
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
File: zx4OW9d7H_tTVngfYWMVjC4ve20.mft (raw, json)
Hash identifier: TfveS4mTWQyHiDo2qOz0ffn92gBgIQhoaY7mlnQp1Pk=
Subject key identifier: 24:E1:A3:FD:6D:95:BE:FA:D6:67:FE:A7:DB:10:8C:A2:C0:B0:5B:2C
Authority key identifier: CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D
Certificate issuer: /CN=A9180E90/serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D
Certificate serial: BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
Manifest number: BA
Signing time: Wed 13 May 2026 07:10:47 +0000
Manifest this update: Wed 13 May 2026 07:10:46 +0000
Manifest next update: Wed 20 May 2026 07:10:46 +0000
Files and hashes: 1: zx4OW9d7H_tTVngfYWMVjC4ve20.crl (hash: M9yc3hIPHeP1DPehp3IhJ6JrpA5bDWwcF4yC9Q5MW6I=)
2: BA6887DC396611F0A9E1DB44C4F9AE02.roa (hash: dqOqlSzXXzxd93ZJApAj30jOUASjxNUXJDLj8u2PMic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl
rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 07:10:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180E90, serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D
Validity
Not Before: May 13 07:10:46 2026 GMT
Not After : May 20 07:10:46 2026 GMT
Subject: CN=6a0423f7-11f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f9:ce:5d:49:2a:31:6f:98:3d:fc:57:d5:83:
a7:eb:b5:4e:48:26:e4:99:86:50:41:bd:bc:0a:0c:
80:01:07:59:0c:a9:aa:ae:48:f5:9a:8a:a9:b2:0b:
80:06:0d:2f:0a:6b:80:2d:53:6d:b6:0b:4d:73:d3:
e2:12:3c:ea:ee:b8:a7:49:2e:98:87:ce:85:d0:be:
25:ea:54:ca:23:c2:9e:50:7a:92:7c:90:07:75:88:
ac:ba:db:4d:6f:bc:46:f7:55:95:0d:8b:e5:75:d7:
03:42:f8:e0:32:ad:5d:05:8e:8b:a8:22:b0:fb:54:
5a:e7:6c:0b:dc:c1:7d:46:e4:61:7d:39:3c:a5:cb:
7f:a7:2b:75:d6:53:da:ef:66:9b:64:e8:94:3c:a9:
3b:02:14:3f:f1:a5:3c:79:0f:57:15:84:26:b5:57:
0a:1c:c8:cc:ea:e1:30:5f:7a:d8:67:b5:62:f7:6c:
67:da:a0:1d:8a:ad:9a:06:29:75:26:ec:d6:0b:09:
96:8b:a7:96:d6:7e:73:b8:0e:e7:49:ba:cb:a8:5e:
db:d5:ea:17:a9:00:de:74:fb:f6:cc:28:ec:65:c3:
f0:cb:68:0d:05:3f:3c:50:aa:20:6b:f7:a0:17:2f:
5b:ce:b6:8a:bb:13:7d:ff:ac:ee:0e:bf:d5:b8:0b:
be:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E1:A3:FD:6D:95:BE:FA:D6:67:FE:A7:DB:10:8C:A2:C0:B0:5B:2C
X509v3 Authority Key Identifier:
keyid:CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:fd:cc:b5:53:e3:9b:e2:27:26:32:0a:be:1a:0e:9b:76:d8:
5b:0d:df:1b:c0:f4:d3:1b:2a:06:8a:60:5e:ef:c6:0f:6b:f8:
ac:9b:80:07:ee:cf:48:5c:31:c7:bb:ae:19:cd:bf:88:cd:c9:
00:c5:5d:c3:c1:db:db:6b:b9:0d:b1:d4:f0:34:a7:1f:0b:69:
2e:ef:d3:14:de:20:c5:74:0d:d8:9f:c9:23:84:5b:9a:52:01:
70:8b:db:38:11:52:b9:f0:09:0d:d4:fc:b9:9f:fc:54:bd:c6:
cc:fd:c4:bd:a2:15:1a:99:da:1d:b8:b8:86:d3:1c:81:2b:e3:
fd:fd:33:fc:77:2b:b0:25:89:45:25:08:07:dd:68:91:2b:5b:
b8:76:35:09:ba:31:20:4b:35:34:7f:e5:d2:3c:b1:da:3b:79:
c4:67:30:eb:fe:82:98:4d:6a:a5:64:04:7f:c6:e4:6f:3b:26:
c2:6a:7b:c4:42:dc:66:36:9d:e9:ae:82:37:50:e1:12:28:d2:
57:ba:c1:07:42:e6:c6:09:33:70:63:c2:07:49:3a:8b:e9:b9:
d3:91:77:db:d6:ce:93:3c:9e:6e:0b:74:f0:7e:eb:64:40:ff:
51:d3:0c:15:f3:69:4f:70:f2:66:9b:4e:38:49:d8:89:3c:55:
b3:8b:8e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:14:48 2026 by rpki-client