
$ rpki-client -vvf rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft
File: HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft (raw, json)
Hash identifier: GeY2/WaAyo0dLRQirF/JIX3AbcPN0uRgSKGRORZ9N78=
Subject key identifier: 1E:37:C8:9C:16:42:2F:B4:60:FF:F7:BE:C5:7C:C9:96:CF:97:7D:56
Authority key identifier: 1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9
Certificate issuer: /CN=A918742C/serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9
Certificate serial: 1760
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft
Manifest number: 1752
Signing time: Mon 22 Jun 2026 16:35:09 +0000
Manifest this update: Mon 22 Jun 2026 16:35:09 +0000
Manifest next update: Mon 29 Jun 2026 16:35:09 +0000
Files and hashes: 1: HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl (hash: XJIyIVYuKgjTjuvJPVt7Vi0W+qAhWDH0lSiJRWPbR+o=)
2: 8DFAE1DA019D11E8A7804A1EC4F9AE02.roa (hash: +mlsrBxdIyOlCH9NElXmLFuWulBGulTkwg1yRe34F2o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl
rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 16:35:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5984 (0x1760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918742C, serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9
Validity
Not Before: Jun 22 16:35:09 2026 GMT
Not After : Jun 29 16:35:09 2026 GMT
Subject: CN=6a39643d-1c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ce:5d:15:56:65:d4:0c:5a:82:ae:48:87:2f:
fc:1a:b6:14:86:53:cc:18:86:66:c8:e9:c6:18:ba:
bc:d2:75:a6:4a:fb:84:83:3f:9f:f2:31:b6:e3:e6:
08:c7:e2:cf:c7:2e:88:e8:9d:a2:d5:2e:5e:08:3e:
f7:d3:a2:51:42:39:c9:64:41:e2:15:d5:2d:ca:79:
c3:5f:1b:f1:b8:24:e3:ce:12:c8:4e:96:07:07:72:
49:9c:1a:74:de:5b:83:f4:13:e7:97:8d:f9:38:12:
99:f8:2d:38:db:83:05:84:64:d7:a2:53:f4:fa:8b:
ea:c3:bf:d7:0a:29:a7:04:80:d2:c0:ab:32:2c:b5:
72:93:c8:4c:1d:dc:51:89:4a:ae:e2:62:c4:8d:dd:
78:6b:a6:46:28:62:47:b1:e1:80:1c:00:a0:dd:f7:
e8:6f:75:73:17:28:78:a3:57:8b:07:72:d7:cc:65:
49:cc:a0:10:59:58:f5:10:d2:4d:d6:7e:b1:ba:2d:
9d:3e:3f:b7:93:85:3e:78:3a:2b:37:7a:db:36:cd:
52:8c:e5:da:31:d7:9d:5f:55:e3:d7:21:5a:6d:87:
86:00:73:a1:95:08:cf:b1:ab:6c:c1:5a:ae:5b:d6:
55:18:6b:4e:9c:73:4b:3b:3d:bd:2e:3f:61:3d:bc:
fe:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:37:C8:9C:16:42:2F:B4:60:FF:F7:BE:C5:7C:C9:96:CF:97:7D:56
X509v3 Authority Key Identifier:
keyid:1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:dc:4f:79:7e:a6:f1:ac:33:68:ab:5c:ed:ef:87:a6:ba:5c:
49:b7:ee:9c:ee:ab:c8:f6:c1:e5:9a:ff:a2:1c:fb:ca:06:72:
82:ad:ee:a7:91:99:af:fc:8d:28:91:c2:54:5b:7f:c3:4b:1e:
e7:11:a9:b5:1c:48:61:fa:9f:27:47:95:29:11:43:b4:bc:02:
33:a8:04:39:d9:7c:52:a9:19:dd:31:bc:5e:59:2a:88:88:cc:
92:e4:16:27:f9:4c:50:1c:6f:3a:e9:b2:7f:ca:2f:fe:03:b8:
a6:ae:df:e1:a4:be:4d:f1:99:26:9e:9b:a8:20:b0:0d:35:a2:
38:4e:ce:1e:5c:84:ec:99:e2:bb:9f:a8:2e:22:c0:5f:ec:ce:
ee:05:34:00:40:7f:02:f5:b7:e3:be:60:ab:91:d9:7d:db:66:
c9:45:9a:68:c3:a6:31:8e:72:11:d4:a0:0f:c6:fd:4f:3c:9f:
7b:54:0b:7b:36:a3:38:d3:b9:23:5f:63:76:a6:f1:75:63:7a:
83:58:bf:da:27:c7:c2:5b:cf:df:36:81:95:09:71:c3:57:f0:
32:d7:e3:dc:47:12:9d:65:fe:36:e1:6f:b0:06:53:a7:ec:dd:
4c:8b:b9:29:1e:16:3c:2c:54:ba:8e:a6:14:41:1a:65:61:ca:
e0:d9:df:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:27:42 2026 by rpki-client