
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
File: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft (raw, json)
Hash identifier: VWE6IBWxsqP2vROOj7LbYvIdsNaQs8UkrkN7QJJMyCE=
Subject key identifier: 39:88:0A:99:99:11:A7:9D:F0:64:A6:1A:55:A7:AD:08:B1:BF:DC:60
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Certificate issuer: /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial: 0221
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
Manifest number: 01EE
Signing time: Tue 25 Aug 2026 03:45:53 +0000
Manifest this update: Tue 25 Aug 2026 03:45:52 +0000
Manifest next update: Tue 01 Sep 2026 03:45:52 +0000
Files and hashes: 1: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl (hash: UVEebxJcMR7aIRh3ib8NPk/lhMfjZqCOykVbYpb5xYA=)
2: BDECB94CEC4F11EEB0B9B467C4F9AE02.roa (hash: fSlbtUc39UCW3k1Yy6pAqJg048Gxa2v6PcevURxg5Zs=)
3: BC26B7548CAB11F0BDAA8B67C4F9AE02.roa (hash: 1xbmeKrtdkfMeaYJXV3nxlxzWBfNoeXUz9/FaAvLRY4=)
4: D88897C8959711F1B1C0CE483911F970.roa (hash: XFrjknF1iD1/Ov/uYsOVrKtMu6G+33Z/B4hGjB7e8h0=)
5: D43F20C6C70F11F0BEE61E6CC4F9AE02.roa (hash: lU5HELzK1HgvUgy9a8UOHW1aya85BnCwdaSrvas6AAk=)
6: E7F77E5E42E711EF8B9EF861C4F9AE02.roa (hash: Rk3j/x7/aK9tyzGNZkRW4uYz1dTdbytFeBnr/OmzBX8=)
7: 7BDC977E0AF011EF87265E12C4F9AE02.roa (hash: L+Pr2GihRWoedBardrydLcushDGXI9FYHRtqemwZ37o=)
8: DD0545F6324A11EFA615F80FC4F9AE02.roa (hash: Uj11T+QW0pwuoYmi/Tug3FzEFRy1nbJISrOyCvJDnIQ=)
9: 5B4D02987E5B11F09260CE56C4F9AE02.roa (hash: YSqNnOxJ+Xkes9UNemwulrLNoP9a1fzLC+DIw2bAtgY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 03:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545 (0x221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Validity
Not Before: Aug 25 03:45:52 2026 GMT
Not After : Sep 1 03:45:52 2026 GMT
Subject: CN=6a8d0ff0-97f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:f6:8d:15:8a:1d:3a:cb:cc:8e:a7:2f:fc:
c3:86:d6:d5:ee:1c:e8:b4:5b:c3:a8:cb:51:14:8f:
86:6b:ac:5e:7f:8b:1f:68:b9:7b:a9:b9:cb:c3:46:
a3:86:8a:35:c3:ad:17:c8:42:d9:fc:ef:bf:83:dc:
4a:e7:a4:d8:53:c7:e4:e8:dd:32:f1:42:06:14:13:
cd:12:8e:9d:f8:b7:86:c3:06:ef:6f:ea:89:53:14:
a6:bf:02:31:eb:c2:b7:cd:09:9d:da:ed:a5:33:5a:
4f:ae:3e:64:91:f7:04:db:53:09:69:d3:9b:bb:61:
1d:38:1d:b7:79:d4:90:a0:14:ae:67:7d:a2:c5:7e:
b5:6e:d3:50:24:ae:30:c6:13:65:80:8d:89:12:d1:
0b:50:f8:0e:5b:66:5e:fb:17:83:35:d0:df:07:b0:
db:f1:79:12:3a:1d:ee:8c:52:04:c0:dc:08:49:79:
20:9e:27:99:fc:e8:9d:ea:f4:cb:0a:42:73:05:14:
29:07:c7:d9:15:45:7e:c6:78:8f:b9:e3:63:0e:15:
df:1c:6b:10:1f:77:84:8d:78:61:af:45:c7:88:ef:
87:7d:c9:57:b1:d1:ec:67:f0:e8:b5:fd:fd:29:51:
a3:5e:ec:6c:81:1b:da:13:91:fc:99:b9:1e:f5:c3:
17:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:88:0A:99:99:11:A7:9D:F0:64:A6:1A:55:A7:AD:08:B1:BF:DC:60
X509v3 Authority Key Identifier:
keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:89:dd:a1:1e:b5:3e:40:33:ae:4c:c2:77:b3:70:4f:06:69:
b9:6e:e8:d2:93:95:10:76:54:57:0a:8c:37:a8:94:dd:55:9a:
6d:2b:98:58:ca:44:a0:41:9e:4e:83:96:ec:f0:97:af:98:9c:
87:e2:48:9b:53:56:16:d0:5c:dd:d9:c5:ea:c8:35:39:24:25:
25:62:0b:f1:6a:29:42:19:8d:41:4d:5f:5d:68:7f:c7:64:8c:
b6:97:ef:5f:a9:a1:f6:db:63:e2:0a:b4:20:38:0c:80:7b:2c:
fa:f2:b0:ac:ef:00:b5:f5:f0:7b:24:9d:5d:0d:27:70:f6:3a:
d7:56:61:98:3f:8a:6d:9a:5c:f3:4a:ef:cc:f7:9f:ee:35:11:
ab:2a:e3:5a:62:bf:73:a3:94:30:79:cd:c0:64:4f:32:01:c4:
48:63:da:24:fa:e6:de:8a:33:28:f0:11:0f:9f:72:18:23:ef:
9b:73:35:6f:ff:40:d6:56:da:a3:60:c6:90:ce:87:fd:9b:48:
af:5e:04:b6:6a:53:19:55:7b:9d:e6:6d:b6:f0:6e:73:eb:e0:
b4:4f:f5:21:0d:b3:65:9b:34:d1:99:e0:ce:da:3e:b0:fc:c8:
df:e0:d9:a0:55:a0:27:9d:51:98:9b:1d:57:75:8e:bb:c3:fd:
50:24:0d:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUE3NzcxMTAvBgNVBAUTKDY0N0QwOTI3REIzQjE3OEUyRjY1NEEzMjY4NTU3RkU1
QjVENjcyOUMwHhcNMjYwODI1MDM0NTUyWhcNMjYwOTAxMDM0NTUyWjAYMRYwFAYD
VQQDEw02YThkMGZmMC05N2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvP/2jRWKHTrLzI6nL/zDhtbV7hzotFvDqMtRFI+Ga6xef4sfaLl7qbnLw0aj
hoo1w60XyELZ/O+/g9xK56TYU8fk6N0y8UIGFBPNEo6d+LeGwwbvb+qJUxSmvwIx
68K3zQmd2u2lM1pPrj5kkfcE21MJadObu2EdOB23edSQoBSuZ32ixX61btNQJK4w
xhNlgI2JEtELUPgOW2Ze+xeDNdDfB7Db8XkSOh3ujFIEwNwISXkgnieZ/Oid6vTL
CkJzBRQpB8fZFUV+xniPueNjDhXfHGsQH3eEjXhhr0XHiO+HfclXsdHsZ/Dotf39
KVGjXuxsgRvaE5H8mbke9cMXbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDmICpmZ
Eaed8GSmGlWnrQixv9xgMB8GA1UdIwQYMBaAFGR9CSfbOxeOL2VKMmhVf+W11nKc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTc3Ny8wQkE1NzJCMEVD
NEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0NHZaVW95YUZWXzViWFdj
cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pIMEpKOXM3RjQ0dlpVb3lhRlZfNWJYV2Nwdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QTc3Ny8wQkE1NzJCMEVDNEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0
NHZaVW95YUZWXzViWFdjcHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR4ndoR61PkAzrkzCd7NwTwZpuW7o0pOVEHZUVwqMN6iU3VWabSuYWMpEoEGe
ToOW7PCXr5ich+JIm1NWFtBc3dnF6sg1OSQlJWIL8WopQhmNQU1fXWh/x2SMtpfv
X6mh9ttj4gq0IDgMgHss+vKwrO8AtfXweySdXQ0ncPY611ZhmD+KbZpc80rvzPef
7jURqyrjWmK/c6OUMHnNwGRPMgHESGPaJPrm3oozKPARD59yGCPvm3M1b/9A1lba
o2DGkM6H/ZtIr14EtmpTGVV7neZttvBuc+vgtE/1IQ2zZZs00Zngzto+sPzI3+DZ
oFWgJ51RmJsdV3WOu8P9UCQNYw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 03:03:12 2026 by rpki-client