
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
File: ZmkYZX5BYz4X6shsJrGE26PoHi4.mft (raw, json)
Hash identifier: HtjUn1shOat5CuHCKdGjHr+I2MQ1+NFuuXYOkTamUfs=
Subject key identifier: 6A:3A:91:7A:09:15:CE:6F:69:D9:32:70:CD:28:34:85:A8:F1:68:38
Authority key identifier: 66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E
Certificate issuer: /CN=A9149907/serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E
Certificate serial: 03E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
Manifest number: 03D6
Signing time: Wed 13 May 2026 00:42:06 +0000
Manifest this update: Wed 13 May 2026 00:42:06 +0000
Manifest next update: Wed 20 May 2026 00:42:06 +0000
Files and hashes: 1: ZmkYZX5BYz4X6shsJrGE26PoHi4.crl (hash: fXByuFNkA3bxK/8J2deI+nlIxfYt/jrUMsf9k2U5PzE=)
2: 6EE5FAE4544F11EFA572D230C4F9AE02.roa (hash: 06iHCsokSQ39HgOy2KJzWubeFrH/1VczqWMzLvyLOHM=)
3: 6E4711FE544F11EFA572D230C4F9AE02.roa (hash: PZXeG2z5Up6Bnr/fbTuUWxL/M8azNuvO/Wv2mvuOFVk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl
rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:42:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 994 (0x3e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149907, serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E
Validity
Not Before: May 13 00:42:06 2026 GMT
Not After : May 20 00:42:06 2026 GMT
Subject: CN=6a03c8de-37cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:52:ba:5e:9e:90:93:ed:95:59:4f:61:e2:
03:de:88:94:de:d1:6e:20:84:2e:9f:4c:a5:32:33:
b7:bf:2c:83:7a:f5:ef:79:0b:1e:64:52:58:00:1f:
f7:81:63:d9:f9:fb:19:79:4c:59:aa:47:e4:00:74:
e0:a2:d1:f0:ea:cc:bf:8f:e8:c7:44:b0:fe:ae:60:
94:60:c0:d4:0f:78:58:b9:be:63:20:8e:7e:67:e1:
75:07:c1:39:f3:33:fd:40:1e:16:91:f4:9b:d4:b0:
10:d2:80:38:df:8a:33:38:a6:1a:00:4b:f1:6e:71:
04:2c:6d:df:e5:d4:d9:2f:7d:df:e7:ee:e3:3a:2e:
7c:90:76:91:78:bb:c4:9a:d3:b8:e5:82:d7:b6:5b:
95:98:a5:49:a4:4a:96:be:97:4e:f6:34:9e:6b:d7:
63:df:fb:86:43:e1:0c:70:34:4a:c7:93:20:0c:55:
94:f3:13:d3:97:39:51:a2:7b:aa:48:cf:e5:45:c5:
78:f7:8c:fb:4f:57:8c:9a:70:20:eb:ed:fe:48:c2:
f0:29:a0:e5:3f:18:c5:17:3a:bc:7f:e7:2e:49:a5:
71:35:e5:22:eb:ec:a5:24:22:40:16:cf:d9:09:41:
f0:91:39:9b:c0:a1:12:9a:60:f5:62:e6:e4:7c:71:
c4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3A:91:7A:09:15:CE:6F:69:D9:32:70:CD:28:34:85:A8:F1:68:38
X509v3 Authority Key Identifier:
keyid:66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:48:1a:48:54:7c:93:1b:a8:b3:df:4c:da:98:94:f6:d5:6e:
70:38:f3:e1:f7:1b:0d:9a:75:0d:8c:eb:20:90:e7:03:73:75:
b2:de:e2:2f:0a:0b:d6:29:60:c9:53:ad:4f:f2:8d:7a:36:44:
76:d0:21:b8:f4:c0:e0:52:80:ed:96:60:fb:9a:9b:28:2b:f9:
0d:79:41:ba:ac:9c:45:b6:1b:19:b8:11:a4:46:2f:55:bd:cc:
dc:06:2b:2f:e6:31:e0:68:cd:94:da:28:6a:19:84:a7:83:a3:
ac:ce:7e:22:f5:1d:fa:cd:fd:8f:b7:f7:57:1c:b9:f0:c2:3c:
17:f5:a4:18:c5:31:77:b0:1a:0b:6b:16:00:b4:fe:c8:b5:ad:
33:b9:0f:94:57:84:78:e6:b1:26:23:4c:f2:9d:37:ae:52:76:
5b:a3:5a:15:c4:a0:3b:82:24:bf:ab:47:83:e4:bf:56:0e:ba:
52:e7:1a:ce:33:88:41:1c:68:f3:02:69:bd:be:85:00:8e:b0:
9d:2e:44:d3:9e:6a:c4:c7:57:bb:be:c8:39:e0:d3:cd:8a:63:
94:b9:69:79:b5:97:8a:a3:23:83:46:cc:28:ce:5f:18:0c:c4:
fe:d9:8a:b5:74:fd:f1:a9:05:86:a2:07:b5:81:a3:49:c8:01:
06:fd:7d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:32 2026 by rpki-client