
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
File: ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft (raw, json)
Hash identifier: 7HDoSs/MiLy02RTJnBsCpfrbZx8JUIXCIhKUT94c/kY=
Subject key identifier: 5A:79:F1:EF:56:1D:C4:31:A2:86:60:EE:4E:B0:1D:D2:08:89:FE:7D
Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9
Certificate issuer: /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9
Certificate serial: 023C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
Manifest number: 022F
Signing time: Thu 23 Jul 2026 03:53:36 +0000
Manifest this update: Thu 23 Jul 2026 03:53:35 +0000
Manifest next update: Thu 30 Jul 2026 03:53:35 +0000
Files and hashes: 1: ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl (hash: oylCeQR8556L250NlXGplp3386YeDtCa0am72zEecG0=)
2: BEB0BA5031D711EE8DF6CB20C4F9AE02.roa (hash: b/Saiu1AabxrsPj47AXLm3MK1rkDbyAOEnOPk0nFsqA=)
3: D459D92C31D711EEBE1BFD20C4F9AE02.roa (hash: IBvzA5r6hVshNungWhQmp5lB9eEIYNrjugpKnBqI56I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl
rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:53:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 572 (0x23c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148456, serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9
Validity
Not Before: Jul 23 03:53:35 2026 GMT
Not After : Jul 30 03:53:35 2026 GMT
Subject: CN=6a619040-7d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dd:4b:34:ab:5f:f7:3a:27:50:a3:24:f3:3d:
60:d2:d1:59:fa:fc:0f:2d:0b:cf:c6:1b:11:08:04:
40:29:03:65:d4:0d:ed:45:72:e7:f7:66:42:1b:7b:
75:fa:cb:be:c7:07:8e:cf:08:26:72:44:94:ea:3c:
38:eb:d5:c0:83:df:58:1d:7b:2d:ca:39:e0:ec:69:
df:29:eb:b8:e1:2e:96:d2:46:07:47:67:85:77:3c:
9b:e1:d6:ce:82:dc:af:3e:6d:14:41:59:f5:e2:3d:
50:2e:1f:fe:0e:44:1a:22:01:b7:41:9a:71:90:b6:
e3:0d:b6:ab:4e:0a:e9:c8:9f:3b:00:2e:82:3a:6c:
a5:14:db:f3:95:2c:a3:ba:17:26:7d:92:03:4d:e7:
b9:cc:64:10:9c:3d:ff:3a:88:42:54:45:9a:ed:81:
dd:09:01:29:47:7d:cc:9a:33:91:02:13:8b:79:50:
d0:16:50:3e:57:8a:4e:57:d1:fe:f0:4d:0d:ce:e2:
a8:54:49:c5:0f:27:42:46:88:c1:d3:da:d8:ae:32:
25:a4:bc:c6:a3:40:80:89:65:c8:8a:76:f1:95:8d:
1d:10:d4:80:e6:19:0f:30:12:a9:f0:3e:32:cd:a4:
1e:42:80:4d:8f:12:8c:75:90:be:c8:d4:f7:1f:1f:
8b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:79:F1:EF:56:1D:C4:31:A2:86:60:EE:4E:B0:1D:D2:08:89:FE:7D
X509v3 Authority Key Identifier:
keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:b9:00:af:23:5e:ee:84:fa:4e:d7:35:7f:56:55:99:e9:28:
f3:4d:a3:76:64:17:6f:71:97:50:c8:74:27:72:cf:97:da:6e:
9b:8a:90:f7:5e:3e:bb:a0:a8:e5:17:13:14:73:dc:72:52:d4:
22:17:36:31:e1:b8:ad:32:d7:8c:9c:ed:14:37:88:a4:73:52:
a6:08:35:e5:22:71:d1:53:a7:bd:90:6d:8b:0b:c5:fe:c2:90:
73:06:6c:08:19:bc:bb:e8:84:f0:8e:01:80:9d:4c:87:09:3b:
f4:2a:72:53:41:7a:3d:e2:6e:d2:c5:ab:62:bf:56:82:f3:9c:
da:45:2f:9f:10:86:15:3f:20:d6:19:f1:52:27:74:c3:a9:f7:
85:0d:a4:3f:97:e9:63:3b:e1:a9:ee:e2:ca:c5:0e:82:95:8e:
0d:5f:b0:b0:03:54:1a:a4:d8:0b:a3:d3:cd:c0:3b:55:7d:30:
62:76:42:e7:53:10:e1:43:ee:32:a9:e3:f3:9c:3a:12:50:df:
a2:02:d6:eb:a8:7c:4a:1a:8c:da:f9:d6:47:f7:e4:e9:91:3f:
ba:e3:b8:0c:45:58:5e:b8:8c:dc:ae:1c:7a:c5:00:2e:c1:3a:
ea:53:4c:92:97:5d:b4:1c:19:fb:e1:d6:7a:0c:bd:f5:52:ed:
cf:21:f0:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDg0NTYxMTAvBgNVBAUTKDY0RjA2MEQ4QTE1OEQxMjQ0NENCREFFQ0JFRTA4Q0VD
Qjg4MkQyQzkwHhcNMjYwNzIzMDM1MzM1WhcNMjYwNzMwMDM1MzM1WjAYMRYwFAYD
VQQDEw02YTYxOTA0MC03ZDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo91LNKtf9zonUKMk8z1g0tFZ+vwPLQvPxhsRCARAKQNl1A3tRXLn92ZCG3t1
+su+xweOzwgmckSU6jw469XAg99YHXstyjng7GnfKeu44S6W0kYHR2eFdzyb4dbO
gtyvPm0UQVn14j1QLh/+DkQaIgG3QZpxkLbjDbarTgrpyJ87AC6COmylFNvzlSyj
uhcmfZIDTee5zGQQnD3/OohCVEWa7YHdCQEpR33MmjORAhOLeVDQFlA+V4pOV9H+
8E0NzuKoVEnFDydCRojB09rYrjIlpLzGo0CAiWXIinbxlY0dENSA5hkPMBKp8D4y
zaQeQoBNjxKMdZC+yNT3Hx+LfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFp58e9W
HcQxooZg7k6wHdIIif59MB8GA1UdIwQYMBaAFGTwYNihWNEkRMva7L7gjOy4gtLJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ1Ni82MDdBRDkyMDMx
RDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBTUkV5OXJzdnVDTTdMaUMw
c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pQQmcyS0ZZMFNSRXk5cnN2dUNNN0xpQzBzay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
ODQ1Ni82MDdBRDkyMDMxRDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBT
UkV5OXJzdnVDTTdMaUMwc2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAY7kAryNe7oT6Ttc1f1ZVmeko802jdmQXb3GXUMh0J3LPl9pum4qQ914+u6Co
5RcTFHPcclLUIhc2MeG4rTLXjJztFDeIpHNSpgg15SJx0VOnvZBtiwvF/sKQcwZs
CBm8u+iE8I4BgJ1Mhwk79CpyU0F6PeJu0sWrYr9WgvOc2kUvnxCGFT8g1hnxUid0
w6n3hQ2kP5fpYzvhqe7iysUOgpWODV+wsANUGqTYC6PTzcA7VX0wYnZC51MQ4UPu
Mqnj85w6ElDfogLW66h8ShqM2vnWR/fk6ZE/uuO4DEVYXriM3K4cesUALsE66lNM
kpddtBwZ++HWegy99VLtzyHw/Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:06 2026 by rpki-client