
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
File: ZhNNob_trAyRnSax9_nhaK-dK04.mft (raw, json)
Hash identifier: ZV+UHRtJyrl/gt7r72plW423DmhEwAcDkG7DvWi0dOI=
Subject key identifier: 36:E9:EC:35:CC:C1:A5:51:AA:2A:28:F8:C8:01:DA:98:5F:C4:14:9D
Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E
Certificate issuer: /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E
Certificate serial: 0152
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
Manifest number: 0139
Signing time: Sun 27 Sep 2026 06:11:11 +0000
Manifest this update: Sun 27 Sep 2026 06:11:11 +0000
Manifest next update: Sun 04 Oct 2026 06:11:11 +0000
Files and hashes: 1: ZhNNob_trAyRnSax9_nhaK-dK04.crl (hash: /M5Aa1ViWaDwARWVMcacvRHPSROGfor/+VUThZ5TJmA=)
2: B8104C9E531511F189594BAEBE833773.roa (hash: 03tHcv31WAjjSZg0GytNTOFwjGpnu0+l2j9GpgYcafE=)
3: 015250F6309311F084231321C4F9AE02.roa (hash: iTyVWA8OtlJonGj5UGoyx0P4hksSiwkBnADCo8Y/t9g=)
4: 25922C44F3CF11EFBCC75246C4F9AE02.roa (hash: m8QMCMJ3X0wyQt1ZZAgjhiTXmzDH/HOcOw8QopElL7I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl
rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 06:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338 (0x152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E
Validity
Not Before: Sep 27 06:11:11 2026 GMT
Not After : Oct 4 06:11:11 2026 GMT
Subject: CN=6ab8b37f-c81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:a0:ea:10:d5:23:01:01:c1:94:78:f7:c7:
f1:9a:c0:49:0a:6c:14:4f:b5:4d:63:1e:80:da:7d:
78:aa:58:d1:6e:48:30:3d:03:1e:a7:cb:49:7e:84:
89:a3:24:f5:27:8a:04:90:f4:bb:c6:05:02:f2:a6:
30:a0:bf:e4:a9:4e:df:ee:b6:31:a9:c8:08:5e:16:
30:dd:49:39:62:e2:4f:0c:99:f8:b0:da:1b:75:02:
36:7f:34:5d:39:7a:0d:65:49:88:e6:cb:62:04:c6:
15:86:fe:c7:25:1c:e3:8a:41:e2:a2:ff:a5:94:f6:
5c:61:ad:0c:55:75:4e:59:c9:aa:d6:4c:76:ac:71:
59:5b:1c:23:47:af:67:57:45:b5:8e:cc:b7:8e:66:
bf:ca:46:da:86:da:b2:4c:0f:63:0e:dc:41:b4:ca:
ef:9b:58:c7:44:2f:3e:b4:1e:64:3d:23:d4:e5:b6:
25:cd:53:f8:77:a3:43:63:69:bf:10:fc:e9:a8:6e:
98:36:10:47:01:3c:03:9e:3d:e9:21:d1:bf:ae:10:
ea:2d:02:cb:6c:82:81:92:3b:ba:ea:64:ae:24:21:
6c:6a:2e:88:21:b2:2f:39:f9:4d:95:6b:83:fa:9e:
1e:1c:d5:72:0a:d2:0a:ec:a2:91:c6:e3:e4:d7:5d:
9a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E9:EC:35:CC:C1:A5:51:AA:2A:28:F8:C8:01:DA:98:5F:C4:14:9D
X509v3 Authority Key Identifier:
keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:dc:e7:35:6e:76:33:29:41:2f:4f:c5:9c:45:fd:0b:6a:54:
51:d9:0c:cb:b5:17:a5:d4:f3:69:37:cd:55:d3:61:8a:8a:c6:
67:84:ed:b0:c9:75:0f:29:a5:7b:0b:b7:07:c3:4f:d1:58:f5:
73:8c:07:32:b0:7f:d0:51:39:b4:c0:d7:5e:f5:ef:d4:63:f6:
f8:75:81:eb:75:79:87:91:e4:6f:f3:cd:80:a8:11:f1:ad:58:
ad:07:f6:24:6e:13:bc:79:f3:73:f3:74:84:18:ee:31:81:ff:
fc:05:53:7e:8e:3e:08:ab:69:46:64:7a:1b:02:2d:21:a8:ad:
44:0a:5b:cf:0f:01:d0:51:bc:6d:7b:aa:7e:18:cb:43:a8:8a:
4a:aa:86:78:1a:ce:7e:e3:20:d1:52:86:e7:7f:42:cc:ff:6f:
a2:69:72:18:07:de:73:d0:c1:7f:75:33:8d:de:23:85:f8:7b:
fb:2e:29:a1:0e:4a:87:d2:92:22:95:ed:e3:fb:4a:e8:a0:e4:
90:41:c8:06:28:ec:df:bb:29:c9:d4:7d:61:62:be:c8:f2:10:
52:7e:0d:48:0f:82:d9:57:a2:5d:fe:f1:5e:4d:9d:b8:56:86:
67:ce:92:ef:56:7a:0a:54:c5:4b:d4:d5:57:f8:41:2e:07:04:
c5:1a:1a:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkE1RDQxMTAvBgNVBAUTKDY2MTM0REExQkZFREFDMEM5MTlEMjZCMUY3RjlFMTY4
QUY5RDJCNEUwHhcNMjYwOTI3MDYxMTExWhcNMjYxMDA0MDYxMTExWjAYMRYwFAYD
VQQDEw02YWI4YjM3Zi1jODFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt2Og6hDVIwEBwZR498fxmsBJCmwUT7VNYx6A2n14qljRbkgwPQMep8tJfoSJ
oyT1J4oEkPS7xgUC8qYwoL/kqU7f7rYxqcgIXhYw3Uk5YuJPDJn4sNobdQI2fzRd
OXoNZUmI5stiBMYVhv7HJRzjikHiov+llPZcYa0MVXVOWcmq1kx2rHFZWxwjR69n
V0W1jsy3jma/ykbahtqyTA9jDtxBtMrvm1jHRC8+tB5kPSPU5bYlzVP4d6NDY2m/
EPzpqG6YNhBHATwDnj3pIdG/rhDqLQLLbIKBkju66mSuJCFsai6IIbIvOflNlWuD
+p4eHNVyCtIK7KKRxuPk112atwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDbp7DXM
waVRqioo+MgB2phfxBSdMB8GA1UdIwQYMBaAFGYTTaG/7awMkZ0msff54WivnStO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTVENC82NTBCNERFOEYz
Q0UxMUVGOTE0RUY2NDRDNEY5QUUwMi9aaE5Ob2JfdHJBeVJuU2F4OV9uaGFLLWRL
MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1poTk5vYl90ckF5Um5TYXg5X25oYUstZEswNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QTVENC82NTBCNERFOEYzQ0UxMUVGOTE0RUY2NDRDNEY5QUUwMi9aaE5Ob2JfdHJB
eVJuU2F4OV9uaGFLLWRLMDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc9znNW52MylBL0/FnEX9C2pUUdkMy7UXpdTzaTfNVdNhiorGZ4TtsMl1Dyml
ewu3B8NP0Vj1c4wHMrB/0FE5tMDXXvXv1GP2+HWB63V5h5Hkb/PNgKgR8a1YrQf2
JG4TvHnzc/N0hBjuMYH//AVTfo4+CKtpRmR6GwItIaitRApbzw8B0FG8bXuqfhjL
Q6iKSqqGeBrOfuMg0VKG539CzP9vomlyGAfec9DBf3Uzjd4jhfh7+y4poQ5Kh9KS
IpXt4/tK6KDkkEHIBijs37spydR9YWK+yPIQUn4NSA+C2VeiXf7xXk2duFaGZ86S
71Z6ClTFS9TVV/hBLgcExRoazg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 20:23:29 2026 by rpki-client