
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft
File: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft (raw, json)
Hash identifier: Mo9s2Y0YgKlMwsJKC+M62XS8fufiZHRjAezbqLfuDnU=
Subject key identifier: 45:54:7D:C7:7F:7C:BE:65:71:EF:38:C5:09:29:C0:4F:37:B2:6E:8A
Authority key identifier: CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88
Certificate issuer: /CN=A911E24A/serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88
Certificate serial: 09E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft
Manifest number: 09D9
Signing time: Fri 12 Jun 2026 19:53:11 +0000
Manifest this update: Fri 12 Jun 2026 19:53:10 +0000
Manifest next update: Fri 19 Jun 2026 19:53:10 +0000
Files and hashes: 1: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl (hash: FAH4sVcI2woJ505DVJF+1oVjSDLylAQGvFbvj+G/kGA=)
2: 7B68D8F2A3E811EAB397F675C4F9AE02.roa (hash: b1FfdoGhx5a9SVnzfI7f+c3x30UgLcfNHueh+5jSvgI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl
rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2529 (0x9e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E24A, serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88
Validity
Not Before: Jun 12 19:53:10 2026 GMT
Not After : Jun 19 19:53:10 2026 GMT
Subject: CN=6a2c63a7-7672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:85:3a:ff:66:64:02:60:5f:1f:3f:90:67:e9:
33:2f:67:9a:18:05:57:40:10:be:84:1e:57:09:02:
0c:c1:03:e1:35:ae:87:c6:9b:cb:05:a2:95:2c:b1:
a9:6d:b1:97:be:3f:7d:db:00:f3:b0:3e:6c:eb:32:
54:03:72:74:4e:2b:c4:04:20:a8:95:15:05:03:91:
97:fb:26:82:a3:16:53:fb:c4:59:41:cc:eb:d2:51:
fd:5a:5b:36:9e:a5:b0:e5:18:39:25:90:23:42:dc:
0d:1f:7a:ce:18:62:7f:52:65:45:e8:6f:87:54:0f:
93:af:f8:ee:87:90:ce:7c:65:da:d1:4f:8b:f7:a6:
da:84:88:a9:56:c9:21:8b:ec:2e:58:e2:22:c1:4d:
3a:d7:37:76:ff:30:5c:7a:cd:96:07:5f:b8:f4:24:
1d:46:8a:a8:d1:2b:41:3a:63:33:56:24:73:bd:8c:
d8:89:30:de:e0:3d:a9:3c:70:c4:22:d5:e3:8b:02:
3f:7d:5f:29:76:df:f9:9a:8d:92:d5:2e:87:28:21:
ae:6e:78:1f:e3:d5:5a:c1:21:81:db:43:03:b8:6d:
22:62:e2:8a:30:4b:a2:9f:96:32:54:ec:f7:ea:03:
ea:13:2e:0f:6d:6a:a6:59:12:4f:f0:d8:c2:a0:78:
74:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:54:7D:C7:7F:7C:BE:65:71:EF:38:C5:09:29:C0:4F:37:B2:6E:8A
X509v3 Authority Key Identifier:
keyid:CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:d1:fa:ef:a9:d1:7a:b4:ba:0b:22:59:03:93:c8:e4:a3:5f:
45:ec:7d:3d:44:53:fc:9b:02:f2:d1:4a:50:8a:48:40:22:e4:
17:62:be:8c:04:97:6e:14:99:b9:dd:8e:76:84:42:4b:5b:ee:
36:fa:5d:50:e4:1c:f6:45:71:d6:6a:8f:60:60:41:d2:f8:e5:
48:b9:9c:c8:04:9c:6a:9c:f0:0e:c2:cc:87:db:cd:8a:65:7f:
e4:9b:71:60:8c:54:aa:53:8b:92:c5:e0:d1:5d:a2:53:d2:f7:
f3:cc:14:8c:8d:53:d4:40:48:1c:b1:bf:e0:0c:6d:1f:29:d0:
0d:0a:3b:f2:aa:8c:16:3b:8f:86:f2:7f:8e:dc:53:f5:fe:e0:
45:1a:4d:97:ef:d5:19:56:fc:26:97:5f:5f:ed:0c:f0:49:6f:
74:f2:39:bd:e7:14:0f:4b:73:9e:26:b9:49:24:44:40:c5:98:
a7:70:b7:25:4a:ea:2c:e8:61:53:b1:1d:87:bf:97:e1:f8:a4:
ae:6b:00:ea:92:6e:50:4e:e5:fb:95:20:19:f8:6b:de:05:cf:
02:a0:7c:d4:54:94:de:b3:c1:00:c1:21:9a:8b:48:12:57:ad:
3f:f1:35:f0:58:bf:98:61:d2:4e:0e:d5:f3:9b:7a:62:0c:bd:
fd:f9:00:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:54:03 2026 by rpki-client