
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
File: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft (raw, json)
Hash identifier: 3TBoOsIIPEYTp613V6Co+L5ZIwhkjqGTZPRVwzXhwhM=
Subject key identifier: F8:59:60:05:3A:F9:56:5F:85:D2:BC:CC:02:4D:51:3B:D0:78:F4:C3
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Certificate issuer: /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial: 0208
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
Manifest number: 01D6
Signing time: Sat 11 Jul 2026 04:50:22 +0000
Manifest this update: Sat 11 Jul 2026 04:50:21 +0000
Manifest next update: Sat 18 Jul 2026 04:50:21 +0000
Files and hashes: 1: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl (hash: AOIQdFfsYvnLewJlORG5tYSKT+mnqOi21hPqV61MLvg=)
2: BDECB94CEC4F11EEB0B9B467C4F9AE02.roa (hash: fSlbtUc39UCW3k1Yy6pAqJg048Gxa2v6PcevURxg5Zs=)
3: DD0545F6324A11EFA615F80FC4F9AE02.roa (hash: Uj11T+QW0pwuoYmi/Tug3FzEFRy1nbJISrOyCvJDnIQ=)
4: E7F77E5E42E711EF8B9EF861C4F9AE02.roa (hash: Rk3j/x7/aK9tyzGNZkRW4uYz1dTdbytFeBnr/OmzBX8=)
5: 7BDC977E0AF011EF87265E12C4F9AE02.roa (hash: L+Pr2GihRWoedBardrydLcushDGXI9FYHRtqemwZ37o=)
6: BC26B7548CAB11F0BDAA8B67C4F9AE02.roa (hash: 1xbmeKrtdkfMeaYJXV3nxlxzWBfNoeXUz9/FaAvLRY4=)
7: D43F20C6C70F11F0BEE61E6CC4F9AE02.roa (hash: lU5HELzK1HgvUgy9a8UOHW1aya85BnCwdaSrvas6AAk=)
8: 5B4D02987E5B11F09260CE56C4F9AE02.roa (hash: YSqNnOxJ+Xkes9UNemwulrLNoP9a1fzLC+DIw2bAtgY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Jul 2026 04:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Validity
Not Before: Jul 11 04:50:21 2026 GMT
Not After : Jul 18 04:50:21 2026 GMT
Subject: CN=6a51cb8e-5ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dc:15:98:ed:f6:b7:f1:07:8c:40:46:57:b6:
77:f6:2c:2b:10:25:24:3c:91:e5:8a:8f:4d:d0:15:
65:7a:ea:5b:e9:a6:ef:2d:6f:19:ac:d7:8c:a9:b0:
47:57:af:84:12:45:e6:aa:27:28:9f:6f:c5:8d:f9:
2a:c7:5d:4f:f6:59:27:f3:07:0a:0f:51:bd:ed:12:
bf:59:6b:59:c5:17:13:de:e1:99:c6:94:99:18:35:
5d:1b:bd:e0:dd:6c:95:a5:43:46:45:72:f9:77:ae:
9d:f9:27:d3:1e:67:da:ab:b9:c3:64:f0:14:76:a0:
9a:9d:a0:8f:9b:12:b9:32:e5:20:2f:1e:b6:5d:22:
f2:fa:7f:1a:2f:5f:1f:50:d1:de:cb:c6:be:a8:c5:
58:6b:8e:5d:45:06:58:a8:49:f8:d4:02:3d:7e:98:
c7:c6:93:82:ae:61:9c:34:64:26:5b:51:9d:ca:14:
33:cd:39:30:a8:bf:2d:df:95:e4:e6:68:0f:d5:fa:
54:84:6b:66:9a:c2:2a:11:41:59:39:d4:09:91:21:
85:02:65:91:53:30:2d:dd:01:1a:5c:e3:cb:47:51:
fc:da:e9:19:fd:a3:1b:9a:c1:cc:fe:d9:97:b0:4b:
2e:fa:a6:92:50:3b:d4:87:8d:8c:b6:de:1f:5e:af:
16:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:59:60:05:3A:F9:56:5F:85:D2:BC:CC:02:4D:51:3B:D0:78:F4:C3
X509v3 Authority Key Identifier:
keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:c5:c8:7e:f8:86:7c:c8:ff:88:a8:4c:99:e3:5a:5d:e8:1b:
22:ba:a3:b1:88:a5:86:a5:31:25:d3:fc:9f:a2:65:d9:b9:17:
a2:ba:06:6b:08:2c:75:50:d0:e5:c6:b5:41:37:d1:2b:7d:6b:
ff:1c:72:cc:43:87:76:31:f1:cc:bd:22:31:ab:e8:49:13:3c:
d3:9a:de:e6:5e:6a:46:82:4d:44:d1:82:d3:66:3e:44:fe:4d:
f9:f5:19:24:34:64:21:73:bb:94:b9:5d:5e:c3:2b:7b:9b:24:
1a:eb:32:6d:3a:fb:1f:10:e5:0e:c6:9d:e6:2c:d7:cd:38:29:
b4:31:c3:66:84:ec:8d:a6:63:78:22:13:e6:0a:f6:28:d5:00:
25:5a:ff:10:23:20:3b:2c:eb:a2:80:d6:cf:55:d3:96:fd:8c:
5e:a6:09:60:1c:e2:38:0c:a4:e4:63:53:49:5d:32:0b:d5:d0:
73:8c:51:57:15:12:75:4d:20:af:36:82:a2:3a:6a:ef:0b:a8:
d6:81:c3:a1:e4:62:fe:58:3b:3f:8b:95:74:0e:27:63:c3:64:
dc:2f:77:e1:a8:95:d1:50:95:d9:d9:df:30:c9:3e:6b:c6:37:
77:6e:6e:96:5d:0c:24:58:af:1e:01:47:37:cf:3a:69:1a:10:
c2:2f:88:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 10:13:53 2026 by rpki-client