
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
File: ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft (raw, json)
Hash identifier: vEC3LMBR6JhZLawwl56zbA7/cwjcluyqf8Rm3T9JUJg=
Subject key identifier: 0F:87:85:7A:7D:13:1B:1E:6C:BB:82:E8:05:88:69:F2:0D:79:81:4B
Authority key identifier: 65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB
Certificate issuer: /CN=A9157A68/serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB
Certificate serial: 08D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
Manifest number: 08C6
Signing time: Tue 12 May 2026 20:29:39 +0000
Manifest this update: Tue 12 May 2026 20:29:39 +0000
Manifest next update: Tue 19 May 2026 20:29:39 +0000
Files and hashes: 1: ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl (hash: s8YnAaAfe2iDo1eEn4FEJtYvVIP9bEFalWDTObYahX8=)
2: 294CEBA68FDD11EDBC45E84DC4F9AE02.roa (hash: hgHBm4hp3RapLpi/uDm+lqvL2Jv07HJ2pVNo82bX6vM=)
3: CCB2690EED0B11F0949792B43C6F56BC.roa (hash: CZgH9sRalQIh6CRftMF2d66cWrAC6h6CJtvjvDnCQhA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl
rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2263 (0x8d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157A68, serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB
Validity
Not Before: May 12 20:29:39 2026 GMT
Not After : May 19 20:29:39 2026 GMT
Subject: CN=6a038db3-7c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:75:81:3a:f2:55:10:73:9c:ec:21:7f:21:e0:
c7:ab:86:38:47:27:bc:92:20:48:40:5c:b7:f2:f0:
76:7a:54:32:f1:d5:6f:2c:1c:85:cd:9d:3a:c4:54:
7a:ac:7b:0e:13:1c:75:45:b5:1f:68:d3:83:50:77:
42:28:25:35:8e:9e:3e:11:1a:e0:be:e9:82:3a:b2:
ae:27:41:8b:ce:92:6f:62:a0:f7:99:e4:1f:1c:d7:
c3:90:fb:b7:43:f2:62:ec:49:35:e3:09:01:5e:97:
4d:25:57:7e:8a:95:d7:d1:68:43:f6:7b:9a:51:13:
9c:d8:f4:fd:83:9c:d5:d8:09:ec:5a:16:b1:60:b5:
50:2e:93:f3:ca:97:17:ae:67:16:eb:77:ad:a1:34:
17:ac:38:31:9e:99:d5:a1:6f:b3:57:b2:aa:4e:ef:
66:52:be:75:50:85:24:4b:f5:fa:dc:fa:ab:c4:d1:
7a:7d:5a:86:d9:3d:30:b2:ae:42:f8:21:fc:56:b3:
6b:f3:d7:61:76:20:87:f9:00:93:8a:eb:23:7f:d5:
28:97:bc:37:94:62:e1:8e:b0:c0:cf:d2:8b:ff:58:
9a:0f:a0:49:85:50:61:1e:f7:93:99:ac:4c:0b:60:
09:a2:c1:ef:8e:af:29:29:d9:dc:d2:ff:82:f4:79:
6a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:87:85:7A:7D:13:1B:1E:6C:BB:82:E8:05:88:69:F2:0D:79:81:4B
X509v3 Authority Key Identifier:
keyid:65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:a3:61:c8:7c:da:4a:f4:80:7a:02:60:2b:88:01:57:51:e8:
b1:5e:37:63:ba:0f:96:ad:07:49:e8:b1:ba:e7:b0:96:43:90:
5d:72:9b:83:90:01:d4:fb:62:86:c6:52:4c:61:d7:d0:ee:eb:
01:91:cd:9e:38:d2:0d:7d:1d:0d:cc:ee:f0:17:b7:7a:1e:e5:
33:85:97:fb:da:c7:7c:2d:6a:e8:49:d5:63:82:25:a5:51:fa:
3f:7f:eb:0c:d7:64:7e:53:43:00:7a:65:5e:29:ae:53:8b:61:
1c:06:26:3b:c0:21:42:5c:f9:93:45:70:3f:3f:af:78:b2:1b:
7f:d3:39:8c:d7:22:8c:6d:6e:6b:f2:0e:c1:59:17:aa:a6:07:
31:08:42:f0:37:0a:f2:5a:29:e0:98:aa:b8:0a:40:ae:37:e5:
38:b3:ae:46:91:25:be:50:86:b0:0f:f2:55:da:80:70:f3:84:
75:5e:e2:5d:dc:d6:9e:40:2b:03:11:75:11:9a:3a:cb:11:40:
cf:b0:15:f4:99:f6:c2:93:28:50:ef:8f:2d:ca:08:69:13:97:
43:4f:c6:cb:60:d4:a2:1d:48:a7:2a:d3:a9:45:18:b9:e1:82:
be:26:b0:20:86:9a:b1:03:36:99:de:a9:5d:4f:bf:54:25:5d:
0d:2b:0e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:27:52 2026 by rpki-client