
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
File: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft (raw, json)
Hash identifier: 64aieOxqtdDmuacU3wDwHfLySU6kKBDu0w70fccr01s=
Subject key identifier: 58:FB:64:3E:F1:71:04:5D:04:F2:A4:7F:1D:F3:46:87:ED:2C:9C:BE
Authority key identifier: 64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E
Certificate issuer: /CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E
Certificate serial: 02B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
Manifest number: 02A3
Signing time: Sat 13 Jun 2026 01:39:05 +0000
Manifest this update: Sat 13 Jun 2026 01:39:04 +0000
Manifest next update: Sat 20 Jun 2026 01:39:04 +0000
Files and hashes: 1: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl (hash: FfQLyqT4Qp9FlEw/tYH3TC8I2nOTVE1l2bQBLgPu2EQ=)
2: 9333456E2D7511F0AE6EEE7CC4F9AE02.roa (hash: ZKWuilMC1mbTpNIhkFg3PCRossx3ZxzSiZXfGCxostY=)
3: 98F2F9C8762611F09B1FE90DC4F9AE02.roa (hash: KS7F+OziKhDMCnUVMBfodEKMFb07L8NYOvPjvyYchaI=)
4: 9261B5942D7511F0AE6EEE7CC4F9AE02.roa (hash: VgKZr+Yro+WCDJDk8+sd8xGuOog1T6cOqydm30PIbLc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl
rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696 (0x2b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115AC8, serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E
Validity
Not Before: Jun 13 01:39:04 2026 GMT
Not After : Jun 20 01:39:04 2026 GMT
Subject: CN=6a2cb4b9-f09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:da:7e:85:b7:2e:41:62:ac:fd:ad:57:0a:ff:
9d:f8:ad:16:d4:fd:5a:30:3d:d4:17:13:4e:20:5c:
81:f2:11:f0:a3:14:78:e5:98:1d:cc:0b:06:59:07:
9c:04:22:a7:71:2b:c8:3d:2b:ca:01:fe:a0:a4:fd:
b9:96:00:87:05:73:5c:2c:68:43:77:d6:0d:70:42:
48:59:bc:67:a7:65:d4:2f:19:4b:02:29:fd:8a:97:
c2:a2:b2:c8:15:e1:1f:90:53:cd:81:2b:c5:e6:84:
f3:09:31:19:9e:cb:9e:63:7a:cf:75:1f:44:96:db:
13:5c:f8:be:77:63:06:da:97:12:ed:b1:56:3f:b7:
26:05:76:dc:82:e5:b7:14:8a:ea:e1:60:e6:d6:81:
99:73:53:4b:54:c3:1e:af:df:3d:60:22:86:ad:f6:
10:e5:29:fd:c8:c7:6f:c5:9a:4c:d1:8c:b1:44:db:
63:d4:8a:bc:3a:26:77:01:15:87:0f:eb:52:de:ed:
3a:19:79:c9:23:81:b3:12:cf:ab:3c:ae:56:af:97:
8b:80:a2:29:51:f9:6d:df:e6:11:04:c9:14:71:d0:
a0:33:99:3f:41:07:86:0d:b9:62:88:92:6e:bd:5c:
af:59:cf:d9:3b:22:5f:e5:92:25:be:6c:b7:59:18:
7f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FB:64:3E:F1:71:04:5D:04:F2:A4:7F:1D:F3:46:87:ED:2C:9C:BE
X509v3 Authority Key Identifier:
