
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
File: zEJAcHQQNjc16_bvsZT7Zw80X0I.mft (raw, json)
Hash identifier: n6payuk2+8zO2J3ojAvF9e1t/oem7VYs2tS5z8/2O/A=
Subject key identifier: 42:50:1B:69:F2:20:4A:39:78:EA:81:60:12:43:0D:6C:1C:16:08:60
Authority key identifier: CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42
Certificate issuer: /CN=A9160AEE/serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
Manifest number: 87
Signing time: Mon 11 May 2026 07:58:29 +0000
Manifest this update: Mon 11 May 2026 07:58:28 +0000
Manifest next update: Mon 18 May 2026 07:58:28 +0000
Files and hashes: 1: zEJAcHQQNjc16_bvsZT7Zw80X0I.crl (hash: RSMnmEhNRmqjqPtwK3QV2Uv4g/8D6ZXZV+EAo5regLY=)
2: 6FBBA45AFD2711F0B1802E18426F56BC.roa (hash: InU5YhYgQdECTfOQlDj5F02bMyaCjuUJFEGGYk6O1Jc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl
rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:58:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160AEE, serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
Validity
Not Before: May 11 07:58:28 2026 GMT
Not After : May 18 07:58:28 2026 GMT
Subject: CN=6a018c25-4d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b7:2c:fa:cb:73:bd:c2:2f:92:28:47:3d:79:
2c:77:5f:68:8b:7c:7d:90:4c:45:b1:79:6c:66:98:
eb:20:00:87:2a:26:dc:7c:f8:2b:9a:65:d3:b8:e7:
4d:63:27:10:fe:23:a9:16:a4:bf:8c:c1:3d:c3:f4:
4a:86:d5:37:67:55:4b:7b:07:08:ba:bf:2c:47:9f:
54:fc:0e:5a:75:c4:d4:db:83:1d:eb:98:62:bc:f6:
4e:0a:9e:2b:8a:f2:4e:57:05:67:fb:87:25:2e:6f:
99:a9:6a:ae:2a:f5:b3:37:2f:29:94:fc:89:d0:09:
c5:ed:f4:d5:65:3d:44:3c:67:75:b1:d2:63:3f:41:
96:11:4d:47:61:f5:79:c6:99:d2:2b:d4:03:08:5f:
0a:50:4a:91:2c:3d:0e:10:68:f4:90:76:bd:eb:7e:
87:de:fd:14:a1:55:72:26:bc:72:c1:19:8d:5d:04:
86:1b:e5:e3:d6:2a:13:a5:3d:16:20:7d:05:56:6f:
6d:17:83:f8:91:c8:db:74:91:c1:c8:4f:fc:ec:1a:
a5:1d:56:d2:4b:ff:b1:ce:11:54:6b:58:62:72:f3:
f8:8a:ad:cf:04:b3:72:b4:ed:85:dd:29:7a:b0:e6:
21:3d:5f:3a:45:89:39:5b:36:fe:25:f5:77:9a:06:
9b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:50:1B:69:F2:20:4A:39:78:EA:81:60:12:43:0D:6C:1C:16:08:60
X509v3 Authority Key Identifier:
keyid:CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:0c:dc:89:0a:b4:4d:49:35:a7:3e:36:d5:f7:0f:61:09:d4:
79:92:9d:ac:dd:07:8a:fc:5c:02:45:93:37:ae:28:31:c1:df:
da:45:1c:01:12:33:01:ab:9d:26:77:56:95:80:29:27:8b:45:
58:34:86:de:27:c6:5e:d0:d1:1a:bc:35:21:66:65:ec:4a:bd:
8a:eb:71:e5:fb:20:63:1a:d2:f3:d4:da:12:5f:d9:16:52:ef:
d3:b5:1e:61:28:15:43:96:74:bd:1b:40:94:6e:f1:2e:91:98:
1b:41:a6:34:0c:3c:f9:c2:6e:57:b7:94:bf:48:48:20:98:9c:
dd:ec:85:91:77:11:32:7f:7c:f8:e7:78:cc:2f:a7:f9:8b:da:
5a:1b:f2:6b:e7:ca:e3:15:ef:68:df:d3:f7:f1:91:b5:af:9d:
ac:3b:c0:73:32:04:8c:8e:71:cb:11:79:4b:f1:a1:86:c2:6c:
e3:5f:a7:52:d9:79:08:a6:f4:91:6c:84:bd:0c:38:0e:4c:ea:
98:b6:4c:ac:d2:94:96:68:12:dd:77:2d:e8:8d:5a:87:5c:ae:
8f:d1:dc:f3:94:bc:07:af:70:63:42:cb:8b:c3:26:73:5c:45:
bf:a0:d8:87:70:24:63:e0:1d:a0:9e:9a:14:80:f2:3d:c1:18:
39:f3:ab:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:03:19 2026 by rpki-client