
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft
File: zm6S_KABf3WmLfkoXo18IQt6vAI.mft (raw, json)
Hash identifier: oraAro2cY9l1KUlAAnIIehXSoaUhEuu2UA+pr7TCQk8=
Subject key identifier: BD:0B:E0:58:2D:82:6D:74:15:AA:7B:04:19:41:1E:A9:9B:EE:1E:8B
Authority key identifier: CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02
Certificate issuer: /CN=A9199BCC/serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02
Certificate serial: B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft
Manifest number: B6
Signing time: Wed 25 Mar 2026 06:16:56 +0000
Manifest this update: Wed 25 Mar 2026 06:16:56 +0000
Manifest next update: Wed 01 Apr 2026 06:16:56 +0000
Files and hashes: 1: zm6S_KABf3WmLfkoXo18IQt6vAI.crl (hash: rzw34LSPK+EiGJ94GTXzCHtJLDzF06S1cMZQNHTLMDk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl
rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:16:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199BCC, serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02
Validity
Not Before: Mar 25 06:16:56 2026 GMT
Not After : Apr 1 06:16:56 2026 GMT
Subject: CN=69c37dd8-153c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:74:e1:ee:8a:5f:59:64:6f:43:55:bc:23:ca:
c5:16:8f:6c:87:9a:7e:d0:d6:dd:e9:b3:21:76:fa:
2c:3c:2d:b6:4e:0b:ec:05:65:46:24:46:e6:ba:47:
44:48:aa:2d:53:67:81:52:79:db:1a:55:c6:3d:1c:
68:c7:4a:89:3d:86:e0:ce:49:f7:e7:45:91:e8:ae:
56:90:79:2e:71:a8:0b:f5:fa:a7:d1:1f:5e:ec:82:
24:11:07:dc:fc:76:3b:99:c8:4e:cd:a2:57:f1:95:
96:2e:f0:fe:c7:9d:2f:9a:0a:61:f2:aa:f4:7e:f4:
45:95:6a:15:ae:fb:ef:eb:80:83:6f:51:64:1d:c2:
d7:07:b7:6b:fa:47:8c:82:c9:38:c2:75:d8:84:3a:
e6:64:6a:9a:9f:e8:a6:ea:5b:52:d9:96:69:07:a0:
84:37:cc:66:41:c8:9d:74:5b:06:7f:03:91:4e:bb:
a0:79:5d:e2:8d:e4:bf:73:bf:a8:c5:47:01:87:0d:
bc:d1:52:86:6a:87:f2:63:7c:92:37:5e:51:20:64:
21:6d:84:e6:2b:8f:76:35:3d:0d:10:d1:d1:a6:75:
6c:fa:ad:2a:5c:1c:a7:f9:5e:db:f9:10:53:45:6e:
9e:97:1a:48:ee:5d:06:a3:e2:d6:f8:9a:ed:72:c1:
fb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0B:E0:58:2D:82:6D:74:15:AA:7B:04:19:41:1E:A9:9B:EE:1E:8B
X509v3 Authority Key Identifier:
keyid:CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ab:0c:13:b3:c8:fb:22:63:e2:97:5c:93:45:6a:80:70:6e:
90:8e:0c:23:cf:25:6e:73:4a:b9:a6:58:65:b3:94:43:52:74:
91:9a:fa:d1:6c:28:f7:cf:56:1b:35:29:41:a5:a5:1f:c2:0c:
3c:80:ca:f4:80:b7:3d:9c:29:1c:52:c5:8f:91:31:80:c2:17:
7b:03:5d:70:6d:dd:56:3e:e1:75:95:b3:0a:81:df:1c:d7:28:
79:fa:2f:a6:b2:63:d0:91:88:73:88:e3:8a:38:2f:b4:a1:9f:
d4:52:73:d5:ea:91:fb:5e:8b:62:5d:7c:50:eb:85:bf:e8:48:
3b:8d:7a:e9:56:23:af:b0:98:7f:a9:34:6b:1c:57:80:99:fc:
17:51:56:3e:71:d8:4e:ce:27:86:f0:3f:82:75:1e:58:69:5e:
95:93:7a:cb:5d:60:8c:7c:28:91:21:96:52:96:48:f9:c2:57:
eb:77:99:6f:9f:56:a5:11:d1:b7:b3:a4:21:47:bd:ca:45:14:
02:6a:64:f8:fa:92:73:9f:0e:4f:d7:06:46:74:3e:67:ee:fd:
af:de:37:2e:a3:44:d5:be:60:41:f1:4b:7f:c3:3a:08:63:37:
1a:1e:8c:2e:1b:20:5e:e9:b4:0e:30:b8:ec:b3:dd:1c:31:6e:
36:92:ac:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:03:17 2026 by rpki-client