
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft
File: Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft (raw, json)
Hash identifier: CCMwz8pNFRgC6J+6yEHVpSf2Emf+4ZD64J45es2bRvA=
Subject key identifier: BF:FD:6B:E0:98:35:C3:E0:4C:82:B7:12:4D:7B:C7:62:DA:A9:9D:F1
Authority key identifier: 66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E
Certificate issuer: /CN=A9121B73/serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E
Certificate serial: 250C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft
Manifest number: 24EA
Signing time: Fri 12 Jun 2026 15:45:03 +0000
Manifest this update: Fri 12 Jun 2026 15:45:03 +0000
Manifest next update: Fri 19 Jun 2026 15:45:03 +0000
Files and hashes: 1: Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl (hash: QW8GmwxSg4VTVkitXKW45Q7KaM68QVzgH3zdCoT05s8=)
2: 9A20324CDD6011EB9935406BC4F9AE02.roa (hash: U8OxEGjdn2Oyo4nAXHMe2uZlkKT+HU2vh2Rj/xEEZGE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl
rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:45:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9484 (0x250c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121B73, serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E
Validity
Not Before: Jun 12 15:45:03 2026 GMT
Not After : Jun 19 15:45:03 2026 GMT
Subject: CN=6a2c297f-e1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ad:59:8e:3d:99:35:13:b1:23:26:48:b2:a6:
a7:00:44:32:bb:98:95:5c:6b:5b:c1:38:4f:19:b5:
66:ba:06:be:08:e9:0b:11:75:28:5c:a4:f8:c4:0b:
46:0c:ae:a0:c3:71:ce:d7:2d:fb:ee:08:86:de:f1:
33:60:4c:7c:9b:7a:9c:b8:84:6e:fc:8e:1a:c7:a7:
bb:8b:6f:76:fd:68:88:1e:82:3f:18:cb:a0:eb:bf:
72:4a:c6:61:db:de:ec:88:93:7c:73:cf:f1:da:77:
ac:e3:3f:09:1a:28:56:3e:5e:70:7f:90:b5:33:43:
e3:e4:a9:75:a5:d3:10:82:3c:1d:c1:54:69:4b:7d:
46:04:f0:fa:b5:e1:88:5b:74:8f:2d:cc:05:4c:ed:
17:03:25:05:af:1d:19:6c:99:f6:e1:d7:f4:a3:a9:
93:19:5f:25:85:d2:11:f8:f1:93:e1:fb:7c:9a:06:
81:6f:26:39:73:d2:c0:be:15:50:63:fa:57:b2:d6:
30:16:24:31:3f:2d:e3:5b:95:de:e8:46:79:ee:30:
8d:6e:4c:1e:60:36:2b:d9:29:c8:47:53:ca:e3:18:
a4:3c:42:f0:6c:20:b9:32:8c:d9:3e:cf:63:aa:7f:
8f:d9:1f:6b:0f:45:41:96:56:b4:7c:46:b5:b2:99:
1b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FD:6B:E0:98:35:C3:E0:4C:82:B7:12:4D:7B:C7:62:DA:A9:9D:F1
X509v3 Authority Key Identifier:
keyid:66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:41:cb:6c:a4:89:c0:4e:2a:c7:a6:b5:ce:f8:57:8e:51:5d:
e5:49:d4:b5:74:e4:5f:4f:96:db:ac:37:79:32:a0:b6:71:91:
79:34:57:93:2f:b3:52:8a:3c:39:73:b5:75:b0:f0:5c:89:37:
3e:c1:fd:84:11:70:01:77:fc:78:25:77:b1:03:0b:ba:1d:ad:
52:d9:7a:8d:88:b9:44:aa:fa:65:f9:06:da:bd:a7:8d:6f:ee:
17:36:78:b4:07:c6:12:75:0e:7b:cb:ea:b6:37:41:e4:cc:5a:
98:d1:e7:1a:56:a7:7e:8f:dd:1c:f6:2b:08:cb:01:ca:0e:c4:
90:d8:4b:4a:fb:dd:e3:eb:eb:9f:ab:34:93:4b:4e:40:07:54:
81:eb:1f:64:9d:f8:fd:e2:e3:c8:77:1e:bf:5a:27:fb:50:37:
5d:6b:29:85:d2:f1:0d:f0:a9:01:f4:df:dd:47:29:71:a9:8f:
97:4b:2c:4b:13:85:1f:59:9e:49:f1:20:88:a5:5c:2a:bd:3a:
71:96:4a:fe:cd:12:29:6b:cf:1d:bc:d5:13:1e:71:7c:e3:11:
6b:d4:d5:a7:cc:75:2d:94:c6:43:ff:b3:e8:b5:bb:53:2a:67:
cc:25:44:bd:38:2e:c2:64:19:27:ff:07:f4:c1:b5:0b:30:f4:
79:b8:32:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:58:48 2026 by rpki-client