
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
File: zEJAcHQQNjc16_bvsZT7Zw80X0I.mft (raw, json)
Hash identifier: v85ZploL1/2fosULGb98id5NYMctmuCyVhLGYNW1+fQ=
Subject key identifier: EC:74:1E:AC:51:3B:71:F0:1D:30:66:31:64:19:A1:43:FA:11:92:E6
Authority key identifier: CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42
Certificate issuer: /CN=A9160AEE/serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
Certificate serial: BB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
Manifest number: AB
Signing time: Thu 23 Jul 2026 09:16:19 +0000
Manifest this update: Thu 23 Jul 2026 09:16:19 +0000
Manifest next update: Thu 30 Jul 2026 09:16:19 +0000
Files and hashes: 1: zEJAcHQQNjc16_bvsZT7Zw80X0I.crl (hash: KGO84f3FF2+kue3hpYrX3tuT5e7rF4QnJYT++6Mi6GI=)
2: 6FBBA45AFD2711F0B1802E18426F56BC.roa (hash: InU5YhYgQdECTfOQlDj5F02bMyaCjuUJFEGGYk6O1Jc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl
rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:16:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160AEE, serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
Validity
Not Before: Jul 23 09:16:19 2026 GMT
Not After : Jul 30 09:16:19 2026 GMT
Subject: CN=6a61dbe3-1752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6b:96:6d:6e:19:ee:76:cd:28:4c:26:17:d8:
d4:a8:73:4a:70:6f:ab:22:6f:4f:5b:ed:91:b2:df:
a4:7c:59:ce:0a:e5:50:95:b3:2c:d3:19:f6:0c:71:
e3:48:c0:fe:b9:70:0c:e7:b1:7c:f6:3b:39:9d:f5:
67:d6:da:fb:c5:3c:63:34:b3:3a:86:19:c0:a3:d0:
bc:0a:20:d9:9e:e4:26:88:36:1f:b6:04:82:58:72:
dc:42:e2:1a:67:e8:b0:ca:59:9f:38:59:bc:bd:d3:
16:dc:ba:9e:a6:bd:6c:76:a4:cf:13:81:42:fb:b2:
9a:b4:26:1d:a4:b5:6e:30:1c:4c:33:aa:54:a6:18:
3d:9a:4f:d7:a7:80:27:db:46:67:8d:08:d5:8e:20:
56:c5:00:43:90:32:a7:58:e5:aa:14:b6:51:3d:58:
38:8d:6e:c0:8c:99:d1:78:26:30:4a:fd:00:23:53:
06:c8:2f:ff:00:ec:9b:ad:72:dd:bd:ab:e2:a9:57:
d7:f7:82:97:90:3d:4b:3b:59:63:71:c4:80:02:e6:
20:0a:d9:c0:47:0e:ad:a0:ed:31:7e:1d:aa:e0:45:
be:a5:a9:ad:2b:cd:88:34:02:98:14:86:b7:e2:58:
34:66:7b:64:31:de:9f:40:71:d2:31:e3:24:af:23:
49:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:74:1E:AC:51:3B:71:F0:1D:30:66:31:64:19:A1:43:FA:11:92:E6
X509v3 Authority Key Identifier:
keyid:CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:43:e8:97:bf:d3:9e:47:c5:51:3a:94:ca:0c:44:26:a2:53:
38:fc:e7:e0:12:de:4f:0e:36:85:b8:d0:e0:d5:2b:6e:7e:30:
ea:4b:82:bc:9b:46:97:48:b4:a1:48:99:3b:a9:32:2b:23:c4:
75:c6:dd:c3:92:4a:2c:d1:c2:8b:3a:97:35:e6:8a:65:26:03:
56:f5:e7:b9:0f:74:a3:97:fb:42:32:d3:8c:b8:48:56:90:30:
a4:89:10:11:2a:d5:3d:b2:f8:e0:64:42:98:8c:06:a7:46:b6:
1c:31:4f:4f:33:cb:0d:4c:27:7c:7a:84:aa:54:68:a2:3d:4f:
fa:3d:79:ae:e4:07:e5:1c:19:a8:36:d0:2e:ea:55:13:ec:ae:
9c:29:c6:3a:1e:fc:e6:16:1e:62:76:6d:e2:bc:60:03:3b:44:
24:93:f8:fd:40:18:94:86:f7:4c:f9:a0:68:dd:af:72:6f:35:
f1:41:4f:99:59:58:a6:b6:6c:76:6a:19:6e:a5:7f:fe:89:7c:
48:8e:7f:27:7e:03:92:ff:b2:57:7c:5c:e7:f6:68:37:eb:51:
03:37:72:56:fe:02:af:d3:c8:f6:9e:71:89:19:bb:56:27:63:
53:16:0b:67:7f:85:82:6f:72:bf:0b:21:a7:2f:49:e4:2e:b5:
db:cb:c0:72
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBBRUUxMTAvBgNVBAUTKENDNDI0MDcwNzQxMDM2MzczNUVCRjZFRkIxOTRGQjY3
MEYzNDVGNDIwHhcNMjYwNzIzMDkxNjE5WhcNMjYwNzMwMDkxNjE5WjAYMRYwFAYD
VQQDEw02YTYxZGJlMy0xNzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo2uWbW4Z7nbNKEwmF9jUqHNKcG+rIm9PW+2Rst+kfFnOCuVQlbMs0xn2DHHj
SMD+uXAM57F89js5nfVn1tr7xTxjNLM6hhnAo9C8CiDZnuQmiDYftgSCWHLcQuIa
Z+iwylmfOFm8vdMW3Lqepr1sdqTPE4FC+7KatCYdpLVuMBxMM6pUphg9mk/Xp4An
20ZnjQjVjiBWxQBDkDKnWOWqFLZRPVg4jW7AjJnReCYwSv0AI1MGyC//AOybrXLd
vaviqVfX94KXkD1LO1ljccSAAuYgCtnARw6toO0xfh2q4EW+pamtK82INAKYFIa3
4lg0ZntkMd6fQHHSMeMkryNJ4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOx0HqxR
O3HwHTBmMWQZoUP6EZLmMB8GA1UdIwQYMBaAFMxCQHB0EDY3Nev277GU+2cPNF9C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEFFRS8xODhDQUYwNkEz
RUMxMUYwQjhFOTdGMzdDNEY5QUUwMi96RUpBY0hRUU5qYzE2X2J2c1pUN1p3ODBY
MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3pFSkFjSFFRTmpjMTZfYnZzWlQ3Wnc4MFgwSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MEFFRS8xODhDQUYwNkEzRUMxMUYwQjhFOTdGMzdDNEY5QUUwMi96RUpBY0hRUU5q
YzE2X2J2c1pUN1p3ODBYMEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUEPol7/TnkfFUTqUygxEJqJTOPzn4BLeTw42hbjQ4NUrbn4w6kuCvJtGl0i0
oUiZO6kyKyPEdcbdw5JKLNHCizqXNeaKZSYDVvXnuQ90o5f7QjLTjLhIVpAwpIkQ
ESrVPbL44GRCmIwGp0a2HDFPTzPLDUwnfHqEqlRooj1P+j15ruQH5RwZqDbQLupV
E+yunCnGOh785hYeYnZt4rxgAztEJJP4/UAYlIb3TPmgaN2vcm818UFPmVlYprZs
dmoZbqV//ol8SI5/J34Dkv+yV3xc5/ZoN+tRAzdyVv4Cr9PI9p5xiRm7VidjUxYL
Z3+Fgm9yvwshpy9J5C6128vAcg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:59:33 2026 by rpki-client