
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
File: _Z1_Zg86Ewyki-u6ZuFivTA0440.mft (raw, json)
Hash identifier: GnEp/Hdz66oygcuN/bvYCSBBAU/UOSI0q9S0O27jKgU=
Subject key identifier: 24:71:3D:B8:51:93:D5:69:08:34:D8:34:D0:38:E1:89:17:63:C3:BE
Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D
Certificate issuer: /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
Certificate serial: 0142
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
Manifest number: 0137
Signing time: Mon 11 May 2026 05:44:19 +0000
Manifest this update: Mon 11 May 2026 05:44:19 +0000
Manifest next update: Mon 18 May 2026 05:44:19 +0000
Files and hashes: 1: _Z1_Zg86Ewyki-u6ZuFivTA0440.crl (hash: lJKzLWGdMqAQ8yGjo+AU1WtbhT8EqceWat1OwaPFca4=)
2: F9EB418CFEAB11F094E473AD656F56BC.roa (hash: ZCVaqB4e05gjNJd4/Bm9ycXqQQacD3faAo8D3OnwhT0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl
rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:44:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322 (0x142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160C9E, serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
Validity
Not Before: May 11 05:44:19 2026 GMT
Not After : May 18 05:44:19 2026 GMT
Subject: CN=6a016cb3-1a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e3:cf:8f:46:34:49:15:ed:64:1a:91:e7:46:
34:67:3e:bb:62:22:6c:cd:75:12:55:e5:f0:ab:1e:
61:74:0e:03:0c:ec:7c:d9:39:cb:f2:4a:0e:71:8e:
71:06:51:ed:0b:02:37:4d:cc:90:5f:ec:ba:10:be:
76:6a:98:d8:5c:c4:e1:58:25:78:c8:77:9c:08:be:
aa:41:b2:f1:88:11:93:e1:35:91:25:e1:8d:e8:6d:
1c:69:f9:fd:e3:1e:ff:a1:6d:11:a4:6d:ac:e3:59:
bc:16:49:45:1f:30:92:2a:34:ae:fe:4e:1a:2c:57:
78:68:c5:17:4f:d1:ed:e3:87:6e:06:78:bb:08:48:
d0:62:2a:91:e2:81:2c:fa:09:0c:9c:47:ed:91:ef:
60:b6:2e:4d:66:e3:55:4e:e0:ec:fc:7e:a3:5d:4d:
07:45:a4:e5:d4:8c:7c:23:f1:b8:43:40:1c:2b:aa:
81:22:38:ca:92:65:cd:54:76:27:8f:50:7e:78:d3:
e7:b6:6a:10:b7:12:e4:b9:4c:b4:bf:37:13:50:33:
d3:c2:18:0d:e5:1a:f8:82:5f:ba:83:3d:4d:bb:35:
2f:1f:cf:e2:58:64:4c:0a:1e:f1:8e:9d:d2:a8:5e:
2c:fc:23:b1:3e:d8:30:2f:10:e5:c0:b6:f0:0d:20:
f8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:71:3D:B8:51:93:D5:69:08:34:D8:34:D0:38:E1:89:17:63:C3:BE
X509v3 Authority Key Identifier:
keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0e:03:48:d4:73:7f:28:15:3f:28:52:a7:fd:ce:98:9a:96:
c6:ec:48:1f:0d:b8:ee:29:fa:77:50:fd:e5:95:50:f3:e4:ef:
f2:3d:77:96:5c:7e:e5:9e:cb:8a:d9:a3:ce:ed:03:59:f5:74:
e6:f3:27:f5:b6:6b:7c:ad:81:2c:45:f6:a9:8c:9e:7e:f0:0d:
c8:b1:a5:c0:c9:de:88:cd:8d:8d:a6:6f:21:ce:9e:58:7b:dd:
03:6f:1e:a8:29:e7:a2:6c:24:6d:ee:4f:2a:48:10:19:a8:c4:
04:80:5a:4a:6c:19:87:23:e7:34:7c:7d:37:6b:67:32:20:ad:
e4:ec:40:d6:fc:6c:ad:b9:fd:bc:5f:0a:c4:0e:e0:86:c4:63:
8f:c6:79:ed:9f:ba:96:2a:1e:e1:7c:9c:57:65:21:52:db:f1:
a2:c6:96:5c:fd:4f:65:d8:dd:40:a8:23:41:9f:b4:48:c0:e6:
a6:88:d9:50:65:85:ec:bf:33:52:60:4a:67:cc:c3:58:07:85:
80:2c:1a:da:52:6a:2e:e6:14:b2:46:37:10:48:ac:c9:62:f7:
04:ef:90:74:5a:6f:28:9d:e2:21:bb:53:ff:35:bf:2f:b6:51:
5c:f7:e5:81:fe:84:05:62:3a:f7:64:10:67:eb:93:2c:6c:76:
1c:39:9c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:11:28 2026 by rpki-client