
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
File: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft (raw, json)
Hash identifier: nIkRRdHz+aWDR4np88GfkUk5dYtZoXQomk5b9Qw4KQo=
Subject key identifier: 20:0E:59:01:C0:CC:9A:9C:1F:2A:81:55:DF:1F:EC:B9:BF:E3:CC:42
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Certificate issuer: /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial: 0244
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
Manifest number: 0206
Signing time: Fri 25 Sep 2026 03:42:58 +0000
Manifest this update: Fri 25 Sep 2026 03:42:58 +0000
Manifest next update: Fri 02 Oct 2026 03:42:58 +0000
Files and hashes: 1: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl (hash: ytOzg3RTTKDKzPvd2N+ZIcgbGUNzux0S39ek84qJu0A=)
2: DD0545F6324A11EFA615F80FC4F9AE02.roa (hash: JGQRbpl0M55NntpmR47Eb0pdReArMEukNBhmpq072fU=)
3: E7F77E5E42E711EF8B9EF861C4F9AE02.roa (hash: LfeLDqZgOoUvx3xqv6Ht7g9P40TavwQoxPoQr/2SOEQ=)
4: 9E0DB32CB2B511F1801B1A934811F970.roa (hash: 1dIkUQs+9ySkSsx6ExBW7U2VgOdoQ5ewbH5wGx2owX8=)
5: BDECB94CEC4F11EEB0B9B467C4F9AE02.roa (hash: 2pI1bzUTUq/EmFMii6AUxvtNgZI/E8A87UU703pgGXc=)
6: D88897C8959711F1B1C0CE483911F970.roa (hash: C/gGnErLDGVKPL88vLANoUbJPDGKaAM8xEF7HVLaqC0=)
7: 13575F56A89411F1A427B8625411F970.roa (hash: oc1DIl2N5MD23zN4XtzJJ4lPESxWVTRUjO97J2hA5qM=)
8: D43F20C6C70F11F0BEE61E6CC4F9AE02.roa (hash: utg9UGvvmJf23Cct3Vn7nNyRBeeVqf8DmiJ8n2ds57Q=)
9: 7BDC977E0AF011EF87265E12C4F9AE02.roa (hash: yrdHbYaEemEUb/B0NgVfLS1kZDvbMggamXHtKz3ZUfU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:42:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 580 (0x244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Validity
Not Before: Sep 25 03:42:58 2026 GMT
Not After : Oct 2 03:42:58 2026 GMT
Subject: CN=6ab5edc2-4b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ff:49:7b:f9:c1:9b:8e:90:53:17:1d:9e:af:
cc:0f:c0:5a:04:5e:c0:35:66:e0:37:d8:1a:99:99:
10:af:04:7b:29:ce:f2:dd:e6:a7:45:a3:f3:af:87:
26:88:02:4c:d0:40:5c:96:b8:62:29:a1:70:6c:71:
44:34:aa:4e:1a:2f:df:e9:c4:7d:8c:55:ad:eb:2d:
d4:7e:7a:ea:fa:a5:7d:8a:2a:c3:60:d6:21:cc:cb:
2c:dd:01:12:85:54:4c:a5:7b:93:a5:7e:a9:f7:4e:
66:90:83:52:f8:6c:58:b5:9e:76:6c:d2:f1:4c:e3:
50:2d:88:03:1e:2d:c9:4f:15:f1:9b:b8:3d:2f:94:
0a:7e:36:27:c3:ba:44:3f:fd:d6:4b:22:a7:ba:ee:
22:63:8c:e9:c5:30:84:ca:21:b5:fb:ac:36:bd:d6:
12:05:1f:b4:3b:26:7b:cd:a9:9e:d9:eb:fd:e2:9c:
12:57:59:44:8f:2e:57:d6:f5:64:db:8f:48:23:05:
f6:65:3f:cb:70:e9:39:09:74:b1:a9:15:f3:07:a8:
72:d4:1c:9c:26:f1:06:60:da:da:b8:8b:f2:50:12:
1d:ec:5e:e7:ba:52:9f:d0:04:12:dd:3d:78:56:5d:
f8:67:d9:d4:23:4b:47:ee:b5:53:78:79:2a:1d:39:
c3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0E:59:01:C0:CC:9A:9C:1F:2A:81:55:DF:1F:EC:B9:BF:E3:CC:42
X509v3 Authority Key Identifier:
keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:a8:15:c6:e1:01:52:cf:9e:92:3f:fd:df:56:77:dd:d3:03:
22:77:86:64:a3:59:8b:e5:fd:59:d6:fe:e0:c5:57:de:18:68:
5a:2a:9d:41:a8:4c:f4:86:da:e8:64:c2:e7:0e:c9:7b:c1:b4:
90:04:d3:29:3e:59:29:75:94:34:1c:e4:98:81:2a:3e:40:42:
72:91:ad:28:23:fe:c3:44:c8:27:8a:c2:2c:2d:c5:59:48:22:
61:f4:68:3f:60:d3:f1:d2:b5:9b:1d:20:f5:d9:3b:e7:26:13:
ad:86:bb:7f:f3:a5:74:49:25:de:2b:ae:ee:74:ff:a1:ba:c4:
a7:70:f2:40:02:b1:de:e3:c7:7a:51:90:ca:db:4b:b8:8a:e9:
78:57:34:5e:e9:b5:5d:11:47:0c:d1:c5:9c:c2:62:a5:e8:61:
87:af:cf:7f:d3:c9:0b:e9:61:1d:93:50:70:5a:74:3e:92:ba:
bc:a8:17:9e:a0:b7:35:72:b8:90:e8:0f:36:87:5f:cc:c4:62:
43:1e:5d:b2:5f:ef:ac:d7:4d:2e:2b:c7:ec:bf:8b:3a:f2:b6:
55:6b:46:f0:72:f1:5c:1f:e0:57:8e:13:ad:85:a0:2a:91:e3:
e6:57:92:65:7c:6d:2c:cf:f7:39:7a:c1:0b:22:62:52:10:2c:
61:5e:20:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:22:07 2026 by rpki-client