
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
File: Z_VMOcER599-cHbFxxWyizXoWfk.mft (raw, json)
Hash identifier: VCU40GsTsL9gYQJ7LUQJCaYn4ERcEVSSQ/5nYtBoyg8=
Subject key identifier: 52:9D:6C:E9:05:02:99:41:67:18:37:77:E5:F6:EE:2D:85:32:CF:D7
Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Certificate serial: 14D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
Manifest number: 1486
Signing time: Thu 08 Oct 2026 16:56:35 +0000
Manifest this update: Thu 08 Oct 2026 16:56:34 +0000
Manifest next update: Thu 15 Oct 2026 16:56:34 +0000
Files and hashes: 1: Z_VMOcER599-cHbFxxWyizXoWfk.crl (hash: w+m7WaIKhrg75YbYv8AqSnmU8pZdKofF2Zyj169YBSs=)
2: 98FB9AA812EB11F1974F37D30E3D8C67.roa (hash: +43EWcQPQlSm8/TwDF0BrjdnQ7PM32bqPDOdiMbEwwI=)
3: F41500DC694911F1A16B262F6E47A888.roa (hash: mYLHSdvlGwRDPAVGzq+8ergSoNzQOTGylMWMtNiRlVU=)
4: 99A1A6E612EB11F1974F37D30E3D8C67.roa (hash: 4WcbGVwImz8seR5eeb8tW47K/vTUw01C4QxrVOSwZCY=)
5: F4AD3064694911F1A16B262F6E47A888.roa (hash: R7CND86/KXzbzIBtAtGvKEvnXGb+FbDgfkcEDqCnjfE=)
6: C412618E8F5211F1B6983DE74611F970.roa (hash: udVxj7Kv9QzqON/2o72zWPCyyC8DoSrlCIA9/M2w4Xw=)
7: E48C805A9A7D11EF99ECF636C4F9AE02.roa (hash: 7XZE+IKZBRrKqrGr1TDOGvqrZfzsrAMaTV6zeoCdboM=)
8: C52139068F5211F1B6983DE74611F970.roa (hash: qT74l92aOGYUjibF7+g12VL2jQfSJigV+bofZ+YyvR0=)
9: C19EC984774811EFB2DF8983C4F9AE02.roa (hash: BQTtAnSnfeU6j7GQd538h0tAjgxRDhIC0Sugcv6CxzM=)
10: 24FAF688782911F0AFFBC961C4F9AE02.roa (hash: yciUDDD/LAwvIfzlyMKdXRVsw2EraED3Doyb4sHdJn4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 16:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5335 (0x14d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Validity
Not Before: Oct 8 16:56:34 2026 GMT
Not After : Oct 15 16:56:34 2026 GMT
Subject: CN=6ac7cb43-c3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c9:ae:a3:79:fd:5f:dd:a2:b6:a4:bc:f4:74:
c7:44:a5:b1:34:e8:df:c1:c4:d3:67:72:39:3a:30:
3b:95:1e:9f:c1:90:20:7b:b4:b2:5f:e7:ba:e6:a6:
db:0d:f7:0e:a3:d6:3a:07:6a:3b:56:fc:82:26:6a:
2e:ce:85:36:36:c8:97:07:d2:76:f1:d4:d5:1e:53:
b6:ae:f6:4c:80:e1:d0:85:1d:c3:97:d0:7d:f9:99:
d1:e5:6b:7b:6d:b6:70:26:27:f6:d7:7b:58:51:d4:
61:f9:3c:a7:c2:23:2b:98:f2:2c:7f:26:44:90:66:
56:ba:ef:e3:e5:5b:b0:6d:7e:81:bd:7b:a7:b1:82:
00:1f:db:45:3b:b9:3d:f4:4e:a2:54:36:86:96:87:
de:71:76:37:d1:16:27:24:09:4b:b4:13:9a:f1:35:
f0:c1:a5:73:af:89:44:d6:2c:35:a4:e1:90:d5:90:
64:ca:e9:58:48:0c:c2:43:91:7c:fd:f3:ae:10:1d:
a0:77:4a:c4:fb:12:1e:d5:02:1e:cc:2a:c9:58:bb:
12:ef:1a:2a:d9:2b:c3:6e:33:21:65:cb:25:89:d9:
8e:d7:4b:7c:f8:db:8e:80:b0:1f:51:ee:fd:77:31:
38:6a:84:79:23:35:01:4c:27:17:a3:9b:b6:bf:14:
a8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9D:6C:E9:05:02:99:41:67:18:37:77:E5:F6:EE:2D:85:32:CF:D7
X509v3 Authority Key Identifier:
keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:f6:13:63:e6:f7:50:26:bf:4e:06:17:25:41:89:5a:16:45:
19:b6:fa:ea:b9:8e:f7:55:80:1c:3a:6d:62:81:f2:01:3e:c5:
0c:31:12:cd:9d:7f:7e:54:e6:9d:30:9e:fd:91:46:43:2f:e7:
0e:ad:34:1b:41:a2:1a:05:00:0f:6d:b7:08:48:56:ab:2f:05:
00:36:fb:6f:4c:5d:79:a8:0f:b2:c2:08:cb:c6:ab:16:7d:b4:
d3:5a:99:f5:70:ff:a1:2d:46:15:3a:13:c2:ac:14:a5:27:8b:
2f:3f:9b:69:68:34:f5:58:08:b1:bc:a4:f3:57:95:3f:9a:f6:
f5:ef:a9:69:a5:4e:01:c8:a6:9e:0f:51:7d:5c:75:08:70:18:
7e:39:22:02:e7:3d:21:23:6f:70:be:56:0c:66:b2:fb:8d:8e:
92:f3:8b:6c:23:7c:87:d5:bb:e4:7e:ce:85:f7:e7:e1:e5:9a:
da:a7:37:c0:8a:2a:ec:3b:ef:a4:94:6a:1b:8d:9d:b9:07:29:
cc:dd:c2:7c:52:bd:0f:5f:66:7a:72:09:06:27:b2:29:d9:69:
e2:13:a3:e3:f7:2d:73:39:a1:2a:45:b3:33:d6:3a:70:80:94:
a7:12:49:e1:15:0e:73:f3:09:dd:37:f8:9d:88:b6:f2:25:f8:
76:f8:30:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:48:29 2026 by rpki-client