
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
File: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft (raw, json)
Hash identifier: X71bpcMeFxVrXesR5hfowPtQOi7yTOXMjnJ149QsPKI=
Subject key identifier: 52:38:5B:A0:88:2B:C4:26:41:FF:6A:07:E7:79:49:D8:AE:0A:E5:44
Authority key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86
Certificate issuer: /CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986
Certificate serial: 026B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
Manifest number: 0244
Signing time: Wed 13 May 2026 02:41:34 +0000
Manifest this update: Wed 13 May 2026 02:41:34 +0000
Manifest next update: Wed 20 May 2026 02:41:34 +0000
Files and hashes: 1: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl (hash: tYufvEUwBCDkfWVQ2KYOlWMLcPB4RXgOoDMHC/hFhg8=)
2: 02D36C86F50211ED8A235C4EC4F9AE02.roa (hash: B+OeWoqQTwfm38iUF7sb5sL9h1ZJ6wXXxhu4Wl/m0EM=)
3: 118AB342249511EFBF275B73C4F9AE02.roa (hash: NqwTwG+Agr5XJi4bwI9im7xWQxdq8IuBPwpMhYcCze0=)
4: 6ABFFBC6F53811EDBAE7E351C4F9AE02.roa (hash: f58bvx3dukaGpN5ndoezdAfl/VXBXL0ui+Vo9iVwwM8=)
5: 6CE6E15ECEF311EEBCE7894DC4F9AE02.roa (hash: UaAm3ns+UzSlENWFg3alL8LgQQM37DkVyV1vadmtNwg=)
6: 63DC5AA6C67611EEB1126C70C4F9AE02.roa (hash: tzLUCAxcW3rpxPK1kY7IUqcMJWiwQOOzumNiMYyBy+Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl
rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:41:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 619 (0x26b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121836, serialNumber=66B214D11C7F961A95C4256703428E93CBA72986
Validity
Not Before: May 13 02:41:34 2026 GMT
Not After : May 20 02:41:34 2026 GMT
Subject: CN=6a03e4de-6387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:93:4c:87:b5:60:9f:01:16:c8:f6:1f:a1:
97:9a:b6:02:6b:6f:8c:ee:1a:26:f8:19:05:3d:6d:
db:39:46:89:97:d1:7d:18:98:ed:04:22:02:09:9c:
06:f6:3e:8e:46:a2:0c:4c:fa:5a:52:f0:be:fd:52:
e3:46:39:70:cc:3f:59:8a:0f:80:85:06:64:da:11:
94:15:6b:4d:8f:12:c7:a1:28:87:dd:5c:cc:4e:58:
0b:df:7c:8b:5d:28:cc:ee:f2:53:51:32:c8:d0:53:
88:c7:70:12:17:8f:11:6a:f4:60:c9:0b:cf:40:7c:
78:2d:0e:58:f2:71:a4:e9:29:e0:02:84:eb:2e:9b:
34:fb:df:25:d5:e8:ef:95:77:6c:02:31:78:dd:1b:
50:13:e7:33:1c:66:f1:d8:45:8e:e7:25:ff:a0:92:
5a:4c:af:65:37:81:5c:d2:20:0d:fd:03:66:c1:5b:
e1:fd:a0:06:71:8e:74:c9:43:a7:ed:cc:01:a7:e0:
a3:0e:d9:4d:b2:af:05:c6:84:de:53:c0:a4:5e:b6:
87:4f:36:95:6e:4f:c5:f9:0d:20:80:a0:07:19:38:
b7:62:42:46:13:9b:d7:1f:c5:c2:9d:79:80:1d:8d:
cc:9a:15:77:57:39:b9:4a:d5:d4:a1:7d:59:fc:0f:
c3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:38:5B:A0:88:2B:C4:26:41:FF:6A:07:E7:79:49:D8:AE:0A:E5:44
X509v3 Authority Key Identifier:
keyid:66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:67:19:f1:0b:a5:e0:44:39:7a:96:7e:7b:d1:a2:38:b2:22:
ed:1b:15:98:81:1b:9d:cd:18:a1:2c:dc:78:40:ca:4b:a5:e2:
a3:a6:7a:65:d2:ee:76:1c:71:5d:70:39:9d:06:43:c6:7a:66:
d6:d2:9b:4c:28:32:d3:ca:12:f1:4a:60:17:6c:3c:c5:7a:95:
58:b7:27:57:56:ae:6f:27:10:71:b6:47:17:c7:be:0f:c5:aa:
f2:ad:e4:89:d6:51:64:fc:c4:0a:7c:14:b4:fb:c5:8d:51:92:
5a:aa:fd:1d:aa:c6:59:87:fe:82:a6:7d:7b:9a:9b:ee:10:2e:
b9:13:8e:2b:e5:98:4e:8d:fb:6e:53:99:0a:3b:63:c8:be:76:
37:c4:e5:21:c8:53:63:5b:23:97:a4:aa:e4:84:15:00:30:d5:
82:3b:6a:81:78:a8:9b:65:0e:b9:fd:fc:52:67:b3:42:a0:86:
4a:31:06:f2:78:d7:b5:d6:a1:51:35:90:8f:5a:4d:40:3f:6b:
3b:3a:34:3f:20:86:f3:f7:95:f7:ef:90:ed:d4:9e:a7:22:27:
fb:83:b7:b5:33:ea:f5:a4:9a:67:92:1a:3d:9e:e0:ff:54:57:
7c:f2:6f:91:66:df:c7:2d:ca:39:1b:eb:b7:4c:56:15:45:00:
81:f1:7b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:20:35 2026 by rpki-client