
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft
File: z7B65d0AqScU2zWnIQRdnS644xc.mft (raw, json)
Hash identifier: 6rY2LeeT7bkV+DpngRd1lksy2biy3mYRckm0n7Tyg9c=
Subject key identifier: 8B:76:5D:C6:07:93:B5:CA:A5:47:B4:F2:BB:F3:D1:E2:41:AE:35:A3
Authority key identifier: CF:B0:7A:E5:DD:00:A9:27:14:DB:35:A7:21:04:5D:9D:2E:B8:E3:17
Certificate issuer: /CN=A9189A9F/serialNumber=CFB07AE5DD00A92714DB35A721045D9D2EB8E317
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7B65d0AqScU2zWnIQRdnS644xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft
Manifest number: 059A
Signing time: Wed 19 Aug 2026 00:16:51 +0000
Manifest this update: Wed 19 Aug 2026 00:16:51 +0000
Manifest next update: Wed 26 Aug 2026 00:16:51 +0000
Files and hashes: 1: z7B65d0AqScU2zWnIQRdnS644xc.crl (hash: yoxS84yluND5V3tw7E9sm9L38apVBZelXY6FTJLbSgY=)
2: 42A92B3C3BAC11F0882B5B62C4F9AE02.roa (hash: mnKEVCHYufvAfnbFXyv9lcez9bkmlfDA2RMG7ihf8tw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.crl
rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7B65d0AqScU2zWnIQRdnS644xc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:16:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189A9F, serialNumber=CFB07AE5DD00A92714DB35A721045D9D2EB8E317
Validity
Not Before: Aug 19 00:16:51 2026 GMT
Not After : Aug 26 00:16:51 2026 GMT
Subject: CN=6a84f5f3-4222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:c8:25:aa:93:85:54:6a:e1:81:d5:54:b0:63:
66:24:6a:ae:a9:8b:3d:29:06:e8:8d:2c:86:0a:8a:
7d:91:fd:f1:30:60:28:69:12:64:b4:26:be:d8:b5:
c2:d3:18:9f:53:33:eb:5b:de:94:a3:19:b6:bb:d4:
d2:b5:58:ac:42:23:73:63:ae:39:a9:44:d8:45:c5:
93:43:d6:a9:34:2e:9e:7b:b0:c3:8d:55:ba:68:0e:
5b:61:57:c5:67:a6:3e:70:e8:4f:b6:e8:93:59:79:
7b:b3:36:65:d2:7f:ee:9c:10:b8:21:c7:73:67:4b:
5e:7a:26:86:00:44:8a:a5:77:0c:4c:c4:bd:72:26:
35:a8:db:fc:a7:d7:a1:ae:da:d8:d3:af:53:b8:ef:
1c:71:2c:31:3d:ef:58:10:d1:4d:a1:79:58:15:f2:
51:35:df:94:ab:cd:a3:d2:8c:17:98:58:80:d1:06:
14:4e:fc:42:09:3b:bb:eb:fe:ed:af:bc:ff:ce:f7:
4b:9d:cd:06:f0:5d:5b:a8:94:08:fc:40:66:b8:e9:
3e:b9:58:0d:ad:89:c5:57:da:5f:64:04:95:43:0d:
ce:8e:bb:3d:d2:b1:e6:81:3a:fd:af:0b:e9:c7:3d:
11:c2:24:14:1b:46:38:6d:12:89:5b:d8:45:aa:45:
df:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:76:5D:C6:07:93:B5:CA:A5:47:B4:F2:BB:F3:D1:E2:41:AE:35:A3
X509v3 Authority Key Identifier:
keyid:CF:B0:7A:E5:DD:00:A9:27:14:DB:35:A7:21:04:5D:9D:2E:B8:E3:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7B65d0AqScU2zWnIQRdnS644xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:e8:9c:5c:0e:ae:a6:a9:20:95:05:f6:62:0b:a8:9a:35:f8:
d3:ee:5f:1e:62:22:86:23:5b:d0:b9:39:a4:e2:cb:6a:68:fe:
c5:d7:09:cd:63:2c:a4:a5:3c:4a:cf:5c:16:81:17:1b:4c:08:
e1:82:64:fb:86:d2:5c:6b:f1:f1:18:42:2b:06:e8:af:25:2c:
5e:3f:53:49:0a:d9:e7:a7:13:ed:32:40:bf:48:f8:52:1d:50:
8d:ec:f8:60:06:49:73:9f:48:a0:3f:03:a1:4e:28:62:64:ee:
55:76:1f:aa:72:6f:34:f9:52:f4:c2:6c:f7:65:70:ec:df:a5:
a4:a7:4e:18:a5:92:e1:c1:68:4b:99:5b:33:74:f0:e9:f8:d3:
87:7d:33:ee:d0:f4:3d:8f:28:f0:b5:2e:4f:0c:84:15:b4:14:
a0:57:1e:bf:76:1a:83:ed:7d:dc:89:de:e4:b7:8b:82:f7:05:
32:ed:07:10:68:14:2b:73:f6:4b:37:f7:70:46:9e:18:ca:da:
0a:3a:65:48:76:28:50:a0:e3:d1:13:a8:78:a4:25:1c:a9:35:
09:45:a1:87:b9:d8:18:ee:59:31:a9:37:77:77:64:f4:f8:b8:
bf:dd:96:73:4a:6d:a4:8a:b8:65:86:28:0f:c5:3a:2e:be:1f:
7d:6f:f7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:30:00 2026 by rpki-client