
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
File: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft (raw, json)
Hash identifier: W+WKv19/Fqed6TW+XchUbDZWJqm91+ByNtw9OwA2Fx4=
Subject key identifier: E9:EF:94:6E:0D:5C:5D:93:91:CB:3E:EC:AA:71:58:E0:E3:D3:F3:C3
Authority key identifier: 64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C
Certificate issuer: /CN=A9179581/serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C
Certificate serial: 23D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
Manifest number: 23C4
Signing time: Wed 22 Jul 2026 15:53:09 +0000
Manifest this update: Wed 22 Jul 2026 15:53:09 +0000
Manifest next update: Wed 29 Jul 2026 15:53:09 +0000
Files and hashes: 1: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl (hash: cnI7v6Ui5eQAmonSMegjnCIrSZKr1SqzHiRgoawgwYQ=)
2: E043A9A4B14511E5B83D2120C4F9AE02.roa (hash: Qn2+lYGa2h6xQsCbP0A3ivL3myO3Z5q3ATYz2Fpqscc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl
rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:53:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9173 (0x23d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179581, serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C
Validity
Not Before: Jul 22 15:53:09 2026 GMT
Not After : Jul 29 15:53:09 2026 GMT
Subject: CN=6a60e765-9b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:bd:59:5c:15:e5:7a:e1:fc:04:e9:82:ef:12:
2c:4a:80:d7:a9:74:ba:14:99:15:72:a2:c1:49:f3:
4f:0e:5b:c8:65:5a:6b:47:1b:97:82:21:26:b2:8b:
c5:20:13:df:c3:91:2f:88:66:33:20:e7:f4:bb:d7:
ca:36:e8:8e:0c:40:f9:a4:9f:67:fd:91:82:c1:f2:
5a:91:7b:0c:b7:e9:5e:ae:87:c8:96:9f:1a:96:1e:
62:11:38:04:91:3f:d8:29:d9:96:f3:11:3e:d2:9f:
c9:05:c0:70:d2:e9:48:66:df:23:4c:d4:d7:22:af:
53:71:6a:0a:31:3e:2f:80:13:d5:e2:b3:9c:f4:e6:
4e:99:f0:4e:75:26:f7:f6:ad:79:73:87:16:f1:64:
a1:d2:6d:b0:de:f4:1a:4a:01:e6:5f:1b:b5:1e:4e:
34:ee:26:72:d0:dc:62:4a:f5:70:57:86:61:5c:82:
43:98:72:42:fa:12:5f:ba:1f:90:61:4b:1b:2f:1a:
c9:4e:f0:ea:aa:67:0a:8c:f7:4b:83:14:cb:8e:6d:
5c:d7:32:93:ad:8b:0b:20:1d:fc:a8:62:11:10:1e:
5b:a2:5e:72:d6:3b:0b:39:c4:b8:64:76:4e:da:92:
15:a9:e5:60:02:84:49:1a:f1:34:f2:90:c8:85:7f:
09:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EF:94:6E:0D:5C:5D:93:91:CB:3E:EC:AA:71:58:E0:E3:D3:F3:C3
X509v3 Authority Key Identifier:
keyid:64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:c7:7d:5b:56:57:e6:fc:5b:e4:45:10:05:65:95:6e:03:21:
f6:ce:13:87:51:5b:50:f3:90:df:5f:23:e2:40:d0:f1:94:0c:
b1:a1:d3:44:98:5c:8b:e9:3b:4e:a6:02:93:d0:bf:f7:27:4d:
0b:fe:d4:f8:da:72:20:76:40:16:11:96:9a:69:e8:2e:61:c3:
b5:37:a6:ed:2b:f2:f3:20:e4:44:ee:c9:7f:13:c2:e3:57:59:
a9:fb:10:ce:84:ff:1b:cb:82:0f:8b:64:52:38:7c:d3:f3:c2:
e4:7d:f4:d4:32:2f:35:41:51:67:a0:3f:ba:3d:76:cd:50:0e:
5b:d5:b8:d2:aa:5f:0a:21:63:f2:03:a2:fb:3a:b6:67:5a:23:
3f:7b:b3:d2:38:1d:e7:5a:02:f4:ee:9c:6f:36:54:98:34:f3:
33:72:3f:66:e0:7b:a1:4a:f5:fc:95:74:96:ce:53:7b:b3:bb:
37:27:7f:6c:57:e9:1f:a8:4a:fa:6f:0d:66:a2:1d:ca:1d:4a:
b2:89:a5:4d:da:ab:71:55:40:5c:c1:20:b7:89:72:d0:9c:98:
12:5e:03:ad:7e:d8:19:a7:0a:4e:90:ad:0e:23:0a:24:ba:ae:
36:53:bc:9a:0c:bf:7e:be:eb:22:66:6e:1f:c7:ff:a8:67:c4:
47:8b:46:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:13:04 2026 by rpki-client