keyid:64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:4e:b0:d2:58:32:37:e6:fe:ab:50:8e:0f:76:0f:5b:5e:d4:
d8:2b:62:18:4d:58:38:30:63:ab:9a:51:83:2a:8c:cb:51:74:
61:43:ee:e1:4a:50:3f:33:65:61:1b:b6:c4:b7:72:2b:e5:e1:
cf:68:a0:68:8b:f0:37:0f:22:d3:ff:7a:e6:d4:fb:07:cd:81:
6d:c0:3f:8a:b3:6b:bb:ba:79:ee:1e:b8:c2:88:ff:da:d6:55:
25:4c:fd:fd:11:64:da:2f:5e:6d:7e:8d:5b:90:53:b9:d2:74:
3c:0f:49:de:cf:2e:05:78:8c:97:15:9a:bc:c2:67:c7:bf:d4:
88:d2:71:d8:6b:0c:3a:ed:a4:ae:66:34:cc:5c:5e:29:ba:63:
69:ea:4e:14:ec:ba:f6:1f:02:b0:8d:f6:3e:e8:48:9a:0f:19:
96:75:dc:ad:47:3c:23:16:de:e6:4e:eb:8a:04:a1:95:95:71:
e7:b7:6b:e1:e7:39:7a:d4:57:c0:c5:95:59:ae:41:5a:24:be:
fb:79:bc:48:d2:6c:37:ad:bd:fa:72:45:13:b9:9c:33:22:7a:
55:0a:96:94:c1:77:d5:4a:2a:c7:97:54:6f:0f:c6:c9:6d:15:
23:e0:5d:24:48:8d:5d:99:8f:1a:23:bc:52:bb:d1:51:95:8c:
86:dc:94:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICArgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTVBQzgxMTAvBgNVBAUTKDY0NDUyMzdFNTZFRTg5NDQyQkYzMTQzNTJDRkM1NDNE
NjVEMUI2MEUwHhcNMjYwNjEzMDEzOTA0WhcNMjYwNjIwMDEzOTA0WjAYMRYwFAYD
VQQDEw02YTJjYjRiOS1mMDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApdp+hbcuQWKs/a1XCv+d+K0W1P1aMD3UFxNOIFyB8hHwoxR45ZgdzAsGWQec
BCKncSvIPSvKAf6gpP25lgCHBXNcLGhDd9YNcEJIWbxnp2XULxlLAin9ipfCorLI
FeEfkFPNgSvF5oTzCTEZnsueY3rPdR9EltsTXPi+d2MG2pcS7bFWP7cmBXbcguW3
FIrq4WDm1oGZc1NLVMMer989YCKGrfYQ5Sn9yMdvxZpM0YyxRNtj1Iq8OiZ3ARWH
D+tS3u06GXnJI4GzEs+rPK5Wr5eLgKIpUflt3+YRBMkUcdCgM5k/QQeGDbliiJJu
vVyvWc/ZOyJf5ZIlvmy3WRh/uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFj7ZD7x
cQRdBPKkfx3zRoftLJy+MB8GA1UdIwQYMBaAFGRFI35W7olEK/MUNSz8VD1l0bYO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUFDOC9CQTZEMjdENDZD
NUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlVUXI4eFExTFB4VVBXWFJ0
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pFVWpmbGJ1aVVRcjh4UTFMUHhVUFdYUnRnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NUFDOC9CQTZEMjdENDZDNUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlV
UXI4eFExTFB4VVBXWFJ0ZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZk6w0lgyN+b+q1COD3YPW17U2CtiGE1YODBjq5pRgyqMy1F0YUPu4UpQPzNl
YRu2xLdyK+Xhz2igaIvwNw8i0/965tT7B82BbcA/irNru7p57h64woj/2tZVJUz9
/RFk2i9ebX6NW5BTudJ0PA9J3s8uBXiMlxWavMJnx7/UiNJx2GsMOu2krmY0zFxe
KbpjaepOFOy69h8CsI32PuhImg8ZlnXcrUc8Ixbe5k7rigShlZVx57dr4ec5etRX
wMWVWa5BWiS++3m8SNJsN629+nJFE7mcMyJ6VQqWlMF31Uoqx5dUbw/GyW0VI+Bd
JEiNXZmPGiO8UrvRUZWMhtyUEw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:05:10 2026 by rpki-client