
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
File: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft (raw, json)
Hash identifier: 03JLl6r/UI/z3Zf8PTPQpmQigeckLPHESbYQq1MGl9E=
Subject key identifier: 68:00:25:1F:3C:D8:E6:89:12:61:E4:BD:68:56:45:C9:8E:9A:3D:45
Authority key identifier: CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98
Certificate issuer: /CN=A913B018/serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98
Certificate serial: 01AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
Manifest number: 01A9
Signing time: Mon 11 May 2026 04:09:36 +0000
Manifest this update: Mon 11 May 2026 04:09:36 +0000
Manifest next update: Mon 18 May 2026 04:09:36 +0000
Files and hashes: 1: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl (hash: Ml6YcmeBTivvya8vQxb2vUD6yl67TobSSMKFJ0bAwl4=)
2: 8B7FA748C5F911EE8D0FDF82C4F9AE02.roa (hash: GLrzVbO/eZPffRoT3cGz+iLpJergigCKe+VSGEBiwVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl
rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:09:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430 (0x1ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B018, serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98
Validity
Not Before: May 11 04:09:36 2026 GMT
Not After : May 18 04:09:36 2026 GMT
Subject: CN=6a015680-ad99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:04:a0:19:69:d1:ac:ca:43:7d:d2:0b:6e:
8c:dc:30:71:82:50:7b:08:dd:39:28:8a:ef:fc:83:
45:6a:5f:a6:5b:b7:9c:05:7d:38:a4:a8:3c:4d:9e:
c5:c6:9c:08:26:76:5f:51:d9:74:b9:8f:e7:54:dd:
f4:24:c0:65:c5:c2:40:bf:84:e3:4b:a6:5b:62:a3:
e2:04:5a:e4:3d:63:d3:9e:8e:61:1b:85:96:f2:9f:
75:42:81:aa:ad:b0:5c:eb:76:fb:2e:ee:fd:cf:b7:
b7:2f:c2:59:5f:8a:b0:de:54:52:a0:d3:dc:f1:8d:
54:0a:60:cb:5b:7f:c8:d1:64:30:63:c6:76:5b:40:
60:b7:04:74:9c:d9:70:f2:df:b4:e7:4e:3c:34:09:
49:9e:23:fc:fe:06:fd:86:50:8d:aa:26:79:3c:26:
d5:5c:7d:9b:09:d1:fe:83:73:34:a4:f8:51:13:ee:
61:a4:fc:d3:33:00:31:14:e4:8a:22:b7:87:c6:82:
f5:82:40:a2:e9:0c:6d:eb:8d:8a:9c:fc:33:34:51:
36:95:c3:fc:74:30:7f:92:dc:87:a1:43:be:13:63:
80:d9:11:cf:89:63:8e:c9:71:89:b1:fd:99:c2:3d:
d4:a1:bb:a8:a6:29:e2:04:38:5b:f3:a6:a3:bc:d9:
f6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:00:25:1F:3C:D8:E6:89:12:61:E4:BD:68:56:45:C9:8E:9A:3D:45
X509v3 Authority Key Identifier:
keyid:CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:75:2d:09:92:fc:17:42:cb:44:c9:8a:89:6e:ec:71:71:67:
0b:d7:99:4f:0e:1c:3b:6e:f8:01:55:a1:5f:4e:1c:b8:5e:a6:
b8:95:52:1b:ea:eb:c9:38:67:f7:7a:0f:ba:4f:32:96:e5:e6:
86:fc:42:f9:e8:de:19:4b:68:2d:d4:d6:4f:bf:9f:48:65:1a:
3d:da:8d:8f:fb:35:63:d2:40:10:6f:10:1e:6a:6d:69:cb:bd:
4b:7f:6a:a3:4b:5a:07:8e:d3:88:d8:1e:4d:11:1a:4d:6c:d8:
de:36:07:c5:f9:74:12:ac:0b:a5:68:2d:ba:5e:4a:00:d0:3c:
62:fe:8a:60:4a:28:6b:81:68:83:8f:4f:48:99:cb:98:c3:58:
fc:a2:6e:7e:55:1b:2d:1a:02:9a:9f:65:ea:c8:12:e5:9e:19:
c8:97:70:fd:22:88:ad:82:86:1e:b6:a3:86:0f:57:62:f0:ea:
a1:a4:c6:41:1e:7e:e3:5c:98:d2:af:a6:dc:a8:e5:21:52:81:
92:ac:13:c3:ac:af:cc:a6:97:47:d2:77:ab:89:c6:e8:ab:09:
02:01:cc:06:e3:bf:0d:86:fe:78:2a:6d:01:0a:23:52:d2:a0:
5e:95:0d:40:00:a5:76:3b:bb:bd:bb:9c:c5:b3:2f:e0:c8:8a:
ac:87:bc:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0IwMTgxMTAvBgNVBAUTKENGNkI1NTBBMkYwQzY0MkJEQ0Q0RDhCRUE1MDM4NDlC
MkQ0NTBGOTgwHhcNMjYwNTExMDQwOTM2WhcNMjYwNTE4MDQwOTM2WjAYMRYwFAYD
VQQDEw02YTAxNTY4MC1hZDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuIYEoBlp0azKQ33SC26M3DBxglB7CN05KIrv/INFal+mW7ecBX04pKg8TZ7F
xpwIJnZfUdl0uY/nVN30JMBlxcJAv4TjS6ZbYqPiBFrkPWPTno5hG4WW8p91QoGq
rbBc63b7Lu79z7e3L8JZX4qw3lRSoNPc8Y1UCmDLW3/I0WQwY8Z2W0BgtwR0nNlw
8t+05048NAlJniP8/gb9hlCNqiZ5PCbVXH2bCdH+g3M0pPhRE+5hpPzTMwAxFOSK
IreHxoL1gkCi6Qxt642KnPwzNFE2lcP8dDB/ktyHoUO+E2OA2RHPiWOOyXGJsf2Z
wj3UobuopiniBDhb86ajvNn2owIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGgAJR88
2OaJEmHkvWhWRcmOmj1FMB8GA1UdIwQYMBaAFM9rVQovDGQr3NTYvqUDhJstRQ+Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjAxOC8zOUI0N0Y0QUM1
RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi96MnRWQ2k4TVpDdmMxTmktcFFPRW15MUZE
NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3oydFZDaThNWkN2YzFOaS1wUU9FbXkxRkQ1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjAxOC8zOUI0N0Y0QUM1RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi96MnRWQ2k4TVpD
dmMxTmktcFFPRW15MUZENWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANXUtCZL8F0LLRMmKiW7scXFnC9eZTw4cO274AVWhX04cuF6muJVSG+rryThn
93oPuk8yluXmhvxC+ejeGUtoLdTWT7+fSGUaPdqNj/s1Y9JAEG8QHmptacu9S39q
o0taB47TiNgeTREaTWzY3jYHxfl0EqwLpWgtul5KANA8Yv6KYEooa4Fog49PSJnL
mMNY/KJuflUbLRoCmp9l6sgS5Z4ZyJdw/SKIrYKGHrajhg9XYvDqoaTGQR5+41yY
0q+m3KjlIVKBkqwTw6yvzKaXR9J3q4nG6KsJAgHMBuO/DYb+eCptAQojUtKgXpUN
QACldju7vbucxbMv4MiKrIe82g==
-----END CERTIFICATE-----
Generated at Wed May 13 05:31:15 2026 by rpki-client