
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft
File: ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft (raw, json)
Hash identifier: cos+CcXA6cSPqbnJHOuU5KphI+FTa/fTi3j5Sn0y774=
Subject key identifier: D6:C8:E8:7B:C3:A5:61:9F:9B:4D:B0:87:70:C7:42:F4:FD:BC:FB:52
Authority key identifier: 66:C3:06:D2:3F:8B:FE:AA:A4:4C:CC:C5:57:39:69:51:F9:86:C6:BD
Certificate issuer: /CN=A914DA9E/serialNumber=66C306D23F8BFEAAA44CCCC557396951F986C6BD
Certificate serial: CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft
Manifest number: C7
Signing time: Wed 13 May 2026 06:59:14 +0000
Manifest this update: Wed 13 May 2026 06:59:14 +0000
Manifest next update: Wed 20 May 2026 06:59:14 +0000
Files and hashes: 1: ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl (hash: Q1JeO2BnyKPu56eEhja6g04Le5ZK/SjCiCKlfYqD/2M=)
2: 7E10232C1F3411F0BFBD616EC4F9AE02.roa (hash: g6ZOMPer13oWyUer/cv/Q5t8hsmoiUkPO4tVUIkbk2c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl
rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:22:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DA9E, serialNumber=66C306D23F8BFEAAA44CCCC557396951F986C6BD
Validity
Not Before: May 13 06:59:14 2026 GMT
Not After : May 20 06:59:14 2026 GMT
Subject: CN=6a042142-e2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:ef:9e:44:a9:b8:b9:46:78:80:19:11:54:
b4:e5:f0:50:2e:5d:f4:11:50:51:91:64:9b:c6:4f:
9b:e3:ba:41:76:64:eb:a7:56:28:cf:72:d1:4a:59:
42:e6:60:95:3d:3f:84:0f:6f:89:74:29:10:45:b9:
4f:84:ff:10:4d:2e:b7:2a:cb:ef:80:cb:55:02:24:
52:c2:f4:d1:12:21:34:13:31:19:48:be:9b:65:39:
9f:36:7a:a6:d5:ed:49:5f:e9:46:f3:3a:e0:21:d9:
67:9c:88:6e:c9:03:01:f2:d4:a0:a8:e9:f6:09:b5:
65:28:2b:20:ff:09:07:2f:f3:59:18:a8:76:7a:a4:
5d:cc:8b:29:53:0e:29:aa:75:54:0b:d8:65:04:f2:
df:f8:1f:62:ff:6c:88:3d:57:39:a2:9b:3b:ce:27:
d4:29:96:d9:83:a9:e0:0d:42:93:f6:ff:12:ce:bc:
ea:f2:16:46:42:28:f9:3b:fb:e9:79:11:62:4d:42:
2f:4c:a4:59:db:ef:d2:8d:7b:28:f2:00:e4:04:68:
55:5a:1b:f3:f4:8d:1d:71:81:b2:8c:bf:32:0c:63:
84:73:bd:6f:a7:7a:6d:3a:31:50:97:e0:4c:ae:de:
29:68:97:32:45:ea:9d:c9:9a:90:9c:c5:01:77:bb:
f3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C8:E8:7B:C3:A5:61:9F:9B:4D:B0:87:70:C7:42:F4:FD:BC:FB:52
X509v3 Authority Key Identifier:
keyid:66:C3:06:D2:3F:8B:FE:AA:A4:4C:CC:C5:57:39:69:51:F9:86:C6:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:96:74:2a:a3:1d:28:57:26:82:d7:2c:6a:3f:52:e2:0b:ee:
7d:4f:31:1b:c3:40:64:10:ff:77:f9:b1:70:23:c9:61:87:61:
14:85:11:d5:e1:fd:12:71:26:2b:11:4f:59:f8:04:0e:25:44:
b5:08:94:aa:66:0f:10:34:e5:9b:bd:c7:c1:3a:d5:8e:4d:68:
c6:2b:2b:d3:70:ed:4d:69:31:32:b6:69:90:a7:06:18:5b:b6:
bc:91:5e:de:3a:14:0c:1c:f1:4f:05:41:0f:1b:fa:58:5c:2f:
b1:6b:1d:61:d9:34:a1:c8:b1:40:9f:b4:97:c8:5c:11:f8:23:
ee:eb:9c:69:46:a9:0a:e5:6c:c8:8b:d0:7a:61:b1:6d:5c:1f:
9a:53:4c:52:78:51:3d:01:00:e7:58:1f:af:ce:33:73:b7:57:
2a:a9:8f:ff:2f:23:1b:bb:07:70:6d:a2:b7:7a:32:c6:88:fa:
3c:d7:ab:10:62:eb:1e:0b:0c:a6:e7:5c:03:e8:09:9e:f6:3f:
77:65:7f:11:f0:08:28:ff:dd:ca:08:d1:ca:00:82:ef:e8:4d:
68:89:ac:69:4a:a2:dc:82:fb:a1:6d:f8:19:e3:a6:66:c4:7e:
38:74:06:49:13:ee:07:bf:6a:e2:58:bd:56:30:ea:3f:32:60:
f7:fc:1d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:29:31 2026 by rpki-client