
$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
File: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft (raw, json)
Hash identifier: IcCFagMpgb61lx4c3fXtChOZEBHQEVMmHqRL8UMdjXI=
Subject key identifier: 87:68:22:0E:35:61:74:18:00:6E:FA:DA:F1:B4:A2:B7:3D:12:02:3B
Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
Certificate issuer: /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Certificate serial: 0250
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
Manifest number: 0237
Signing time: Mon 11 May 2026 02:43:16 +0000
Manifest this update: Mon 11 May 2026 02:43:16 +0000
Manifest next update: Mon 18 May 2026 02:43:16 +0000
Files and hashes: 1: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl (hash: 33yw3PZB204hD7G575elZ2HexKe1nJYhZiCrCmvie1c=)
2: 309A0AEC073D11EE94A9410CC4F9AE02.roa (hash: /BmEORI4Sm9n04Z4+KTIuZ6zRVPGTZM+9NIuoZsaL/0=)
3: 9EF724BE2A4911EE81BCF50FC4F9AE02.roa (hash: scwVpzCeBkgVHdEK5Uge9iAKaQk6Xc85PZeD5yXXw14=)
4: C2C37E56153A11EF9E378A14C4F9AE02.roa (hash: DCEbqUc1yheRBTgF9eKK2YLM6+N73DDKwX1+nfluYt8=)
5: 282CA82C023F11EEB716134FC4F9AE02.roa (hash: wnHWbEnfjZ63RYB0ismM9UJFoOh9ccy7t7IsH2bosjo=)
6: A90DA1C0C71611EE9465BF5EC4F9AE02.roa (hash: xOcV+Ws+Sc04FIxL3ePl5cuu7X8jyPVzdlvtQncOg3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 592 (0x250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911710E, serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Validity
Not Before: May 11 02:43:16 2026 GMT
Not After : May 18 02:43:16 2026 GMT
Subject: CN=6a014244-0988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:83:e8:2c:f0:42:d7:af:91:a6:58:41:85:0a:
ff:cf:29:65:0f:5b:bf:9a:58:52:d1:07:cd:39:a9:
57:ac:a0:22:33:a2:f1:52:15:84:49:34:a8:24:ff:
ed:ab:78:d5:dc:6a:4d:7f:55:d5:79:b3:fd:94:68:
c6:bf:d0:20:c9:0a:e7:0d:c3:d4:68:96:1b:15:61:
b0:8d:f3:92:f7:34:25:eb:db:e8:ec:41:97:bc:8c:
f7:54:08:dc:35:6e:f7:4d:e0:50:e4:d2:d9:b9:d0:
5d:40:35:39:e0:5e:c8:7c:08:95:17:ee:37:a7:da:
a3:d4:cf:f6:a1:3f:37:13:ee:5d:f1:c5:17:db:45:
77:9d:21:4d:67:9c:0c:fc:e9:60:03:4b:72:3f:be:
47:57:f7:a5:fa:ed:78:65:8c:92:6c:8b:2f:07:49:
e7:7f:a4:05:73:62:1e:15:74:97:bd:0d:68:01:01:
06:dc:ee:13:5c:83:53:20:b9:37:43:86:77:02:80:
a7:5d:d9:64:33:78:cb:89:a5:40:ee:c8:f3:2b:21:
80:b8:de:ee:f3:ce:ce:27:f6:fd:2b:1f:76:5e:0b:
16:9c:9f:27:6c:b4:0f:49:61:8b:9f:27:a2:00:09:
f5:38:3c:bd:d0:49:f8:63:f5:f4:b5:48:68:37:3d:
32:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:68:22:0E:35:61:74:18:00:6E:FA:DA:F1:B4:A2:B7:3D:12:02:3B
X509v3 Authority Key Identifier:
keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:92:40:0a:65:cf:f9:98:e1:a2:91:13:b0:6d:32:69:40:a5:
92:b8:20:ba:e2:23:30:57:27:b2:ee:6a:c7:82:be:8a:24:f3:
41:17:3c:a7:b2:d6:4f:18:9d:21:6e:78:9a:72:26:38:db:da:
24:84:89:d4:62:5d:71:1e:f2:71:af:68:a9:db:25:25:86:83:
cc:02:4a:bb:fd:4a:2b:69:62:64:6f:36:f8:a5:f3:99:cb:ee:
0d:ec:82:e4:ba:ca:9d:ee:e7:95:9f:a0:19:87:88:d3:4f:83:
99:0f:30:3d:f9:52:09:8e:03:7d:b3:4b:5a:9f:79:ea:75:aa:
0e:f6:3d:9c:5f:63:a3:f7:fd:97:b0:97:c7:0b:38:f7:7b:b0:
55:35:ca:0b:51:b1:db:2e:dc:eb:59:36:26:0c:6f:c6:f6:eb:
81:8e:70:e1:08:32:38:3d:95:96:00:ff:6f:14:c1:2b:b7:60:
35:a4:eb:65:51:65:ec:89:1f:e4:eb:08:53:f6:2b:60:b7:39:
f0:b1:08:c2:84:84:0d:ad:0a:1e:95:3c:0d:0c:b8:06:15:4c:
4d:a1:7a:4b:6d:da:9d:06:6e:61:f5:5f:81:ce:21:93:33:a6:
5f:67:32:96:ef:26:ea:88:9e:3a:6b:e4:03:b1:24:10:86:8e:
29:2c:99:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:23:18 2026 by rpki-client