
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
File: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft (raw, json)
Hash identifier: y/s8RQynBKNMyQ+qqA9plUnIi7ASOyHagaVpw8LL3yE=
Subject key identifier: 59:27:9D:36:D3:10:55:B6:28:E5:60:68:8A:39:B9:AF:DC:61:40:BD
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Certificate issuer: /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial: 020E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
Manifest number: 01DC
Signing time: Thu 23 Jul 2026 05:24:07 +0000
Manifest this update: Thu 23 Jul 2026 05:24:07 +0000
Manifest next update: Thu 30 Jul 2026 05:24:07 +0000
Files and hashes: 1: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl (hash: LgOL+gwE6h8DZn6DUAD2QNYB88MGTSrRMRZD3rhbKjU=)
2: 5B4D02987E5B11F09260CE56C4F9AE02.roa (hash: YSqNnOxJ+Xkes9UNemwulrLNoP9a1fzLC+DIw2bAtgY=)
3: BC26B7548CAB11F0BDAA8B67C4F9AE02.roa (hash: 1xbmeKrtdkfMeaYJXV3nxlxzWBfNoeXUz9/FaAvLRY4=)
4: BDECB94CEC4F11EEB0B9B467C4F9AE02.roa (hash: fSlbtUc39UCW3k1Yy6pAqJg048Gxa2v6PcevURxg5Zs=)
5: E7F77E5E42E711EF8B9EF861C4F9AE02.roa (hash: Rk3j/x7/aK9tyzGNZkRW4uYz1dTdbytFeBnr/OmzBX8=)
6: 7BDC977E0AF011EF87265E12C4F9AE02.roa (hash: L+Pr2GihRWoedBardrydLcushDGXI9FYHRtqemwZ37o=)
7: D43F20C6C70F11F0BEE61E6CC4F9AE02.roa (hash: lU5HELzK1HgvUgy9a8UOHW1aya85BnCwdaSrvas6AAk=)
8: DD0545F6324A11EFA615F80FC4F9AE02.roa (hash: Uj11T+QW0pwuoYmi/Tug3FzEFRy1nbJISrOyCvJDnIQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:24:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 526 (0x20e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Validity
Not Before: Jul 23 05:24:07 2026 GMT
Not After : Jul 30 05:24:07 2026 GMT
Subject: CN=6a61a577-2a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0e:37:97:11:c5:2a:b8:0c:fc:66:dd:e2:17:
59:df:00:5c:cf:c7:b8:a3:08:dd:5e:ae:27:10:f2:
d3:05:d9:95:20:4b:1e:f0:48:cc:99:06:a5:1b:21:
d3:07:ce:86:98:fc:72:e5:37:7f:3a:9a:b5:45:ad:
26:e5:e1:ab:ba:54:d9:f4:25:67:ba:cc:07:45:43:
96:5a:b7:86:b6:a3:3c:a4:41:b6:1d:6b:b0:b8:5f:
cb:73:04:9f:86:fe:73:cf:c4:43:eb:8c:67:89:4a:
09:b0:cc:a0:4d:4a:49:17:03:1d:4a:70:f2:87:0d:
82:03:45:95:44:1e:fa:00:00:e6:d5:a0:83:3e:fa:
52:c2:b9:c6:96:fe:89:15:c5:15:2d:e0:09:40:cb:
f2:ee:2e:8a:6e:9e:46:62:7a:e3:09:98:56:96:74:
de:50:4d:db:5d:17:68:c8:f1:8e:fe:d5:ff:6a:ff:
ad:ef:95:02:67:af:57:e1:88:1b:29:bc:1d:1c:f8:
4b:ad:aa:75:0b:d3:c6:f5:c3:a4:e0:36:54:82:b6:
09:31:41:21:41:38:e1:44:8a:87:07:b8:41:46:d5:
43:82:78:22:38:2f:b1:7a:6e:2c:43:f3:bb:5d:57:
1d:af:32:d5:82:58:62:42:fa:9b:65:5b:d1:bf:50:
cf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:27:9D:36:D3:10:55:B6:28:E5:60:68:8A:39:B9:AF:DC:61:40:BD
X509v3 Authority Key Identifier:
keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:10:5b:c7:25:2b:ae:21:eb:8c:78:d7:78:a4:a4:1a:b1:a3:
6f:b3:68:c4:ff:de:1d:78:04:b3:9b:aa:ff:13:eb:82:9c:b6:
c2:c6:da:b0:2e:7c:3c:a0:1e:88:bb:93:3a:01:60:49:af:44:
d8:56:62:cf:bb:8c:89:6d:cf:3e:12:46:de:0b:fa:aa:c3:4a:
52:e1:30:2c:f5:ff:03:5c:1a:da:35:6c:e6:31:da:99:dc:65:
1f:5b:60:54:b2:d4:0d:f3:a5:41:cf:c3:72:04:59:ff:b2:b5:
4a:9c:ce:8d:ad:df:13:d7:9f:74:a0:a5:19:b7:13:d4:76:59:
09:0b:dd:f6:dc:02:8d:c7:05:b5:9b:d6:56:c6:26:02:47:59:
d3:fd:0f:7d:0e:5d:8e:0c:ae:e7:3a:a1:b6:ae:c4:80:65:a6:
01:61:ff:e9:21:8f:56:77:11:cc:19:08:34:66:88:bb:46:38:
21:ec:fa:51:56:01:ce:52:09:f2:56:e5:3d:f7:52:1d:c5:a5:
ee:d7:31:8f:85:66:e5:4d:51:88:3d:67:4b:23:6a:d1:23:97:
5c:e2:b4:17:aa:d0:dc:5e:79:8b:a1:95:45:6f:4e:a8:31:1b:
4e:f9:d5:c0:65:01:35:28:89:0c:de:7c:78:66:8c:b9:65:e1:
fe:9e:90:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:44:24 2026 by rpki-client