this update: Mon 01 Jun 2026 06:49:01 +0000
Manifest next update: Mon 08 Jun 2026 06:49:01 +0000
Files and hashes: 1: ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl (hash: I+Zwezz+Hf6ERHmZgv7jZmhf+lbntdBwf5Ho9qxOsxg=)
2: 77A9961E2CAB11F1BF46ABE0C7833773.roa (hash: q2CV+pm6erT1RDaqImdaaQYJ9ljYcSo6QEqlYHcpD9Q=)
3: BE8AB5962CAA11F188C8C19CC7833773.roa (hash: +HuQ1+KZiqgNFUPhLnP7t9LZlbQUAOttCYgCzCKpHnQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl
rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175F43, serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275
Validity
Not Before: Jun 1 06:49:01 2026 GMT
Not After : Jun 8 06:49:01 2026 GMT
Subject: CN=6a1d2b5e-885b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:94:b1:d3:68:a0:9e:d3:8d:c3:92:8f:7e:b6:
54:b9:33:ce:70:cc:7f:31:41:9a:61:71:33:b8:13:
b6:49:b9:5c:1b:d3:a2:39:fe:bc:04:29:50:81:5f:
dd:69:04:71:8e:83:2a:5c:3f:62:ca:de:73:16:7b:
e1:d1:23:df:fa:6e:2a:b1:8d:2c:f0:c0:42:4b:0b:
db:6c:68:4f:20:39:4d:7d:8d:20:55:95:dc:11:20:
07:0b:ee:cd:c3:31:3d:a5:da:9c:c6:86:ca:ae:b5:
84:be:f1:88:27:48:60:eb:22:01:3f:b8:2a:f5:38:
55:b5:85:78:b7:3c:7f:dd:09:94:90:4c:49:bd:eb:
2a:6e:cd:8f:f6:88:7c:09:ab:ef:00:ed:aa:d7:53:
11:70:c5:e8:c3:77:b8:89:2c:b2:78:e8:f0:7f:4e:
e2:a7:3d:63:f0:47:c0:22:1f:68:a6:91:b4:e0:f5:
b8:6c:3b:7e:3a:b1:e1:e3:ad:97:e8:4f:1a:c1:32:
7a:4a:ae:8a:96:4a:4e:2d:c2:1e:53:47:ff:9c:1a:
8b:cf:aa:c7:f7:95:7e:86:b1:09:ea:3c:c2:36:fa:
c4:af:ed:31:06:3c:73:29:e5:bb:c4:cc:30:ee:d4:
04:54:96:0b:35:89:7d:7d:f1:0f:50:5b:0b:eb:87:
25:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8D:77:F7:2F:E8:BC:1F:76:B5:BC:FC:E1:0C:7B:72:B8:FA:C5:56
X509v3 Authority Key Identifier:
keyid:64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:f4:de:1f:4c:db:c3:4d:71:0a:5b:d6:a8:df:5a:92:76:d1:
93:6d:0a:03:bd:2d:83:2f:db:e0:48:cd:2e:e3:84:71:44:5b:
77:00:c6:fa:07:09:20:6b:38:36:d2:54:70:8d:b1:92:84:67:
5f:7d:f8:58:93:08:4f:54:82:e9:d6:97:08:d7:05:50:ba:7c:
19:4a:6f:dc:fc:eb:f5:9a:03:c5:53:af:53:32:91:69:da:ba:
ec:70:d7:2c:e8:47:3b:16:ab:ba:cb:19:9c:d1:9d:22:23:b6:
4a:68:6b:89:c2:d4:55:1d:81:3e:58:b2:81:7f:eb:4b:5f:85:
66:34:72:e1:f8:77:4c:8d:3a:23:a4:9a:53:04:a9:b9:03:36:
b7:91:f8:40:7f:88:ac:b7:84:13:cd:8a:67:53:4c:e4:c7:bc:
75:82:07:c3:1f:83:cc:05:c2:5d:60:70:58:08:68:4c:20:f3:
d4:f3:ae:64:cc:79:21:c6:8b:d6:a1:27:11:c1:cc:60:4f:24:
cf:ac:37:03:c8:5e:5c:53:e0:ca:d6:e8:24:fe:34:98:8e:1e:
84:87:ad:dc:87:f1:f3:ae:a2:2b:57:bc:48:7a:b5:ca:90:16:
c4:ac:b1:1a:c5:ba:cb:85:5c:35:17:9d:5b:cd:e7:62:f1:02:
c6:83:4a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:05:18 2026 by rpki-client