
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.mft
File: zPWB9MM8pEQeGAfjlsXv51-oLdA.mft (raw, json)
Hash identifier: 2/2iDcQI7Xfdi4vcD7XkMly5zRq20IAGY2s8gXwShZY=
Subject key identifier: 3E:20:DA:16:8E:68:A3:57:F4:A5:A8:45:6E:3D:D5:4E:40:2D:17:F5
Authority key identifier: CC:F5:81:F4:C3:3C:A4:44:1E:18:07:E3:96:C5:EF:E7:5F:A8:2D:D0
Certificate issuer: /CN=A9111A27/serialNumber=CCF581F4C33CA4441E1807E396C5EFE75FA82DD0
Certificate serial: 0B03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPWB9MM8pEQeGAfjlsXv51-oLdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.mft
Manifest number: 0AF4
Signing time: Fri 12 Jun 2026 19:24:47 +0000
Manifest this update: Fri 12 Jun 2026 19:24:47 +0000
Manifest next update: Fri 19 Jun 2026 19:24:47 +0000
Files and hashes: 1: zPWB9MM8pEQeGAfjlsXv51-oLdA.crl (hash: Pekq5tzF1Ha0ZgDt0h539cuIZ+f0A9+DsaaOXkWwn9U=)
2: EECBCEBE6E3511EABDE26D73C4F9AE02.roa (hash: r1pD0Q+gqTEwuW8+FxM3DxEOTWIuAGXXddrFG01zuI0=)
3: 4A644958BA0311F084B11F0DC4F9AE02.roa (hash: jYg6q/W/0HVfh05DuMfHV7pRX1CgQotQsytTOYFkR4g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.crl
rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPWB9MM8pEQeGAfjlsXv51-oLdA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2819 (0xb03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111A27, serialNumber=CCF581F4C33CA4441E1807E396C5EFE75FA82DD0
Validity
Not Before: Jun 12 19:24:47 2026 GMT
Not After : Jun 19 19:24:47 2026 GMT
Subject: CN=6a2c5cff-07f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bb:fb:7d:3d:6b:ac:a2:27:a5:df:71:10:88:
72:f4:7a:db:82:ac:ac:03:ad:62:a9:ea:42:0f:89:
ca:96:5d:f6:e4:14:6c:4c:00:89:2d:62:95:e6:09:
92:97:8b:f4:28:54:97:7b:b4:d9:ff:6f:f4:0c:2d:
37:3c:73:a5:32:11:d6:d0:c5:7a:3d:3f:33:e6:41:
03:05:81:dc:74:2a:82:f8:dd:45:a6:06:c1:10:33:
97:a7:3c:c8:6f:e1:32:4a:51:28:c3:e5:a9:2f:70:
a7:75:f9:48:27:3a:6c:0e:89:6e:02:a8:eb:38:f5:
2b:67:45:09:e8:9a:3c:6f:0e:47:ea:a1:89:f4:43:
43:f8:00:cd:9b:e3:10:87:14:f6:4e:57:61:2f:d3:
f4:b8:b3:9d:55:dd:dc:9f:ce:58:5e:01:12:c7:18:
2f:fa:7d:f9:5d:99:f9:04:b4:ae:4d:1b:57:b5:00:
9b:b9:2a:e8:3b:56:cc:79:1a:83:73:6a:a7:2f:42:
9d:db:64:76:36:3f:f9:9f:bd:dc:68:43:05:31:fe:
24:af:d6:bb:79:31:58:7b:35:34:10:d1:07:2d:0e:
46:83:53:d6:37:d2:f3:d9:89:69:97:2e:4d:cb:0a:
37:73:a9:96:64:d1:6e:78:1e:b1:e1:07:b7:79:bf:
8e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:20:DA:16:8E:68:A3:57:F4:A5:A8:45:6E:3D:D5:4E:40:2D:17:F5
X509v3 Authority Key Identifier:
keyid:CC:F5:81:F4:C3:3C:A4:44:1E:18:07:E3:96:C5:EF:E7:5F:A8:2D:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPWB9MM8pEQeGAfjlsXv51-oLdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:11:80:cc:88:19:8a:50:31:60:fe:5e:58:c5:e7:36:26:b1:
6b:9f:27:6a:b8:ed:3c:f0:96:8a:04:4c:fc:cc:18:fa:f8:c5:
7b:79:77:3e:ad:f3:19:ff:a1:c2:7f:0d:5a:19:7f:83:5e:90:
21:e5:76:35:a3:dc:e1:f6:36:13:e9:86:b8:3e:bd:69:b5:ff:
92:ef:77:3d:6e:41:03:7a:ec:da:33:dd:4c:8d:68:4d:40:1f:
35:bc:e3:95:b5:d4:83:a1:01:65:ae:8c:42:34:0b:56:1a:03:
3b:f2:19:27:e3:49:20:f7:1c:a8:91:9d:b8:52:63:53:65:c6:
aa:8e:e7:29:52:c3:e6:d5:46:58:d7:f3:9f:85:ea:f1:21:fb:
5f:b7:4d:59:c7:2b:32:e3:82:5e:3e:82:98:13:61:13:ae:0e:
51:20:5a:08:38:d0:41:6f:24:5b:3d:73:4f:0c:9e:41:80:25:
7f:2c:71:5b:6f:ba:59:9a:04:06:6d:27:52:7b:9f:69:e2:75:
1e:77:f1:9a:0b:20:8d:f8:67:9b:7c:2f:5d:7c:da:c5:f8:e2:
e4:da:72:fd:31:5a:2f:2f:77:73:11:dc:1f:1c:c3:db:d0:f1:
ef:e9:b6:ed:bb:bd:c8:95:12:7b:15:ba:45:cf:07:d4:99:7e:
52:d4:79:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:00:05 2026 by rpki-client