
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft
File: ZfzR8nTT59WOTQyihVjTS2sVLWc.mft (raw, json)
Hash identifier: SmccZZjndnzUEPVtUlL2Q3ByOes5LVqqQrXS7iqcQoM=
Subject key identifier: 6D:E6:DD:03:15:24:B5:38:DE:BD:76:2D:8F:E8:7F:D5:16:12:4B:60
Authority key identifier: 65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67
Certificate issuer: /CN=A911F7D0/serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67
Certificate serial: 11D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft
Manifest number: 11CA
Signing time: Tue 12 May 2026 17:11:36 +0000
Manifest this update: Tue 12 May 2026 17:11:35 +0000
Manifest next update: Tue 19 May 2026 17:11:35 +0000
Files and hashes: 1: ZfzR8nTT59WOTQyihVjTS2sVLWc.crl (hash: Ez/K1E2GIjtfivTYofK67et/A+kaabYKdmZ57jvBxWY=)
2: 1BFF84B0131611E991379440C4F9AE02.roa (hash: pP9sfTlQFZwgEZOIynMioM1x60lYpa7dMZDxjqtV5Ts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl
rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:11:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4565 (0x11d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F7D0, serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67
Validity
Not Before: May 12 17:11:35 2026 GMT
Not After : May 19 17:11:35 2026 GMT
Subject: CN=6a035f47-87e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:3d:6e:49:d5:fc:ad:83:41:b3:1f:3f:05:
e1:3d:c3:7c:83:28:c1:1a:4e:82:82:b4:71:b1:2b:
76:21:a9:af:49:0a:55:9d:a1:81:14:16:99:d2:6f:
d4:4a:0b:b3:87:89:d9:f4:00:d8:9c:88:eb:61:c6:
3e:af:79:8a:4d:07:db:5d:b3:82:af:45:c5:5e:c2:
ca:46:f2:b3:23:13:78:24:bd:83:35:27:cb:51:3d:
3f:2b:d4:f3:62:56:e3:2b:74:3c:b1:c9:a0:6a:6a:
31:3b:f3:69:56:70:9c:9d:54:51:d2:6c:ac:40:16:
48:93:90:e3:54:b3:71:38:db:38:0a:30:8a:f8:de:
cd:79:17:04:c3:c2:c6:e5:f6:a2:32:ee:63:dd:04:
fd:bb:a6:23:7c:0f:c6:c6:da:36:95:f0:d9:d5:65:
98:99:f5:19:71:85:8d:86:87:18:9a:99:8e:42:13:
4e:43:1f:c6:fb:96:da:5b:3e:03:ec:db:ac:1d:8a:
63:d4:f9:e9:c4:9e:58:66:b9:f0:92:a7:21:99:86:
b9:9a:db:7d:30:ed:3e:90:3d:b3:bd:7d:f6:de:ed:
a4:3a:3f:bd:ff:0c:8c:90:ea:21:39:42:7b:b4:e6:
a6:34:de:56:12:25:51:9a:55:9f:86:c3:dd:c7:77:
d0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E6:DD:03:15:24:B5:38:DE:BD:76:2D:8F:E8:7F:D5:16:12:4B:60
X509v3 Authority Key Identifier:
keyid:65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:e7:1f:19:18:32:41:5e:be:07:ea:db:0a:27:cc:91:c8:5e:
aa:70:1c:bd:0c:5b:f6:e8:a6:e8:ca:51:a0:33:ca:e8:b1:1a:
16:59:de:60:5c:16:fc:07:83:69:cc:aa:7e:87:f7:ce:ea:0f:
90:04:f2:78:ed:6d:99:5b:e4:99:0a:3c:36:fb:b9:01:67:73:
91:b5:a0:20:a2:6b:7f:d8:8e:6b:7b:ae:39:37:b4:03:e8:21:
e3:2a:9e:ac:dc:a5:94:ed:ec:a1:9d:41:ee:63:4c:9e:a6:86:
53:41:6c:5b:94:00:33:7a:48:f7:64:59:80:70:29:2c:3e:8e:
08:2d:7e:2f:56:0c:04:c5:64:54:07:c1:2e:88:3a:f8:43:e3:
eb:c1:21:71:31:f1:dc:f8:23:30:bf:fc:04:d8:93:cd:5c:66:
e7:d2:9b:32:97:17:2c:2c:a1:d5:e0:4b:b5:3c:3f:d2:0e:c1:
98:32:b1:d3:44:b7:26:36:0b:ad:c1:fc:4d:d7:c0:17:cb:36:
5b:42:d4:11:ec:ae:06:66:5a:a4:bf:96:15:d4:12:56:38:6e:
e5:07:98:ae:76:12:81:94:74:a3:c5:d7:ab:80:a7:63:b9:5e:
e5:c4:60:01:13:84:b4:6e:63:44:21:77:6d:0e:e7:de:7f:a0:
19:a9:4d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:36:54 2026 by rpki-client