
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132336/A4C4024C79A411F18D0EC0EF92A30FBC/zHlrmVsFkPGFeCONcFkd1SRJXVA.mft
File: zHlrmVsFkPGFeCONcFkd1SRJXVA.mft (raw, json)
Hash identifier: NOTQ/FmmZo5TxBNBln6FtM+UXQJheZkHmzts0oxD7FM=
Subject key identifier: 26:8A:21:7E:E3:57:25:5C:BE:52:3B:9F:2D:E8:33:B7:D4:0C:ED:55
Authority key identifier: CC:79:6B:99:5B:05:90:F1:85:78:23:8D:70:59:1D:D5:24:49:5D:50
Certificate issuer: /CN=A9132336/serialNumber=CC796B995B0590F18578238D70591DD524495D50
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHlrmVsFkPGFeCONcFkd1SRJXVA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132336/A4C4024C79A411F18D0EC0EF92A30FBC/zHlrmVsFkPGFeCONcFkd1SRJXVA.mft
Manifest number: 0A
Signing time: Thu 23 Jul 2026 11:14:52 +0000
Manifest this update: Thu 23 Jul 2026 11:14:51 +0000
Manifest next update: Thu 30 Jul 2026 11:14:51 +0000
Files and hashes: 1: zHlrmVsFkPGFeCONcFkd1SRJXVA.crl (hash: jpPWq8bs0jQpRBNNaEIUiHzihnROhIoxTRZzYMMOlKE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132336/A4C4024C79A411F18D0EC0EF92A30FBC/zHlrmVsFkPGFeCONcFkd1SRJXVA.crl
rsync://rpki.apnic.net/member_repository/A9132336/A4C4024C79A411F18D0EC0EF92A30FBC/zHlrmVsFkPGFeCONcFkd1SRJXVA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHlrmVsFkPGFeCONcFkd1SRJXVA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:14:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132336, serialNumber=CC796B995B0590F18578238D70591DD524495D50
Validity
Not Before: Jul 23 11:14:51 2026 GMT
Not After : Jul 30 11:14:51 2026 GMT
Subject: CN=6a61f7ac-5385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:35:59:1e:9b:69:9f:e9:6a:c0:63:f8:a2:
36:07:7e:cc:d4:62:a4:6f:b5:ee:15:cc:bb:55:02:
c2:9a:e5:ce:d4:ca:b4:63:e1:7c:5f:37:90:b5:ff:
99:3a:90:a4:d6:db:44:aa:5c:c9:bb:93:dc:5e:62:
14:b4:38:eb:25:d5:dd:bb:ae:7b:a8:9b:e7:7a:85:
7d:61:f7:39:bf:06:5e:7a:c4:88:b3:44:37:fd:c5:
4b:84:31:73:c5:7c:3f:08:f5:8f:c3:7d:48:5d:35:
16:60:77:11:0e:b3:e5:1d:34:3c:9d:1e:eb:4b:15:
e3:b5:74:09:b7:2a:23:05:04:a1:11:14:c0:14:10:
b3:c1:f9:76:bf:d9:64:2c:ec:7e:2f:8f:50:98:fc:
4f:d7:51:d9:97:ce:4e:4c:4f:d0:da:24:c7:35:81:
d0:fb:d8:1d:55:6e:f3:cb:7f:2d:f9:73:76:ef:29:
72:4e:3e:8c:5a:26:76:1d:71:84:43:8a:41:91:29:
57:e0:61:9a:b5:f4:c4:c0:cd:b9:10:2a:cc:17:a9:
a6:48:e3:74:8d:fc:f0:e8:5b:f9:4b:91:1c:e4:5b:
bf:91:d7:ba:30:77:7c:f8:06:88:c9:50:5d:fc:53:
fa:f3:de:a6:b4:f6:bc:24:8f:ad:60:d0:eb:ca:98:
d2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8A:21:7E:E3:57:25:5C:BE:52:3B:9F:2D:E8:33:B7:D4:0C:ED:55
X509v3 Authority Key Identifier:
