
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/390BD8F4A16311F1B4FF675E95EE528E/zocIfXqupqBsZhkKz9EzuiNRJnc.mft
File: zocIfXqupqBsZhkKz9EzuiNRJnc.mft (raw, json)
Hash identifier: UNe3WJLqCEX40RT8aZidvs1iakZlWwsZyPsJ9jbdu4Y=
Subject key identifier: 4B:42:C2:5F:E9:03:C4:86:30:D4:8E:1E:1E:39:2A:71:B1:07:0B:09
Authority key identifier: CE:87:08:7D:7A:AE:A6:A0:6C:66:19:0A:CF:D1:33:BA:23:51:26:77
Certificate issuer: /CN=A9186214/serialNumber=CE87087D7AAEA6A06C66190ACFD133BA23512677
Certificate serial: 01
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/zocIfXqupqBsZhkKz9EzuiNRJnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/390BD8F4A16311F1B4FF675E95EE528E/zocIfXqupqBsZhkKz9EzuiNRJnc.mft
Manifest number: 01
Signing time: Wed 26 Aug 2026 15:32:30 +0000
Manifest this update: Wed 26 Aug 2026 15:32:30 +0000
Manifest next update: Wed 02 Sep 2026 15:32:30 +0000
Files and hashes: 1: zocIfXqupqBsZhkKz9EzuiNRJnc.crl (hash: nsuxAA7sAYhoZmoHCgFCVb591CifJn9gywpLYqJn3PM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/390BD8F4A16311F1B4FF675E95EE528E/zocIfXqupqBsZhkKz9EzuiNRJnc.crl
rsync://rpki.apnic.net/member_repository/A9186214/390BD8F4A16311F1B4FF675E95EE528E/zocIfXqupqBsZhkKz9EzuiNRJnc.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/zocIfXqupqBsZhkKz9EzuiNRJnc.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 15:31:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=CE87087D7AAEA6A06C66190ACFD133BA23512677
Validity
Not Before: Aug 26 15:32:30 2026 GMT
Not After : Sep 2 15:32:30 2026 GMT
Subject: CN=6a8f070e-669a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f6:4c:ce:6f:1a:42:24:77:d0:50:de:83:4e:
34:9c:a3:21:16:d3:4a:85:7b:7b:74:7a:85:d3:13:
80:9b:85:69:bf:c0:9c:7b:92:59:a6:7b:ad:2a:dc:
d7:52:65:26:c7:16:1f:d6:b5:c3:2d:e1:7c:57:68:
28:2e:5e:24:c2:ba:74:69:96:42:e5:5d:1a:3f:9e:
a3:0a:71:70:e7:1f:4c:ec:6e:6e:ea:7c:a1:7c:0e:
6c:48:f2:7f:55:a4:75:b3:13:29:64:9b:ba:af:9d:
a0:06:29:f8:2f:e9:ba:4e:46:33:ff:fa:97:29:df:
08:f5:c2:b2:91:e1:8e:fd:b6:2c:b7:e8:5f:16:f5:
7d:ec:55:5b:02:eb:ab:82:bd:b8:ee:a7:a9:39:49:
9a:ad:13:c5:a3:e5:8d:f2:2f:1e:fa:29:40:39:01:
6f:56:73:d9:b3:66:d2:84:79:ec:2a:77:dc:f3:5f:
b9:e7:b6:a3:d9:0c:14:c5:b8:a0:84:0f:2a:8e:58:
38:ad:36:b2:f3:b0:9a:90:9b:f4:d5:8d:59:1e:38:
6c:05:99:e6:c7:ce:0a:92:39:e9:c4:08:7a:6e:8d:
4a:3b:37:5b:0c:6e:84:c2:f9:de:04:6b:d3:10:f4:
dd:92:f9:25:c3:ac:d3:9f:df:d7:6d:2e:d1:ac:ac:
48:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:42:C2:5F:E9:03:C4:86:30:D4:8E:1E:1E:39:2A:71:B1:07:0B:09
X509v3 Authority Key Identifier:
keyid:CE:87:08:7D:7A:AE:A6:A0:6C:66:19:0A:CF:D1:33:BA:23:51:26:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/390BD8F4A16311F1B4FF675E95EE528E/zocIfXqupqBsZhkKz9EzuiNRJnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/zocIfXqupqBsZhkKz9EzuiNRJnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/390BD8F4A16311F1B4FF675E95EE528E/zocIfXqupqBsZhkKz9EzuiNRJnc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:95:c7:b4:91:58:5c:65:e4:76:e3:94:99:49:22:02:78:e0:
44:3f:93:f4:b7:2f:43:08:5f:18:d6:65:fc:17:30:40:3a:47:
83:c9:9f:e3:76:5d:c6:19:12:0f:51:37:bf:36:16:8f:bc:1d:
43:af:16:70:6f:bd:76:f4:07:20:15:26:41:83:61:5e:da:aa:
de:de:f7:43:81:79:f3:26:5e:d5:2d:e7:9f:31:85:ac:71:87:
21:d7:ab:56:1a:7c:56:01:ea:65:9f:d2:43:39:c7:9e:f8:97:
6a:fc:29:ff:5a:5c:0e:ec:91:86:d5:0f:16:ae:c0:84:95:94:
29:97:05:ec:7a:ae:9c:4b:9b:d3:41:c5:1f:c4:a2:77:bd:3d:
05:e9:68:83:76:53:8f:56:45:c4:df:c7:e1:f2:4a:d9:ec:bb:
52:5e:82:bc:20:da:1c:7e:bd:19:60:78:2e:02:bc:02:e0:cb:
07:9e:f4:e2:40:a5:1f:16:87:42:d7:2c:81:e8:8e:f2:42:d4:
f1:1d:fe:17:1c:76:16:12:54:6c:e3:05:8d:5d:37:31:e7:18:
e8:5e:fa:66:8b:8b:7f:66:4e:7c:e2:6a:5f:2d:dd:0e:b0:70:
b0:22:78:cd:05:60:1f:35:36:0e:87:1a:09:c7:f0:7c:46:1a:
a9:df:22:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:00 2026 by rpki-client