
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft
File: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft (raw, json)
Hash identifier: OL4bbEU3B9d2iccaXuAe2k0Ss17bnDkHsVZ664h0Zjc=
Subject key identifier: AF:28:4D:76:CF:1C:69:7B:0C:F5:34:91:40:EA:59:78:6E:EA:63:1B
Authority key identifier: CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88
Certificate issuer: /CN=A911E24A/serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88
Certificate serial: 09D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft
Manifest number: 09C9
Signing time: Tue 12 May 2026 19:56:53 +0000
Manifest this update: Tue 12 May 2026 19:56:53 +0000
Manifest next update: Tue 19 May 2026 19:56:53 +0000
Files and hashes: 1: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl (hash: iQaXSojbjMa8U3pOSKdbGX0hX1kqb1uGSKOfhyiAZSo=)
2: 7B68D8F2A3E811EAB397F675C4F9AE02.roa (hash: b1FfdoGhx5a9SVnzfI7f+c3x30UgLcfNHueh+5jSvgI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl
rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:56:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2513 (0x9d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E24A, serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88
Validity
Not Before: May 12 19:56:53 2026 GMT
Not After : May 19 19:56:53 2026 GMT
Subject: CN=6a038605-f562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5b:33:7d:44:f8:73:96:f6:40:03:4c:a1:a9:
74:b1:ef:62:94:ae:a9:3b:1b:f6:b2:46:f9:29:05:
b4:99:d2:e8:eb:d3:50:81:bd:97:55:93:46:f3:ea:
c9:37:f0:39:36:e7:ae:cc:78:a0:98:98:ee:76:08:
81:ae:72:aa:17:d8:1a:0c:8b:c4:a9:49:33:47:8e:
97:6b:98:97:c3:77:8f:61:32:fc:2e:1a:f5:fd:af:
2c:93:17:a1:76:36:9b:63:91:81:10:f6:6b:f8:0e:
df:5f:11:81:7a:ab:b4:8e:e2:8d:db:1d:d7:81:10:
7d:3a:ce:92:fe:1a:fe:a0:35:80:5f:09:5c:05:a3:
80:4b:14:68:a5:06:1a:de:4a:ed:f2:cc:0d:d8:0e:
90:c3:43:b1:6e:a0:3e:d0:1f:26:39:0c:27:0e:ce:
3c:eb:f2:ce:e2:ec:d4:72:54:71:92:db:80:6a:c3:
a3:0b:dd:9d:4f:d3:c8:04:6c:98:14:6c:dd:3a:9a:
45:81:40:e8:70:42:40:5c:0c:b8:f9:b2:a3:21:ca:
6c:8f:6d:81:9f:b7:96:a6:f3:79:62:df:29:66:4f:
99:d1:0f:ff:d3:02:e9:ef:57:b7:f3:85:5f:be:d9:
be:ef:ae:0a:29:22:c8:66:75:a2:aa:22:0a:c9:7e:
ef:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:28:4D:76:CF:1C:69:7B:0C:F5:34:91:40:EA:59:78:6E:EA:63:1B
X509v3 Authority Key Identifier:
keyid:CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:3d:a8:15:6e:da:01:36:0c:cc:89:fb:82:13:e0:37:14:42:
f0:57:da:a3:29:3b:8f:78:7c:8d:15:aa:6f:80:99:d6:8e:e8:
2f:bd:94:20:67:ce:09:7a:59:ab:69:1f:68:02:04:09:f0:38:
6b:b6:2a:c5:30:32:99:02:2c:85:d2:43:be:ed:da:b2:c1:57:
b7:a9:2d:0a:98:76:b7:a4:77:35:27:60:dd:4f:6f:53:51:9e:
b7:1b:dc:3a:57:ed:b5:03:db:ae:d9:5d:51:80:97:d9:22:54:
29:96:4b:c8:9e:ec:a8:27:6d:dc:ee:bb:b1:06:02:37:01:ec:
d1:8f:2b:e4:bf:56:ae:6f:12:ab:d1:08:6c:67:1a:c3:73:88:
7b:c1:93:97:f8:7d:36:d0:8a:b8:a3:8d:e2:d6:8d:81:8c:20:
f7:9f:0e:5d:6f:ac:e5:01:9a:10:4d:06:49:bd:14:8b:44:50:
6d:30:62:71:05:01:4f:bf:5a:bc:c7:ed:26:48:e8:40:7d:f7:
9e:58:f3:64:dc:d6:91:ab:64:f5:af:17:25:52:76:84:96:cd:
e1:85:4a:27:ca:bf:7a:27:c3:5f:78:9b:69:d7:51:84:61:90:
23:02:1f:92:81:62:7e:d9:af:c0:1e:1c:6e:90:c7:2a:25:1e:
b2:b2:ae:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:46:08 2026 by rpki-client