
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft
File: AO-zr_90_WIfS42RFpt6HEOzlBc.mft (raw, json)
Hash identifier: smyZcs6aoArF3noqCeviVj8fbiQVpB9Ew2ZDvX51jhM=
Subject key identifier: 4E:B9:9B:09:B8:A9:EB:61:98:82:AE:CC:41:1B:84:26:04:54:65:62
Authority key identifier: 00:EF:B3:AF:FF:74:FD:62:1F:4B:8D:91:16:9B:7A:1C:43:B3:94:17
Certificate issuer: /CN=A912C8FA/serialNumber=00EFB3AFFF74FD621F4B8D91169B7A1C43B39417
Certificate serial: 0218
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft
Manifest number: 020D
Signing time: Sat 13 Jun 2026 03:06:44 +0000
Manifest this update: Sat 13 Jun 2026 03:06:43 +0000
Manifest next update: Sat 20 Jun 2026 03:06:43 +0000
Files and hashes: 1: AO-zr_90_WIfS42RFpt6HEOzlBc.crl (hash: dQBMLJaR4iQ/hNiaEPwNjwCUtdzXDPp8n+BriJdoMG4=)
2: A80498FABAAB11EEBA024655C4F9AE02.roa (hash: MYk/tsmYPGKMW1RbLDFAli+RCLkeKhKWOLY72aWyJCU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.crl
rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 536 (0x218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8FA, serialNumber=00EFB3AFFF74FD621F4B8D91169B7A1C43B39417
Validity
Not Before: Jun 13 03:06:43 2026 GMT
Not After : Jun 20 03:06:43 2026 GMT
Subject: CN=6a2cc944-856a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a6:4d:68:ec:28:b1:7e:21:89:13:4d:9a:0c:
ce:2f:16:54:32:2a:53:01:f3:54:99:70:a6:54:81:
fb:1b:d3:ad:f4:af:0b:37:5d:94:70:d6:56:ea:68:
62:36:34:9e:f4:f3:44:d5:28:fa:6f:99:a0:69:21:
64:e0:fd:5a:56:d8:a9:3e:1e:df:47:49:f3:73:c4:
fe:01:eb:4f:da:a0:bc:b9:5b:bf:6e:49:32:6e:13:
96:da:8f:71:af:9c:fa:6f:08:bc:27:51:c7:90:9b:
0b:e3:0c:13:8a:6d:d0:3d:86:db:67:2f:f9:3e:8c:
6f:4e:9d:45:69:8a:42:14:63:68:85:45:25:2a:de:
02:a5:f7:0b:5e:8e:e6:4b:53:68:9e:e4:95:e9:8e:
ac:ef:61:6f:e9:39:7d:0e:f5:51:9f:fa:c8:c7:62:
72:8b:c7:4f:a0:71:0a:f7:fc:ec:50:46:8f:83:47:
27:e3:22:4c:dc:dd:f9:39:58:67:46:74:ce:17:e0:
82:47:f2:e9:f6:70:ee:54:ec:e4:3b:56:30:35:f4:
23:37:e8:5c:4b:c5:38:e1:74:b0:b8:f8:16:aa:ed:
02:f8:16:d5:3c:82:ae:10:55:26:af:86:2d:b1:4f:
90:ad:71:27:30:bb:95:37:e4:cf:ea:3f:64:52:91:
2d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B9:9B:09:B8:A9:EB:61:98:82:AE:CC:41:1B:84:26:04:54:65:62
X509v3 Authority Key Identifier:
keyid:00:EF:B3:AF:FF:74:FD:62:1F:4B:8D:91:16:9B:7A:1C:43:B3:94:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9d:02:f8:3d:dc:63:53:c2:7d:d4:a1:6a:45:87:0c:9c:dc:
e6:7c:e9:02:90:b4:a8:f1:86:1f:1e:c8:96:ce:e4:75:57:e6:
b4:3f:32:15:65:ca:12:69:12:5a:b3:f0:2b:2b:06:fd:e2:39:
dd:ba:e2:18:a9:f2:e4:53:1e:14:f7:cf:27:0e:0f:60:a3:8e:
75:de:01:a7:67:b1:14:7a:8a:f1:0d:33:45:2f:81:7c:23:85:
0f:75:16:03:47:f8:6c:9b:f3:f2:1c:6f:07:b7:f4:53:cb:85:
b6:5a:17:cf:34:fb:97:ba:4f:11:06:8b:ed:27:e9:74:fe:2a:
88:9c:15:46:9d:e7:0c:28:90:51:fd:6f:a0:73:cc:69:a3:2d:
08:32:c7:e6:9e:08:14:6b:89:75:5b:5d:e3:a4:2b:24:cd:10:
9f:43:6e:45:33:fd:a2:99:60:94:d5:18:f9:ed:82:66:17:0b:
c1:8a:8c:cc:ec:5d:4b:09:c1:f6:f7:0e:07:2c:7e:ca:f0:1d:
13:5d:ec:b5:f5:cf:f0:f1:74:c1:e9:df:75:05:d0:00:da:2f:
49:22:c1:d6:07:09:a0:01:64:94:5a:a0:17:86:78:f9:a4:fb:
f0:e9:45:00:d8:13:55:e4:55:94:54:c5:80:27:d6:5c:a6:d3:
ee:79:c0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:25:05 2026 by rpki-client