keyid:CC:79:6B:99:5B:05:90:F1:85:78:23:8D:70:59:1D:D5:24:49:5D:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132336/A4C4024C79A411F18D0EC0EF92A30FBC/zHlrmVsFkPGFeCONcFkd1SRJXVA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHlrmVsFkPGFeCONcFkd1SRJXVA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132336/A4C4024C79A411F18D0EC0EF92A30FBC/zHlrmVsFkPGFeCONcFkd1SRJXVA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:cc:bc:bd:07:2f:8a:e3:8c:fb:b0:f4:54:25:1d:66:8a:a2:
92:08:f5:5f:6f:e6:55:c2:c3:d3:97:d9:78:1b:ca:64:32:2b:
0e:9a:20:83:4f:c9:21:d4:17:06:76:ed:32:7a:61:c4:b3:51:
bc:ee:e0:ac:43:72:00:7b:c1:83:3c:93:81:f2:91:52:00:26:
67:76:c7:d8:0a:49:82:4a:fb:73:de:96:b5:45:e5:cb:48:2b:
77:84:e5:e4:f1:6b:f7:5b:ab:71:17:d5:d2:74:81:fa:5f:6a:
9c:84:4b:b4:5f:af:2c:e0:41:ef:ba:26:1b:a3:82:3a:b2:8e:
5a:c8:91:49:86:86:8d:55:86:74:ee:ab:c7:cb:0d:d1:91:33:
79:60:14:ed:a4:f9:ce:9d:e0:a9:05:c9:99:7a:af:cb:67:9d:
07:66:ed:40:18:2e:e1:ce:6b:df:b3:b9:69:81:cf:67:2d:b6:
b3:a6:51:56:15:e5:2f:57:d9:3e:8c:a7:6f:93:d4:8d:90:b8:
a5:2f:83:44:8e:b2:9e:e6:13:f2:d2:6d:b8:57:75:27:ba:d1:
de:0b:0e:2c:03:d4:21:5b:8b:ae:ae:ba:89:2a:5a:3f:0b:8a:
55:97:0e:f4:8a:d3:b4:e9:66:ea:4c:12:e4:fa:8a:3d:65:7f:
56:9b:1d:9f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MjMzNjExMC8GA1UEBRMoQ0M3OTZCOTk1QjA1OTBGMTg1NzgyMzhENzA1OTFERDUy
NDQ5NUQ1MDAeFw0yNjA3MjMxMTE0NTFaFw0yNjA3MzAxMTE0NTFaMBgxFjAUBgNV
BAMTDTZhNjFmN2FjLTUzODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvwjVZHptpn+lqwGP4ojYHfszUYqRvte4VzLtVAsKa5c7UyrRj4XxfN5C1/5k6
kKTW20SqXMm7k9xeYhS0OOsl1d27rnuom+d6hX1h9zm/Bl56xIizRDf9xUuEMXPF
fD8I9Y/DfUhdNRZgdxEOs+UdNDydHutLFeO1dAm3KiMFBKERFMAUELPB+Xa/2WQs
7H4vj1CY/E/XUdmXzk5MT9DaJMc1gdD72B1VbvPLfy35c3bvKXJOPoxaJnYdcYRD
ikGRKVfgYZq19MTAzbkQKswXqaZI43SN/PDoW/lLkRzkW7+R17owd3z4BojJUF38
U/rz3qa09rwkj61g0OvKmNJ7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJoohfuNX
JVy+UjufLegzt9QM7VUwHwYDVR0jBBgwFoAUzHlrmVsFkPGFeCONcFkd1SRJXVAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyMzM2L0E0QzQwMjRDNzlB
NDExRjE4RDBFQzBFRjkyQTMwRkJDL3pIbHJtVnNGa1BHRmVDT05jRmtkMVNSSlhW
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvekhscm1Wc0ZrUEdGZUNPTmNGa2QxU1JKWFZBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy
MzM2L0E0QzQwMjRDNzlBNDExRjE4RDBFQzBFRjkyQTMwRkJDL3pIbHJtVnNGa1BH
RmVDT05jRmtkMVNSSlhWQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBJzLy9By+K44z7sPRUJR1miqKSCPVfb+ZVwsPTl9l4G8pkMisOmiCDT8kh1BcG
du0yemHEs1G87uCsQ3IAe8GDPJOB8pFSACZndsfYCkmCSvtz3pa1ReXLSCt3hOXk
8Wv3W6txF9XSdIH6X2qchEu0X68s4EHvuiYbo4I6so5ayJFJhoaNVYZ07qvHyw3R
kTN5YBTtpPnOneCpBcmZeq/LZ50HZu1AGC7hzmvfs7lpgc9nLbazplFWFeUvV9k+
jKdvk9SNkLilL4NEjrKe5hPy0m24V3UnutHeCw4sA9QhW4uurrqJKlo/C4pVlw70
itO06WbqTBLk+oo9ZX9Wmx2f
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:54 2026 by rpki-client