
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft
File: zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft (raw, json)
Hash identifier: hEBArrdln33LdswhyGsCShcCo+VZohHZgAuPmn7sUF0=
Subject key identifier: 31:9D:0E:1E:E1:A5:5E:51:85:82:7E:56:BF:5A:E2:AC:7D:85:57:FA
Authority key identifier: CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8
Certificate issuer: /CN=A9133239/serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8
Certificate serial: 0163
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft
Manifest number: 0163
Signing time: Wed 13 May 2026 04:54:27 +0000
Manifest this update: Wed 13 May 2026 04:54:27 +0000
Manifest next update: Wed 20 May 2026 04:54:27 +0000
Files and hashes: 1: zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl (hash: HYwcodL4bscb+9DzSkoMn2hLMfetJoYTnNDzmm5U1Rs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl
rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:54:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133239, serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8
Validity
Not Before: May 13 04:54:27 2026 GMT
Not After : May 20 04:54:27 2026 GMT
Subject: CN=6a040403-8ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b5:61:05:7d:52:81:87:68:b4:fc:ac:cb:fc:
8d:14:76:ea:7b:0e:3b:9d:0c:a5:12:33:8d:29:19:
28:ac:78:21:d4:7e:a2:4c:90:04:6f:fc:51:34:6b:
a1:d0:ea:f4:66:a1:c2:da:62:d1:6b:91:95:36:f3:
26:f7:37:2f:bd:da:67:e4:1f:57:19:87:36:76:75:
90:44:1c:27:90:ad:ee:14:4f:df:57:6c:df:d0:4a:
0c:df:f3:2b:5a:ca:8d:89:fb:70:70:83:d3:e2:a4:
3d:46:13:91:88:fc:64:51:07:c0:aa:50:ac:90:e2:
8b:8f:e3:f3:33:44:13:86:d3:f8:1f:60:37:77:3d:
b4:0d:1f:78:d0:6a:a5:56:89:80:cc:8f:9c:8b:69:
d4:63:e3:29:65:53:2f:63:ac:45:0f:81:75:30:93:
cc:b5:8c:b9:5d:31:80:0a:26:83:fc:5f:ed:ee:54:
c5:dc:6a:ff:e1:05:6c:74:15:a6:1c:00:11:a6:12:
53:5a:23:2a:64:e1:5a:23:65:32:35:56:0b:39:d1:
13:88:61:52:7a:17:26:da:a0:ca:e4:6e:2d:c1:45:
d8:21:05:82:06:94:7b:2f:c6:2b:fc:d8:17:09:ca:
9d:c6:c1:65:e6:60:35:78:04:15:f7:23:44:24:ae:
9c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9D:0E:1E:E1:A5:5E:51:85:82:7E:56:BF:5A:E2:AC:7D:85:57:FA
X509v3 Authority Key Identifier:
keyid:CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:49:05:bd:70:53:0b:f0:c0:d2:49:a0:43:0d:17:cc:76:63:
e5:23:c9:a3:f9:55:47:71:89:c2:63:cc:fc:56:7d:4f:d4:c4:
bc:fe:d3:86:87:8a:30:38:6d:07:5e:d0:0e:4a:06:70:3c:5f:
7d:dc:15:44:fa:e9:01:ef:78:86:13:ba:fb:d0:ac:c1:75:9c:
7e:fd:85:63:14:e9:d1:b0:ba:d1:7d:1b:79:c0:d8:69:ea:1c:
c6:d5:c6:c7:f6:5c:7e:29:af:03:09:55:b2:ae:1e:43:89:73:
50:3b:c4:e7:b4:02:5e:0e:1f:ce:2d:23:87:55:84:61:90:b7:
48:28:3b:45:87:a7:c1:1d:58:9d:51:2e:2a:c0:f6:b8:1b:b3:
a2:a4:15:49:79:72:c6:94:6e:5e:d5:0d:26:9f:28:a0:ed:5a:
e0:9b:fe:c5:10:6f:a2:18:c9:ec:ab:87:64:29:81:91:cb:c7:
93:3e:d0:19:44:55:3c:c8:c2:f5:04:33:a8:11:78:d7:5a:c1:
40:21:9a:34:76:67:c3:de:af:55:b0:a1:5b:04:de:70:cd:c6:
93:2f:76:09:ef:a7:6d:6d:40:f4:f2:64:b2:6d:40:ee:df:f8:
63:b4:e6:64:db:a0:44:f2:09:af:2f:50:0a:0b:a4:f6:1a:f3:
17:3a:df:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzMyMzkxMTAvBgNVBAUTKENDNkY0NEMxRTI1RjM3QTNBREY3NjI3Qjk3NzdERkEx
NzdEOUQxRTgwHhcNMjYwNTEzMDQ1NDI3WhcNMjYwNTIwMDQ1NDI3WjAYMRYwFAYD
VQQDEw02YTA0MDQwMy04ZWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvrVhBX1SgYdotPysy/yNFHbqew47nQylEjONKRkorHgh1H6iTJAEb/xRNGuh
0Or0ZqHC2mLRa5GVNvMm9zcvvdpn5B9XGYc2dnWQRBwnkK3uFE/fV2zf0EoM3/Mr
WsqNiftwcIPT4qQ9RhORiPxkUQfAqlCskOKLj+PzM0QThtP4H2A3dz20DR940Gql
VomAzI+ci2nUY+MpZVMvY6xFD4F1MJPMtYy5XTGACiaD/F/t7lTF3Gr/4QVsdBWm
HAARphJTWiMqZOFaI2UyNVYLOdETiGFSehcm2qDK5G4twUXYIQWCBpR7L8Yr/NgX
CcqdxsFl5mA1eAQV9yNEJK6cFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDGdDh7h
pV5RhYJ+Vr9a4qx9hVf6MB8GA1UdIwQYMBaAFMxvRMHiXzejrfdie5d336F32dHo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzIzOS83RDEyOUI1ODJG
MDIxMUVGOEM3QTU4NzBDNEY5QUUwMi96RzlFd2VKZk42T3Q5Mko3bDNmZm9YZlow
ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pHOUV3ZUpmTjZPdDkySjdsM2Zmb1hmWjBlZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MzIzOS83RDEyOUI1ODJGMDIxMUVGOEM3QTU4NzBDNEY5QUUwMi96RzlFd2VKZk42
T3Q5Mko3bDNmZm9YZlowZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANUkFvXBTC/DA0kmgQw0XzHZj5SPJo/lVR3GJwmPM/FZ9T9TEvP7ThoeKMDht
B17QDkoGcDxffdwVRPrpAe94hhO6+9CswXWcfv2FYxTp0bC60X0becDYaeocxtXG
x/ZcfimvAwlVsq4eQ4lzUDvE57QCXg4fzi0jh1WEYZC3SCg7RYenwR1YnVEuKsD2
uBuzoqQVSXlyxpRuXtUNJp8ooO1a4Jv+xRBvohjJ7KuHZCmBkcvHkz7QGURVPMjC
9QQzqBF411rBQCGaNHZnw96vVbChWwTecM3Gky92Ce+nbW1A9PJksm1A7t/4Y7Tm
ZNugRPIJry9QCguk9hrzFzrfZQ==
-----END CERTIFICATE-----
Generated at Wed May 13 09:03:58 2026 by rpki-client