
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
File: ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft (raw, json)
Hash identifier: AuOT2pw0cSGTQoSIvZTX6C9XEBN34cFX0lZEbDTYIYk=
Subject key identifier: 7B:AC:F3:B9:49:19:F5:F9:58:F5:65:37:00:C6:11:0D:36:5B:71:5F
Authority key identifier: 64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44
Certificate issuer: /CN=A914E3F8/serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444
Certificate serial: 09B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
Manifest number: 09B5
Signing time: Tue 12 May 2026 19:58:40 +0000
Manifest this update: Tue 12 May 2026 19:58:40 +0000
Manifest next update: Tue 19 May 2026 19:58:40 +0000
Files and hashes: 1: ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl (hash: KWct0jN7eiInVMhtz++qBRuUxgjKJzccy2XBRhqH31s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl
rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:58:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2486 (0x9b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E3F8, serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444
Validity
Not Before: May 12 19:58:40 2026 GMT
Not After : May 19 19:58:40 2026 GMT
Subject: CN=6a038670-0f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3a:16:67:34:08:2a:a8:f7:19:ec:58:cd:ed:
29:1a:38:f6:55:bc:7c:7c:b5:91:6a:7a:ce:5a:20:
25:bf:32:05:6a:d1:77:e1:3c:bb:9b:5b:4d:39:b2:
8c:da:ee:16:ce:4d:e8:93:1d:cf:2c:b1:ac:9d:38:
55:20:b1:b8:ac:b4:18:f0:34:d3:c6:55:16:05:a3:
9c:34:2b:99:c7:b1:50:ea:5b:d0:17:96:33:9b:ab:
d4:f1:bb:b4:eb:8c:8f:4a:7d:4c:36:ee:5a:f5:b2:
0e:76:42:10:50:19:b8:c3:b8:48:f2:95:42:5d:69:
d3:94:53:2b:48:91:c1:b7:4b:1c:70:57:d9:96:bc:
21:f3:2d:b5:12:17:9a:b8:7b:ed:3a:62:5c:ab:f8:
9b:50:07:3a:83:5c:4b:84:e1:af:bf:50:aa:53:82:
97:aa:25:de:84:ae:23:f2:d4:6f:ea:20:97:da:21:
f6:17:26:97:52:5c:e6:d4:5a:b3:be:60:7c:ef:30:
24:9a:cf:27:b5:be:89:2d:29:00:b4:ac:f6:d1:97:
eb:bf:c7:05:7a:81:f4:b7:b3:44:9d:64:31:85:37:
d6:0e:a8:bd:f1:b5:84:25:ee:71:02:52:0a:41:5b:
73:0a:98:2b:7d:db:0e:f9:8a:bb:89:1f:5c:52:37:
56:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AC:F3:B9:49:19:F5:F9:58:F5:65:37:00:C6:11:0D:36:5B:71:5F
X509v3 Authority Key Identifier:
keyid:64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:64:3f:ac:06:a5:84:4f:07:39:70:38:19:a5:54:e4:58:43:
c4:52:35:81:3a:fb:44:35:15:d6:d3:2c:59:dc:dc:3e:8e:8a:
84:b2:fa:7e:c9:28:83:5b:d6:7b:f1:8f:02:82:1b:bb:37:97:
84:53:cc:88:23:c1:62:6a:d4:55:28:0b:fb:f4:89:12:20:7b:
4a:86:e0:f6:76:9c:71:8d:0d:53:71:39:52:d5:b9:a2:0f:8e:
3d:5e:bb:3e:59:0e:79:38:bd:06:41:05:62:09:78:76:97:14:
b9:82:7d:df:32:75:07:6d:ee:ba:a3:07:a9:39:1a:42:d8:48:
21:fe:ad:af:f5:ae:69:f7:cb:75:2d:29:d0:41:40:9e:9c:7a:
ff:39:07:b8:16:a6:04:ba:b2:84:81:28:3d:3e:06:fe:32:9c:
59:e9:d0:ff:ab:f4:2e:fc:cf:48:e6:66:77:25:7d:48:79:e2:
db:46:95:2a:6d:98:35:ef:50:3d:93:1a:cd:9f:26:73:d5:16:
21:1d:a6:b6:57:b5:f6:a1:52:f7:63:ec:4a:1b:44:3f:40:46:
eb:e5:8f:ab:67:a3:c3:62:29:53:62:8d:e2:9b:4e:e3:9e:46:
55:f7:27:32:61:3f:a3:78:f2:42:0a:3d:fc:2d:9c:d4:b4:f8:
25:75:bc:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEUzRjgxMTAvBgNVBAUTKDY0RjZGNzg2QjhFQzg2OUM3NjY4NkFGM0M5OUJDNDdC
OTlGREQ0NDQwHhcNMjYwNTEyMTk1ODQwWhcNMjYwNTE5MTk1ODQwWjAYMRYwFAYD
VQQDEw02YTAzODY3MC0wZjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0zoWZzQIKqj3GexYze0pGjj2Vbx8fLWRanrOWiAlvzIFatF34Ty7m1tNObKM
2u4Wzk3okx3PLLGsnThVILG4rLQY8DTTxlUWBaOcNCuZx7FQ6lvQF5Yzm6vU8bu0
64yPSn1MNu5a9bIOdkIQUBm4w7hI8pVCXWnTlFMrSJHBt0sccFfZlrwh8y21Ehea
uHvtOmJcq/ibUAc6g1xLhOGvv1CqU4KXqiXehK4j8tRv6iCX2iH2FyaXUlzm1Fqz
vmB87zAkms8ntb6JLSkAtKz20Zfrv8cFeoH0t7NEnWQxhTfWDqi98bWEJe5xAlIK
QVtzCpgrfdsO+Yq7iR9cUjdWgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHus87lJ
GfX5WPVlNwDGEQ02W3FfMB8GA1UdIwQYMBaAFGT294a47Iacdmhq88mbxHuZ/dRE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTNGOC9EQzRBNEUxMEE2
REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hweDJhR3J6eVp2RWU1bjkx
RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pQYjNocmpzaHB4MmFHcnp5WnZFZTVuOTFFUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTNGOC9EQzRBNEUxMEE2REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hw
eDJhR3J6eVp2RWU1bjkxRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADWQ/rAalhE8HOXA4GaVU5FhDxFI1gTr7RDUV1tMsWdzcPo6KhLL6fskog1vW
e/GPAoIbuzeXhFPMiCPBYmrUVSgL+/SJEiB7Sobg9naccY0NU3E5UtW5og+OPV67
PlkOeTi9BkEFYgl4dpcUuYJ93zJ1B23uuqMHqTkaQthIIf6tr/WuaffLdS0p0EFA
npx6/zkHuBamBLqyhIEoPT4G/jKcWenQ/6v0LvzPSOZmdyV9SHni20aVKm2YNe9Q
PZMazZ8mc9UWIR2mtle19qFS92PsShtEP0BG6+WPq2ejw2IpU2KN4ptO455GVfcn
MmE/o3jyQgo9/C2c1LT4JXW8LA==
-----END CERTIFICATE-----
Generated at Wed May 13 04:18:09 2026 by rpki-client