
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
File: Z_VMOcER599-cHbFxxWyizXoWfk.mft (raw, json)
Hash identifier: QPGKLEklf6xp6k1oexwIHak/ZBSEQsTgfGdyVFyVHHs=
Subject key identifier: 4B:F4:0C:64:00:86:44:20:82:DE:85:B1:5C:7D:4D:A5:C6:52:AF:42
Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Certificate serial: 14AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
Manifest number: 1460
Signing time: Tue 28 Jul 2026 16:59:32 +0000
Manifest this update: Tue 28 Jul 2026 16:59:32 +0000
Manifest next update: Tue 04 Aug 2026 16:59:32 +0000
Files and hashes: 1: Z_VMOcER599-cHbFxxWyizXoWfk.crl (hash: 5RzlNNN5f/n+5RdiYdabbXgjVgGPlftqa8ssRo8wWSA=)
2: F41500DC694911F1A16B262F6E47A888.roa (hash: mYLHSdvlGwRDPAVGzq+8ergSoNzQOTGylMWMtNiRlVU=)
3: E48C805A9A7D11EF99ECF636C4F9AE02.roa (hash: 7XZE+IKZBRrKqrGr1TDOGvqrZfzsrAMaTV6zeoCdboM=)
4: F4AD3064694911F1A16B262F6E47A888.roa (hash: R7CND86/KXzbzIBtAtGvKEvnXGb+FbDgfkcEDqCnjfE=)
5: C19EC984774811EFB2DF8983C4F9AE02.roa (hash: BQTtAnSnfeU6j7GQd538h0tAjgxRDhIC0Sugcv6CxzM=)
6: 64ECE086686E11F1B5EC161EA247A888.roa (hash: 5hpmoAgrGo8NMXv9KWkRN9Mm+Hfns+DhrtgEm10TrKM=)
7: 24FAF688782911F0AFFBC961C4F9AE02.roa (hash: yciUDDD/LAwvIfzlyMKdXRVsw2EraED3Doyb4sHdJn4=)
8: 98FB9AA812EB11F1974F37D30E3D8C67.roa (hash: +43EWcQPQlSm8/TwDF0BrjdnQ7PM32bqPDOdiMbEwwI=)
9: 99A1A6E612EB11F1974F37D30E3D8C67.roa (hash: 4WcbGVwImz8seR5eeb8tW47K/vTUw01C4QxrVOSwZCY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5295 (0x14af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Validity
Not Before: Jul 28 16:59:32 2026 GMT
Not After : Aug 4 16:59:32 2026 GMT
Subject: CN=6a68dff4-dbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:78:4a:5a:2e:16:b2:ce:f6:64:58:ed:fb:6b:
fd:f3:fe:12:f4:d0:6d:d2:7d:fc:69:47:18:cb:86:
13:db:61:15:99:04:22:3f:f0:b6:03:f8:84:30:c3:
bb:41:1f:dd:dd:65:fa:06:65:c4:c2:ee:d9:0f:c3:
31:35:3c:45:8f:29:e3:ae:19:e8:fb:98:cb:77:e1:
3f:50:eb:55:cc:cc:88:39:90:50:9d:4e:1e:7f:2f:
ca:4e:84:49:16:63:2d:ac:98:85:78:d1:ce:c3:51:
dc:42:87:9d:27:a0:94:3b:80:87:d0:67:4c:9f:57:
50:d3:e5:8f:55:20:c9:d6:5a:9c:a7:34:bc:07:20:
d1:af:60:f5:06:a4:a4:c2:ab:0a:d8:d9:fe:b4:b4:
0a:2a:23:b3:82:10:1f:e7:17:01:a5:b0:d4:3b:fe:
01:dc:13:da:55:3f:93:43:7b:95:81:ab:b9:89:d5:
d9:e2:9f:20:db:3e:e6:63:7e:c3:c5:85:b9:c0:20:
06:73:28:82:ed:2c:7c:f4:e5:52:4e:1f:f3:29:1b:
8a:dd:aa:37:47:60:f0:2f:cf:18:35:da:76:cc:07:
af:a8:6d:68:be:d9:56:b7:89:5a:44:e0:ad:ab:5b:
da:e9:94:e5:42:a7:82:73:4b:18:f7:2d:20:eb:df:
45:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F4:0C:64:00:86:44:20:82:DE:85:B1:5C:7D:4D:A5:C6:52:AF:42
X509v3 Authority Key Identifier:
keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:da:6d:f3:b4:37:05:b4:5c:52:9f:22:0f:9c:1f:52:d8:ac:
da:9a:18:57:45:6f:9f:cf:15:07:17:c6:af:6e:1b:53:8c:a3:
4c:3c:05:71:2f:2c:f3:74:e3:c4:9e:77:f2:80:cb:1f:aa:81:
41:97:6c:10:70:06:7d:19:16:b6:0b:08:05:e4:e2:64:90:ec:
78:0c:6b:5b:80:77:47:47:ea:37:3f:a6:ba:3f:0e:83:46:0b:
bd:23:c9:d1:42:1d:d4:ac:05:65:c3:dc:72:88:60:9c:9a:75:
f8:c3:5a:7f:fa:cd:86:92:af:13:57:4d:0d:53:b7:4f:26:00:
e1:18:72:4c:af:b0:8f:ce:b9:ed:6f:74:8c:5f:54:ce:65:0e:
9c:67:be:8b:a1:07:6a:c3:be:e0:0e:2a:0c:1f:af:6b:4e:ea:
22:90:32:7c:a5:46:57:e1:fd:cc:10:c3:38:87:ea:a3:81:40:
ff:00:be:6a:21:80:e8:ae:ad:88:f4:70:27:c5:93:50:cd:35:
55:20:69:4e:a9:ab:53:af:cc:ad:89:a7:34:8c:63:8e:ce:c3:
da:50:d0:63:c0:a3:19:59:06:46:2a:a4:d1:6c:83:dd:fd:81:
69:0f:47:66:53:0e:4b:3e:bf:47:f0:37:c5:f2:ff:a3:8c:71:
44:43:d2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:17:38 2026 by rpki-client