
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
File: zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft (raw, json)
Hash identifier: urk1rppsGvFnOijZvBqHJ+xo8Opl7BUrLyl/bjdGoZc=
Subject key identifier: A2:23:EF:09:76:B7:87:7D:89:E4:7C:22:1A:05:AA:B2:C5:EC:3C:55
Authority key identifier: CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1
Certificate issuer: /CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1
Certificate serial: 0505
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
Manifest number: 04F6
Signing time: Tue 12 May 2026 23:53:27 +0000
Manifest this update: Tue 12 May 2026 23:53:26 +0000
Manifest next update: Tue 19 May 2026 23:53:26 +0000
Files and hashes: 1: zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl (hash: qLA2X3BSc+GZUkYuZvbqZipMtFjUX9MdwW8BUR5ELh8=)
2: 6E5D9F026AD211EF84B5841FC4F9AE02.roa (hash: ynmW2tXKon2Mm9XJxO05TX1KTfoacHd+1EhVNC9kNXU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl
rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1285 (0x505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E990, serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1
Validity
Not Before: May 12 23:53:26 2026 GMT
Not After : May 19 23:53:26 2026 GMT
Subject: CN=6a03bd77-2181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:cf:52:be:4c:e5:2d:3f:44:4a:42:8d:f0:0c:
c7:e3:12:1a:96:c7:3a:0c:b1:1f:25:0f:d3:c7:ba:
21:a8:9b:6a:15:82:1b:20:7d:f7:e2:1a:66:e5:0a:
29:43:53:2f:42:2d:ff:b9:23:8d:cb:3f:ab:31:35:
05:a1:12:34:c8:26:47:56:4c:40:f5:81:f2:c0:0e:
c0:23:09:59:18:d0:6e:1b:76:69:83:65:b8:56:18:
53:d0:ef:b8:25:09:5f:52:20:d3:a9:e4:91:89:d0:
21:f8:6c:db:28:0d:c3:57:29:9f:4d:7d:b1:f8:ed:
d0:a0:b0:82:29:9e:81:7d:b1:df:e3:91:34:09:9b:
0b:15:36:74:b2:05:2f:37:34:03:63:1c:eb:00:54:
94:dd:eb:eb:b6:14:3f:6b:52:90:86:31:39:23:92:
3e:aa:1e:20:91:2d:16:f9:f0:41:be:4d:30:78:44:
e5:8f:d8:cb:17:05:5e:37:c3:f5:8a:04:6b:63:5c:
d3:56:0b:76:d3:1b:d9:86:24:b4:99:b7:5c:a8:0b:
f1:02:3c:e4:5d:92:cc:0b:97:b5:f1:76:4b:62:1f:
b8:e8:26:a6:89:be:2e:42:b4:bb:e6:15:95:cb:54:
0b:67:cd:4d:a5:c0:4d:67:0d:9c:91:62:e2:b7:50:
a5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:23:EF:09:76:B7:87:7D:89:E4:7C:22:1A:05:AA:B2:C5:EC:3C:55
X509v3 Authority Key Identifier:
keyid:CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:cb:9e:d1:3b:da:96:fe:78:2c:b2:eb:c2:2f:42:26:35:04:
c0:7d:d3:91:d7:45:1a:3b:b0:81:35:48:16:d3:7c:c1:dc:b8:
06:f0:21:d0:e4:90:97:7a:23:69:08:1e:09:93:47:e4:08:78:
04:d9:b4:fb:8c:be:83:87:11:88:5e:1c:5e:b5:3d:11:3d:c6:
01:e9:03:87:e7:75:09:44:38:73:f1:d7:60:2a:cd:92:d3:cb:
61:e1:b0:52:a4:f0:63:3a:38:66:14:9e:a7:78:66:17:97:9d:
09:75:8f:19:bd:c9:38:de:02:60:16:df:aa:22:f1:05:0f:00:
8f:7d:b7:96:e7:c5:7c:45:6c:ec:bc:35:05:e6:61:77:8e:ca:
c2:a2:6b:36:28:14:ef:9c:2b:78:be:22:0f:da:59:53:48:e7:
cb:a0:9f:18:a3:51:50:43:08:48:a3:a2:b0:09:cc:c0:a6:bf:
f8:ce:c8:7a:92:02:7c:72:61:99:d6:bd:7d:ed:df:1d:cd:5f:
ef:74:b2:30:37:d5:9d:16:91:23:03:94:45:01:fb:b4:74:fe:
61:ca:81:5a:6c:bf:1a:de:4e:a4:90:4b:a4:a3:b1:ce:06:52:
b8:d5:41:96:a6:db:6e:b3:bd:c8:cf:fc:f9:d5:ad:52:d3:4d:
f2:fa:8e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:28:53 2026 by rpki-client