
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
File: Z_VMOcER599-cHbFxxWyizXoWfk.mft (raw, json)
Hash identifier: sLVY46oj+FgpxLSGJ4i+knXSBGtXuWFNFR+scNsTZNM=
Subject key identifier: FA:AB:59:3D:50:A4:56:A4:B5:13:F7:AA:47:58:86:72:E9:23:AD:63
Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Certificate serial: 1469
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
Manifest number: 1427
Signing time: Thu 16 Apr 2026 16:51:51 +0000
Manifest this update: Thu 16 Apr 2026 16:51:50 +0000
Manifest next update: Thu 23 Apr 2026 16:51:50 +0000
Files and hashes: 1: Z_VMOcER599-cHbFxxWyizXoWfk.crl (hash: hb3Hw/MWCMo16V3w29u+2oubD8zKUc+1YComgFjcG/4=)
2: C19EC984774811EFB2DF8983C4F9AE02.roa (hash: FRQ+DT10D+zkaCvxI+Qd7phB0uQvPJfA96uHFNE/wXA=)
3: 99A1A6E612EB11F1974F37D30E3D8C67.roa (hash: IHrAProFNEBmzzxFvkgejVqjw20u0zA2ggmfDoxw1nc=)
4: 2191F8C8161E11F1ABA6B0B1313D8C67.roa (hash: 4BqdekGP6TOJvlcxDVIKX748VvIpKr54ejupCldnA4M=)
5: E48C805A9A7D11EF99ECF636C4F9AE02.roa (hash: eMdCwd4thZUd7vQOqxG8t2aPfsobCFO0nB9eD759A1M=)
6: 24FAF688782911F0AFFBC961C4F9AE02.roa (hash: eguoD2KwCEeVtfvLaJuhvGErHeJK8RyABQd8zfSveG4=)
7: 98FB9AA812EB11F1974F37D30E3D8C67.roa (hash: Se0I8eDDaC/8yhzniql+f7h2soMxMsS+mHw18desYKc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:51:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5225 (0x1469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Validity
Not Before: Apr 16 16:51:50 2026 GMT
Not After : Apr 23 16:51:50 2026 GMT
Subject: CN=69e113a6-8f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:67:66:9e:48:5d:c2:df:35:9d:32:e5:c3:15:
90:18:bb:c5:a4:20:95:cf:d0:47:34:4f:37:a0:5f:
e2:be:32:c6:a0:6d:29:0c:c5:de:4a:9f:90:8a:55:
0f:7d:22:6c:05:ee:f4:52:8b:64:49:9f:f5:18:c0:
db:74:98:28:ed:6d:af:6f:41:e6:3f:ad:5e:a9:09:
aa:b3:64:58:a6:74:8e:51:80:b4:9f:5a:f5:1b:96:
a5:95:5b:25:ce:0e:95:df:2b:3e:c7:23:66:c4:71:
85:f1:c0:ff:83:b5:92:0b:a4:05:48:4e:53:3a:fb:
95:c5:cc:9f:bc:d0:49:9f:e7:e4:03:53:f6:87:50:
bc:3e:b6:d5:1f:9a:d2:9d:b9:4c:ad:c4:26:97:06:
64:7c:fd:d4:e8:1c:61:c9:3e:2f:3f:d2:5b:de:ee:
b5:2b:e3:51:9e:db:1b:a2:17:eb:d6:a1:1c:da:5d:
d1:3b:02:89:81:73:98:96:ff:f3:0f:b0:2d:2f:30:
d6:0c:10:61:20:51:af:0c:8c:5c:45:b9:0b:16:62:
8a:37:10:b8:c9:42:bc:83:cf:84:14:13:5b:ab:b6:
88:b6:42:3d:e7:57:30:5a:9f:39:02:f7:4d:57:af:
11:a2:df:37:63:07:9b:c6:31:87:3d:3e:b1:14:8e:
c6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AB:59:3D:50:A4:56:A4:B5:13:F7:AA:47:58:86:72:E9:23:AD:63
X509v3 Authority Key Identifier:
keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dd:e5:0a:95:ce:be:3c:b6:07:17:1a:35:db:21:c8:bd:d9:43:
40:e3:b1:97:11:30:ed:f0:0d:fe:20:7b:ce:02:3b:4e:74:29:
fe:83:d8:bc:83:13:ae:20:4d:39:90:95:10:3f:1d:c8:b6:8b:
60:04:1a:03:d6:f5:1a:cd:4b:dc:7f:ba:a7:ca:12:73:ec:8c:
f7:ab:f8:d8:17:d4:c1:9c:04:0c:c0:f3:1c:81:13:1f:54:e2:
60:0c:26:b6:25:67:1e:ad:74:a1:fc:89:d2:61:4f:ae:09:a4:
6d:f5:fb:a4:34:7c:b6:2d:7c:45:c9:34:e3:08:53:e9:dd:b2:
c8:06:a1:58:c9:1a:b7:40:89:97:85:be:7c:25:63:59:e3:e7:
46:cb:d2:f8:9f:07:34:06:80:c5:dd:55:f3:55:2e:85:c8:9a:
b2:56:96:00:c8:50:5d:f6:99:06:40:f0:5c:94:1a:7f:50:cd:
62:48:49:de:77:6b:1d:d5:e5:99:46:1d:d3:e1:1a:6d:ee:58:
6a:8c:77:e4:e7:89:cc:5c:fd:0b:5e:fa:f1:78:ec:d8:73:46:
e4:81:af:90:78:39:8d:97:0e:a3:be:bb:e2:4b:23:bb:1f:04:
48:20:9b:01:a2:7d:d7:ec:92:76:3c:7d:25:57:1d:c9:81:8a:
ca:f2:9e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:09:19 2026 by rpki-client