
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
File: ZmkYZX5BYz4X6shsJrGE26PoHi4.mft (raw, json)
Hash identifier: J1Q1ToijBgab0bevXJ8+Li2mxIWbjVSzPrtjdMnrHEY=
Subject key identifier: F6:5C:F5:B8:C5:27:E9:E1:91:64:8A:DB:53:6D:1E:F1:10:39:69:78
Authority key identifier: 66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E
Certificate issuer: /CN=A9149907/serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E
Certificate serial: 0406
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
Manifest number: 03FA
Signing time: Thu 23 Jul 2026 01:20:14 +0000
Manifest this update: Thu 23 Jul 2026 01:20:14 +0000
Manifest next update: Thu 30 Jul 2026 01:20:14 +0000
Files and hashes: 1: ZmkYZX5BYz4X6shsJrGE26PoHi4.crl (hash: D7uVmrcN6EskkjowqwP2pZGI2bZrRyNy6anWNDfuk1Q=)
2: 6EE5FAE4544F11EFA572D230C4F9AE02.roa (hash: 06iHCsokSQ39HgOy2KJzWubeFrH/1VczqWMzLvyLOHM=)
3: 6E4711FE544F11EFA572D230C4F9AE02.roa (hash: PZXeG2z5Up6Bnr/fbTuUWxL/M8azNuvO/Wv2mvuOFVk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl
rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:20:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1030 (0x406)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149907, serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E
Validity
Not Before: Jul 23 01:20:14 2026 GMT
Not After : Jul 30 01:20:14 2026 GMT
Subject: CN=6a616c4e-ea51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9d:1f:4a:ca:9e:1d:78:90:e1:bd:81:ee:31:
28:08:06:56:bd:ce:33:9f:71:0e:25:5a:a9:a2:e5:
67:2f:6e:9a:1a:46:bd:1b:37:cc:35:fe:24:92:0f:
2b:8d:3a:1c:fc:3a:8d:f8:51:a5:b8:68:ae:48:81:
ef:7d:35:61:71:7d:d5:76:01:ad:3d:b7:4d:0b:6a:
2e:99:e2:8a:94:86:35:35:01:b9:4d:00:05:d0:86:
d7:bf:aa:76:2a:66:0d:c4:08:20:d7:9a:54:21:cb:
66:5e:f6:db:0e:ea:46:34:93:22:af:b5:f1:bd:aa:
d8:f9:11:ea:4d:01:75:75:7e:3f:cb:23:ad:0e:31:
59:ea:a4:71:16:fc:7e:1a:7b:fc:a7:0a:73:8b:6b:
2a:5a:5b:d7:d6:83:d4:0c:e4:e8:8e:79:1c:3a:2b:
b3:e7:a8:e6:e6:24:57:2b:8c:09:2c:8f:1e:f6:08:
a3:8c:e8:76:5a:b8:44:69:e1:26:65:6a:cc:f7:3e:
5d:e6:3b:e0:a5:b5:a5:11:5d:e1:6d:9f:b3:f1:30:
1a:26:22:b3:e7:f6:b7:64:5c:20:f4:b2:ec:41:53:
e1:f9:78:c4:ea:b1:de:54:12:ab:cb:78:1b:9b:ff:
77:f0:97:2f:e9:07:41:d0:a0:10:2d:ac:6e:f1:aa:
4e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5C:F5:B8:C5:27:E9:E1:91:64:8A:DB:53:6D:1E:F1:10:39:69:78
X509v3 Authority Key Identifier:
keyid:66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:55:0d:8d:50:ff:23:24:45:f9:6f:1c:13:a3:a5:f9:d3:b0:
48:84:67:dc:22:ea:22:96:b8:00:36:fe:21:e3:38:4f:03:49:
35:62:2a:50:a7:ca:b1:98:08:37:58:de:d5:80:ee:19:f1:81:
50:20:5c:6a:7a:e1:ef:a1:c7:31:83:7e:83:07:2c:c2:ac:1f:
17:2d:f9:73:ea:9c:8b:96:d5:40:ea:d7:0c:e1:62:02:c6:1b:
13:86:6f:a4:65:4d:a4:03:9b:36:7b:78:a9:d7:a6:cd:8a:78:
5e:bf:ce:e2:e3:d9:eb:db:bf:10:ef:fa:c3:e0:1a:40:63:0f:
72:83:50:42:a8:b7:2c:cb:f2:8b:41:4e:99:80:ed:4c:67:28:
4d:c8:37:6c:ae:b7:64:fb:38:b8:d4:44:ee:8a:e8:ba:d1:b8:
97:3c:f7:5b:ee:ad:23:95:e2:1b:62:2e:43:b4:33:90:d6:cf:
96:82:72:94:f5:bf:34:a3:9e:aa:b0:fd:5e:f4:e1:5c:92:b0:
1c:50:2b:47:92:49:f5:3a:af:7b:c0:fb:20:4a:86:2e:14:fc:
01:53:97:81:c7:ae:83:0c:85:95:8a:c8:c3:7e:8b:66:57:3a:
7d:24:2e:42:5d:63:3d:e5:f0:74:fc:96:a2:b1:c3:38:9f:9f:
35:2d:67:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:04:48 2026 by rpki-client