
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
File: ZvDB283xq8NO0RtGqQrjIBgCqVw.mft (raw, json)
Hash identifier: rEfzLPaJOs4K/IIAyQmW4zZw2ZUcwUIHJJrBZpQM9LI=
Subject key identifier: B6:E4:53:14:F3:4E:3B:47:44:F4:4A:99:24:46:5D:3E:2D:47:79:98
Authority key identifier: 66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C
Certificate issuer: /CN=A912AED4/serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C
Certificate serial: 194F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
Manifest number: 192F
Signing time: Tue 06 Oct 2026 16:28:01 +0000
Manifest this update: Tue 06 Oct 2026 16:28:00 +0000
Manifest next update: Tue 13 Oct 2026 16:28:00 +0000
Files and hashes: 1: ZvDB283xq8NO0RtGqQrjIBgCqVw.crl (hash: Y2FPtis80q37jHs31FB64JahGdzOOvJfzRPoWJyz28c=)
2: 2E1E405E712D11EDA8C64C3DC4F9AE02.roa (hash: aHRIc+5CEvfGNn9qNiJ3tH0QVf127hgvqFUAwDmOHGU=)
3: C3C44D22ECA311EEAD3CC112C4F9AE02.roa (hash: ZgyNp/+kaqwVStVmnjZ3bnZAYkWgSQvrw8uSupm7tj4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl
rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 16:27:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6479 (0x194f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AED4, serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C
Validity
Not Before: Oct 6 16:28:00 2026 GMT
Not After : Oct 13 16:28:00 2026 GMT
Subject: CN=6ac52191-2a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:04:b4:bb:f5:ea:77:24:8e:a7:f0:0d:07:60:
37:62:15:1e:a7:bb:a1:c0:70:04:2b:76:f6:07:ce:
2e:6f:09:1d:e2:88:80:c2:f9:9d:c5:a9:e4:92:73:
54:c9:ce:03:0a:f8:66:86:db:7a:20:86:8f:68:dc:
89:f1:a6:1c:30:a0:70:6d:a9:fa:94:66:07:6c:fa:
f9:b6:c2:2f:a4:ee:a1:15:ff:d6:fa:7a:46:35:73:
e1:ef:ef:54:ea:5c:d7:fd:b0:49:07:46:81:e6:89:
44:4e:fe:d0:b2:57:52:bd:cd:80:7a:b3:6f:9b:4e:
7f:a7:71:4e:13:3b:b4:2b:07:3a:20:c5:e7:8a:0e:
f9:99:0d:31:64:ef:42:b5:17:5d:b6:12:91:05:05:
14:66:64:c7:57:8a:c5:cd:88:6d:67:a9:a4:1f:fc:
74:47:86:ec:8c:c0:a1:82:00:7e:6b:cf:e4:0d:27:
e5:f8:37:66:6e:02:00:26:b5:a9:8c:4d:fc:78:73:
8a:8a:83:fd:c0:a5:c4:b2:d3:60:00:81:4c:d9:7b:
d8:b8:ce:97:b3:d6:23:66:50:7b:6c:e4:84:ef:1d:
d4:b3:6e:be:bd:67:d4:08:21:18:6a:e9:d2:99:0f:
d2:fe:e9:8a:3c:1f:90:89:a2:80:6d:17:06:07:e0:
35:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E4:53:14:F3:4E:3B:47:44:F4:4A:99:24:46:5D:3E:2D:47:79:98
X509v3 Authority Key Identifier:
keyid:66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:00:cd:fc:5a:43:87:e2:50:c3:79:bb:e4:e6:b8:96:8f:cc:
37:1e:36:a4:c3:66:01:e5:25:06:68:2d:fc:a9:44:af:a1:b2:
2e:80:70:9e:30:03:2b:a0:aa:19:d4:03:fd:a6:45:67:6e:6f:
0a:4e:61:f5:e3:76:17:cd:84:76:bf:66:85:93:ef:69:09:a2:
38:a4:05:f1:a0:cb:ee:28:5c:74:c1:67:4d:aa:e4:ed:a4:f3:
5b:c1:0e:84:7f:73:0e:82:bb:6e:53:0e:13:5b:44:92:5d:2b:
64:66:ab:46:4b:b1:ef:bf:01:83:4c:1e:6f:29:4e:45:ab:dd:
2b:67:ed:f8:36:ff:cc:af:6c:60:82:7f:7a:26:9b:6e:ee:77:
09:14:88:8d:95:d7:8c:0a:bb:3b:88:d5:05:a8:c7:71:5c:b2:
c4:ca:a0:52:c8:ba:91:67:9d:77:bd:ba:1f:3d:53:5f:ae:f0:
54:9b:f2:36:2c:1a:b5:1b:e8:32:0f:00:d7:8a:b1:f4:84:09:
f7:9b:f2:36:6f:13:6f:08:14:96:45:75:fe:eb:04:c8:d4:63:
30:a5:6c:59:4b:35:ec:ea:b4:36:e9:65:1c:11:be:5b:56:1f:
b2:6c:26:0b:27:73:5d:e3:fd:64:ff:3c:5d:b1:dd:5b:30:1e:
d8:82:e2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:29:34 2026 by rpki-client