
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft
File: zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft (raw, json)
Hash identifier: n3vL8ZOzJSDdEKOsZr3Wnwo9HyTMJ5Ir1c/ZSkV33HQ=
Subject key identifier: 7E:C2:3E:75:96:61:25:3D:B9:25:C5:B6:63:41:62:AC:80:2A:34:29
Authority key identifier: CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94
Certificate issuer: /CN=A911E93B/serialNumber=CDF6E5654435B3C84DFA10B9BC8710E9EBB0D594
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft
Manifest number: 87
Signing time: Thu 23 Jul 2026 09:29:55 +0000
Manifest this update: Thu 23 Jul 2026 09:29:54 +0000
Manifest next update: Thu 30 Jul 2026 09:29:54 +0000
Files and hashes: 1: zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl (hash: ThNst/xFinusFeQarqRFRdoP+eQPqiapCluJ4KGm4jE=)
2: DEED8FA0BF0111F0A0DE3D62C4F9AE02.roa (hash: jnfPIPnbj8UH8ywNxN8KKwG7Kyd3mOWwDkCemwVHNFc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl
rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E93B, serialNumber=CDF6E5654435B3C84DFA10B9BC8710E9EBB0D594
Validity
Not Before: Jul 23 09:29:54 2026 GMT
Not After : Jul 30 09:29:54 2026 GMT
Subject: CN=6a61df13-46c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:89:9f:01:6a:be:24:d4:d0:d6:a0:81:ca:
c6:1c:d3:c0:71:03:00:2a:58:6e:43:97:57:6f:a7:
48:1c:e4:af:f1:20:d4:50:8c:b3:5b:4d:0f:11:2e:
c0:06:09:da:a7:cf:b8:89:88:63:98:3f:ee:e3:b4:
52:5f:e8:30:ea:e9:1e:4e:06:34:72:a4:61:31:64:
79:01:26:46:29:7c:e7:b8:38:c3:b3:98:dc:2e:7c:
0f:2f:d6:8a:26:b5:03:f9:3e:b7:0a:a6:18:7d:d9:
d1:51:22:7e:50:7e:a0:ee:a7:a8:ea:d8:2c:a2:03:
37:fd:05:9b:61:dd:2a:bc:20:c2:f8:62:23:40:c6:
dc:66:c3:d4:ac:b4:43:9a:ca:8d:78:e2:e8:50:49:
97:3c:2d:58:df:b2:d2:a9:14:f2:0d:5b:48:a1:d5:
74:6e:50:54:46:4c:63:cc:0f:b8:af:b5:b2:ab:48:
c0:b9:1b:1b:a9:01:24:4e:cd:d5:0d:35:8a:eb:ea:
88:7c:92:a7:5f:77:ad:40:70:6b:b9:08:37:f0:63:
37:a7:6a:ab:a3:8f:86:75:b6:96:f2:58:e8:0d:92:
4a:27:c3:af:a9:f2:50:13:e5:48:ee:9b:f7:dc:2a:
77:2c:0d:b0:07:a8:d1:d7:96:cc:21:27:7d:b8:21:
95:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C2:3E:75:96:61:25:3D:B9:25:C5:B6:63:41:62:AC:80:2A:34:29
X509v3 Authority Key Identifier:
keyid:CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7d:1c:8f:00:15:31:b5:81:f2:7b:9f:3f:9b:33:ff:67:a8:
dd:5c:2e:a4:22:32:cf:9e:2e:b3:49:cf:1e:68:c3:63:99:d9:
ad:59:35:b4:c0:03:df:02:9a:1e:1c:18:47:73:fd:06:07:d4:
33:b3:5f:f1:ee:08:b7:2f:79:d0:e6:73:f6:40:a9:0b:d4:97:
5d:29:93:32:58:e4:fc:7e:a0:7c:45:c9:03:32:12:2f:4f:42:
cd:63:d4:3f:4a:81:94:75:6b:0f:82:5b:97:d4:53:b5:1b:90:
ce:0a:f5:f4:98:1f:5a:f1:ef:df:8f:91:2f:02:bf:3a:19:76:
37:12:ee:37:3a:4d:1f:c6:f7:5e:b2:e1:09:5b:fb:09:eb:07:
ec:f6:34:3d:54:8c:e4:b5:a4:92:f7:bb:86:c3:24:ab:c8:d8:
42:3d:d3:4c:0c:41:33:b4:b7:19:38:ef:34:ff:43:78:ac:b3:
9b:bd:f9:7c:bb:ef:19:35:d4:26:40:ae:a9:35:de:2a:34:09:
43:3c:f2:36:7d:56:5e:ae:28:0d:ee:c8:2f:bd:6d:7a:fa:06:
6b:d4:16:bf:de:a0:bc:17:fe:ff:9d:6e:f8:b0:8e:a3:19:44:
98:38:69:73:30:19:4d:5f:84:2d:f0:2f:e2:f3:7c:7c:e6:e3:
61:fe:8c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:39:47 2026 by rpki-client