
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft
File: zUHbwYl43ThNT1yPj5a0DnHe5kE.mft (raw, json)
Hash identifier: Wr1tHHmgijdR04rjAFU6zvR/lZTLo1WTacIKPt5UmDY=
Subject key identifier: C5:58:97:93:6E:66:92:55:F1:C4:D6:23:FB:59:4D:6E:32:AA:B4:71
Authority key identifier: CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41
Certificate issuer: /CN=A9197488/serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641
Certificate serial: EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft
Manifest number: EA
Signing time: Mon 01 Jun 2026 07:16:05 +0000
Manifest this update: Mon 01 Jun 2026 07:16:05 +0000
Manifest next update: Mon 08 Jun 2026 07:16:05 +0000
Files and hashes: 1: zUHbwYl43ThNT1yPj5a0DnHe5kE.crl (hash: lld/6NByV2BcsxF5q2fONJ3hzjxXKEJhJ4CoN0h989s=)
2: 26415376FF1F11EFA2518D1DC4F9AE02.roa (hash: fR4AypiQYoJGmxQnLx99QlOWnyJ7/nfzm8EkI/Pllqo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl
rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197488, serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641
Validity
Not Before: Jun 1 07:16:05 2026 GMT
Not After : Jun 8 07:16:05 2026 GMT
Subject: CN=6a1d31b5-2ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:47:39:d3:03:12:a9:b3:06:48:96:2d:07:53:
2d:15:b9:39:eb:4e:38:64:19:01:e8:0a:af:88:af:
b3:4b:31:7b:4d:01:69:ee:ca:83:72:3e:26:2d:31:
f0:ec:e4:e3:2d:bd:e1:bb:a5:4f:89:7b:79:91:76:
03:5c:4e:cf:fd:dd:36:bb:41:40:e6:06:f3:81:c7:
ea:5e:a1:4e:8d:9d:d1:b9:2f:5f:79:c6:e3:f1:8f:
2f:a4:1d:3e:7c:9b:e9:f8:27:89:ee:a5:e3:93:64:
97:6e:b1:40:29:3e:0a:b7:21:17:60:df:68:b2:94:
9a:59:0d:4a:08:44:28:57:99:ad:a6:bd:67:2b:8f:
36:fc:98:01:8f:df:d4:aa:33:b3:f1:dc:8c:2d:a6:
ec:85:01:33:a6:e2:64:ed:31:32:8c:56:0a:2d:73:
42:78:ef:77:09:f3:f3:7a:2a:61:12:02:e4:88:b6:
60:40:c7:69:9e:3e:eb:38:53:20:42:13:13:a9:ef:
7c:ba:3d:d0:bd:52:e1:06:7b:8d:a0:82:3b:cf:47:
69:8a:84:d5:a0:ea:1e:5a:00:38:68:c2:94:89:55:
03:2f:a4:f5:66:36:10:40:31:f8:0e:d9:6b:69:dc:
5a:f8:3b:20:47:c3:9c:fe:4c:fd:33:4c:4f:dd:57:
41:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:58:97:93:6E:66:92:55:F1:C4:D6:23:FB:59:4D:6E:32:AA:B4:71
X509v3 Authority Key Identifier:
keyid:CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9b:10:b7:91:31:53:d3:1a:6d:c7:06:c0:b2:dd:28:be:ad:
46:62:1d:7d:ab:12:97:48:92:36:da:b7:21:5f:a4:86:65:3e:
c1:cb:38:4b:22:ef:22:61:1a:c0:70:47:98:68:74:e2:c5:26:
ca:a4:98:4c:5a:39:98:0a:2e:27:ef:a7:0a:29:69:7c:1c:40:
25:d0:f4:de:e2:c8:e9:00:00:b8:ea:c6:5c:15:e3:87:73:f0:
98:61:3c:b4:fb:f5:50:3a:fa:97:cd:a5:2d:d9:aa:9c:35:19:
0c:20:a8:4b:2a:28:87:0a:ec:1d:09:dd:88:ee:1f:ed:54:f7:
53:2c:a6:e1:1a:a5:b5:43:36:a6:3a:8c:88:44:f9:07:d2:08:
f9:35:a4:a8:f7:6e:77:4f:ce:97:62:dc:f1:98:b9:ad:88:2e:
31:e5:65:b0:c3:cd:e2:67:8c:cb:d0:0d:64:0f:3a:93:c6:6d:
5b:26:de:f2:6d:f4:8f:86:7b:16:f3:41:12:45:ec:db:9b:3d:
61:08:34:56:45:d9:94:8e:de:fe:12:e8:53:79:af:a3:ae:41:
20:cd:b0:8a:69:17:cc:c4:f2:c8:24:2f:2f:46:ef:c2:73:4c:
7b:2a:89:38:ca:65:14:43:7f:d9:06:2c:83:79:d6:06:bd:bc:
93:0d:75:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:51:20 2026 by rpki-client