
$ rpki-client -vvf rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft
File: zES2e9GPRfbhN63kcxM1pVGmYSc.mft (raw, json)
Hash identifier: awdHK8Kr0QL+KJ365egzT2OyJM2lMa5YfobnyLu0DuI=
Subject key identifier: 58:5D:24:D6:1D:AF:DC:8A:A6:2F:04:97:F9:34:51:56:1D:3B:93:A5
Authority key identifier: CC:44:B6:7B:D1:8F:45:F6:E1:37:AD:E4:73:13:35:A5:51:A6:61:27
Certificate issuer: /CN=A916523A/serialNumber=CC44B67BD18F45F6E137ADE4731335A551A66127
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft
Manifest number: A9
Signing time: Wed 13 May 2026 07:19:39 +0000
Manifest this update: Wed 13 May 2026 07:19:39 +0000
Manifest next update: Wed 20 May 2026 07:19:39 +0000
Files and hashes: 1: zES2e9GPRfbhN63kcxM1pVGmYSc.crl (hash: 7KYnufUmU/lWIMM1Yj+jFlljSUmyIWt425QcZDB+n6U=)
2: 469F3FE44CDF11F08D2EFF16C4F9AE02.roa (hash: daCSAN1/L7FpC1GH73B6zID6rVi/iS9JfJ6E1UGDmuc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.crl
rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 07:19:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916523A, serialNumber=CC44B67BD18F45F6E137ADE4731335A551A66127
Validity
Not Before: May 13 07:19:39 2026 GMT
Not After : May 20 07:19:39 2026 GMT
Subject: CN=6a04260b-4409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6e:c9:81:59:79:ff:bd:1d:3b:94:82:01:2f:
5d:0d:2b:0a:c7:7b:12:ea:f9:b8:c8:20:ed:b1:34:
e4:be:bd:21:9c:90:38:a6:c6:c0:72:0b:a5:7a:e5:
58:39:d6:86:76:23:94:4a:4b:f9:85:12:6e:98:09:
fb:24:3d:bc:3c:99:12:f5:3b:b2:3f:7a:fe:e7:8f:
49:b3:5d:21:94:6a:cc:4f:a9:8b:83:ad:6d:03:5a:
c2:b0:89:d2:e3:f1:62:66:5b:25:51:df:fd:27:7d:
7b:83:51:18:84:57:a0:33:06:3c:32:9e:9c:9b:f9:
8c:27:d4:0b:f2:79:3e:a2:0d:a9:8d:84:a1:48:0d:
d8:88:39:69:e2:5e:a1:1a:e1:05:88:e7:1d:33:d4:
f6:6a:73:dc:3d:a3:a0:cf:43:da:db:2d:f2:d4:78:
6a:3c:81:ba:6a:e6:ed:b3:49:ae:82:40:9b:a5:d8:
44:96:70:52:ad:8f:5c:1a:6f:71:73:ed:da:11:dc:
be:5a:c3:e4:69:a9:c6:9f:d1:60:08:8b:9b:c3:6e:
8a:a6:12:d7:ec:17:79:8c:7c:8d:25:ee:55:9f:98:
c4:b7:d4:06:d9:e6:f7:af:2a:89:ad:e0:6d:f7:0a:
bc:0c:23:0d:09:4f:b3:51:7b:c3:0f:c8:99:f4:f6:
13:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5D:24:D6:1D:AF:DC:8A:A6:2F:04:97:F9:34:51:56:1D:3B:93:A5
X509v3 Authority Key Identifier:
keyid:CC:44:B6:7B:D1:8F:45:F6:E1:37:AD:E4:73:13:35:A5:51:A6:61:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a0:ae:a1:de:f3:7c:e6:2c:51:56:4e:88:ba:83:2d:53:8b:
44:c9:29:9f:11:3a:81:2b:75:d9:78:c0:6a:29:d0:b0:56:74:
6d:01:52:16:40:02:de:de:85:03:dd:20:32:63:a1:a0:70:84:
ec:09:e9:c2:04:79:ab:61:68:82:73:c1:fb:87:b1:da:2f:93:
af:9b:ad:3b:c5:02:08:84:43:43:e0:51:0a:ec:3d:4e:11:4b:
79:72:61:ee:37:d4:d7:38:66:8e:87:a4:33:ee:b0:ac:f0:f6:
1f:d6:66:b7:ad:d8:7a:56:42:ec:81:47:e0:94:f4:3a:c5:79:
d7:99:bc:e9:3d:d6:f6:0a:f5:ed:8c:c2:b2:42:57:ba:0a:06:
ed:0c:4a:35:11:fb:3d:23:01:58:fd:8d:ea:e3:06:b4:d3:5b:
7f:38:ee:2d:33:a6:ca:81:38:77:7b:fd:ae:a2:b0:5c:64:90:
bb:b8:ad:32:65:69:18:3e:6c:49:17:96:c6:45:0e:d2:38:17:
89:6d:85:98:73:e9:6a:c3:25:74:44:d3:61:18:31:37:44:bd:
ff:35:8c:46:fc:4c:b9:85:39:82:65:41:1a:71:49:d9:19:85:
25:6d:7a:9e:b4:a1:f7:b5:36:10:f5:bb:50:8d:eb:8a:f4:c7:
11:76:ad:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:26:37 2026 by rpki-client