
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
File: zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json)
Hash identifier: e8dfRZJf6vjN60PNSaq7DweB332JCTMAL1RqpygFZ2k=
Subject key identifier: 60:01:47:55:15:0B:A6:E2:44:E6:BB:02:9B:FD:AA:05:DC:6D:06:88
Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92
Certificate issuer: /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92
Certificate serial: 1576
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
Manifest number: 154F
Signing time: Tue 12 May 2026 16:48:55 +0000
Manifest this update: Tue 12 May 2026 16:48:55 +0000
Manifest next update: Tue 19 May 2026 16:48:55 +0000
Files and hashes: 1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: 10H/RMAZib8k0ahMoB72q0KCf3p3iwr63yDldRma9A8=)
2: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: c3V4is6FxJWguSVJuid3bqOWHNBU9BhpqKFdoluzAPo=)
3: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: ZmY2QYzyAhSTsePe4zn0H+5k+aBVvIw3u0RjxVpoXEs=)
4: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: 0NwFrvM9IRvJJO9gyp3K+Hhph/Q11YURFU2ihH7vWSU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl
rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5494 (0x1576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144436, serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92
Validity
Not Before: May 12 16:48:55 2026 GMT
Not After : May 19 16:48:55 2026 GMT
Subject: CN=6a0359f7-fdb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c9:bc:94:ec:9e:cc:db:ab:86:13:d1:90:1b:
54:0f:af:44:78:05:cb:f7:46:cb:f0:51:f1:b8:f0:
d4:3c:5c:5b:95:13:85:02:fa:1e:88:87:fb:35:26:
d5:13:fa:20:89:a5:51:67:9e:22:9d:ce:78:15:71:
07:62:df:5b:54:21:a4:73:37:aa:fb:ff:9a:a0:0c:
ef:ed:10:2b:93:d0:ea:c8:db:63:cc:93:d5:6a:ef:
45:4f:39:71:7c:64:d6:15:33:74:3e:1a:dd:1c:03:
85:d7:72:f1:10:2d:1d:96:f4:ef:99:9d:11:89:31:
eb:a3:27:ee:34:4c:54:76:8b:f5:2c:4d:ee:6f:eb:
22:76:4f:25:cb:0a:19:77:35:04:ed:df:8e:30:60:
8e:54:2e:50:68:2c:d4:8d:f9:8a:92:d1:61:d1:71:
eb:6f:0c:2d:44:1c:73:bc:08:84:18:33:d3:76:78:
c4:2c:fe:0d:a7:e3:c3:a5:00:cd:ff:bf:2c:37:cf:
d3:a7:8d:c8:6e:e7:7a:21:d8:44:65:32:fc:27:df:
27:3b:04:0e:13:60:b4:f5:64:7f:0a:77:02:38:a5:
8c:96:48:7b:23:93:08:1b:da:14:0a:cd:58:85:97:
85:89:68:ec:f5:0b:f6:4a:e4:0a:6f:9f:af:e6:b5:
d6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:01:47:55:15:0B:A6:E2:44:E6:BB:02:9B:FD:AA:05:DC:6D:06:88
X509v3 Authority Key Identifier:
keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:dc:00:04:4e:0d:a4:04:a8:de:d5:2a:69:dd:af:80:05:67:
d3:7c:40:bd:d2:f8:82:76:db:e9:91:44:da:3b:5a:b3:7c:31:
4a:a1:50:61:6a:18:ad:21:bd:66:5a:fd:4f:2f:18:04:39:29:
88:67:0d:1a:b0:07:76:2f:d8:5d:30:68:79:9d:bd:aa:d9:46:
78:72:3d:30:5a:27:69:36:5d:50:9a:f5:0b:ca:37:22:65:25:
ec:ad:30:d3:4d:ec:59:12:88:50:77:b7:ff:39:b6:9e:79:20:
64:95:ef:4b:34:6d:39:95:45:f0:66:2d:a3:3f:2c:e7:db:08:
69:60:de:10:ca:b3:fb:a1:cf:ba:57:a2:c0:0c:5f:b7:f9:63:
99:86:c9:f6:7c:40:84:77:39:8a:98:f5:99:a5:f5:7c:7e:74:
66:38:e4:1d:b0:41:08:1c:af:e4:11:90:d1:10:71:6a:d0:e9:
64:4a:f6:c0:d6:25:20:dd:27:ca:cd:7a:56:d8:4d:1f:1d:3e:
19:86:60:d4:9e:d1:46:5f:c8:43:ca:77:60:f3:fe:13:73:47:
bd:ab:25:de:89:ef:7e:7f:49:96:7b:82:c6:d9:39:8f:df:b8:
bf:f0:ab:0f:b2:e6:40:f9:8a:8f:27:eb:40:6c:3b:a8:a6:e7:
c1:dc:2a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:02:19 2026 by rpki-client