
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
File: ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json)
Hash identifier: /YF7oECUjj7q1bDHLG+18oAKRjoI6v0uAFvi8pw5iCs=
Subject key identifier: 71:75:6C:61:1F:85:95:B3:66:26:C8:4D:D6:C9:0A:AF:A1:FA:17:D0
Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA
Certificate issuer: /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA
Certificate serial: 0189
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
Manifest number: 0180
Signing time: Sat 13 Jun 2026 04:35:45 +0000
Manifest this update: Sat 13 Jun 2026 04:35:45 +0000
Manifest next update: Sat 20 Jun 2026 04:35:45 +0000
Files and hashes: 1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: nDAXFFgFU9uersp/xLm48zY3JhboHhbRVz/3+avcEHU=)
2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: Xp2kZwTI/Ulm1FSMvB8uIy/q/Twdd9bs92yBpmukUiI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl
rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:35:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA
Validity
Not Before: Jun 13 04:35:45 2026 GMT
Not After : Jun 20 04:35:45 2026 GMT
Subject: CN=6a2cde21-67b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:d3:f7:88:2b:9b:94:b0:30:10:77:bc:62:
a6:48:14:8f:09:bd:c6:07:66:79:c0:65:da:69:41:
d7:d4:78:5e:8e:3b:7d:46:a8:76:67:75:5e:1e:c3:
ae:14:d8:29:76:15:6c:f7:84:4e:68:ec:df:05:21:
a2:09:75:6f:89:21:f2:7f:e4:c9:96:9d:7f:d4:b4:
d6:2a:67:d0:5c:30:83:4d:a8:66:9d:b6:d2:1a:94:
bb:4e:81:7f:9f:cf:81:50:f2:db:34:5c:3b:bf:70:
ee:32:f4:34:3f:5b:90:38:a5:6a:27:a6:50:f9:a6:
d9:11:69:ee:fe:c2:10:03:8d:5b:e3:59:9b:cc:ad:
dd:29:e9:b8:53:b3:88:d2:45:b6:d7:7d:de:f5:fc:
d7:db:34:f0:45:08:95:08:8d:d2:09:d8:c0:5b:0d:
ea:4f:d3:d5:6f:d0:db:b8:5b:67:b7:20:36:78:9f:
2c:2c:c8:a3:91:c0:94:c6:fd:e7:6c:ca:6c:a6:46:
2c:39:22:fd:db:be:ae:9c:1e:3f:d4:33:53:8a:64:
a6:81:b9:4e:3a:3a:e0:00:85:3c:ab:3d:fc:26:a7:
d7:43:c2:d8:59:da:2c:28:60:7b:a6:7b:7e:12:a1:
88:c4:f0:a4:f1:21:36:62:29:ae:d0:dc:0e:38:c9:
68:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:75:6C:61:1F:85:95:B3:66:26:C8:4D:D6:C9:0A:AF:A1:FA:17:D0
X509v3 Authority Key Identifier:
keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:e4:2a:da:1a:cf:40:5e:68:45:d6:0f:51:c9:44:d8:25:3e:
58:9e:39:84:ff:3b:1e:ca:83:96:4a:5b:b5:82:38:48:4c:b3:
41:5a:7d:cc:2f:d7:30:7b:7e:81:42:1f:70:fd:9c:88:8e:7f:
ce:a9:a4:4b:88:f7:62:22:30:ad:d3:76:af:68:b7:4c:c2:4a:
b5:8d:ce:df:e7:97:4d:af:50:5d:17:4c:64:76:ce:bd:49:81:
37:57:e2:1c:d3:34:a5:e0:df:62:cb:84:58:f8:60:81:c2:82:
13:e6:80:30:54:8d:dd:17:09:8d:e1:5f:8b:25:fc:a1:dd:3a:
07:d4:12:5d:3e:b5:04:6f:7d:db:cb:19:20:c9:ee:a8:03:02:
5c:56:19:0f:44:e2:4c:32:62:04:15:2f:e3:1d:e5:fc:65:c8:
35:cb:87:03:86:80:79:5d:3d:eb:01:27:a5:8d:5b:89:f8:3f:
a4:4d:24:db:82:54:ab:40:d4:0a:1a:8a:dd:34:7d:53:1e:7d:
1c:76:90:f3:96:68:cd:b5:db:ec:73:fe:79:94:24:17:37:b7:
e5:55:32:2b:2e:3e:71:77:66:aa:b9:14:d6:cf:ba:23:46:37:
21:a8:75:d5:eb:68:67:11:44:3a:d0:24:0b:cd:e1:c6:3f:b8:
e2:e9:3b:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUYyREYxMTAvBgNVBAUTKDY2NDQwNTFCRTFFMTA3MEQ1NzIyRDI0RkNDMUE2NUJC
NkE2NTkzQUEwHhcNMjYwNjEzMDQzNTQ1WhcNMjYwNjIwMDQzNTQ1WjAYMRYwFAYD
VQQDEw02YTJjZGUyMS02N2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsx3T94grm5SwMBB3vGKmSBSPCb3GB2Z5wGXaaUHX1Hhejjt9Rqh2Z3VeHsOu
FNgpdhVs94ROaOzfBSGiCXVviSHyf+TJlp1/1LTWKmfQXDCDTahmnbbSGpS7ToF/
n8+BUPLbNFw7v3DuMvQ0P1uQOKVqJ6ZQ+abZEWnu/sIQA41b41mbzK3dKem4U7OI
0kW2133e9fzX2zTwRQiVCI3SCdjAWw3qT9PVb9DbuFtntyA2eJ8sLMijkcCUxv3n
bMpspkYsOSL9276unB4/1DNTimSmgblOOjrgAIU8qz38JqfXQ8LYWdosKGB7pnt+
EqGIxPCk8SE2Yimu0NwOOMlo2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHF1bGEf
hZWzZibITdbJCq+h+hfQMB8GA1UdIwQYMBaAFGZEBRvh4QcNVyLST8waZbtqZZOq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wQTk4ODc5QTIz
QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3MVhJdEpQekJwbHUycGxr
Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1prUUZHLUhoQncxWEl0SlB6QnBsdTJwbGs2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjJERi8wQTk4ODc5QTIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3
MVhJdEpQekJwbHUycGxrNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAceQq2hrPQF5oRdYPUclE2CU+WJ45hP87HsqDlkpbtYI4SEyzQVp9zC/XMHt+
gUIfcP2ciI5/zqmkS4j3YiIwrdN2r2i3TMJKtY3O3+eXTa9QXRdMZHbOvUmBN1fi
HNM0peDfYsuEWPhggcKCE+aAMFSN3RcJjeFfiyX8od06B9QSXT61BG9928sZIMnu
qAMCXFYZD0TiTDJiBBUv4x3l/GXINcuHA4aAeV096wEnpY1bifg/pE0k24JUq0DU
ChqK3TR9Ux59HHaQ85ZozbXb7HP+eZQkFze35VUyKy4+cXdmqrkU1s+6I0Y3Iah1
1etoZxFEOtAkC83hxj+44uk7lw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:23:45 2026 by rpki-client