
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
File: zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft (raw, json)
Hash identifier: bDdaasdx5IoZ3uBdwmOXcQz4w6rO0bj/5puJObZOpZg=
Subject key identifier: 92:EE:54:3F:BF:D3:97:EB:6B:71:41:5D:96:0C:D7:0B:70:B2:65:EC
Authority key identifier: CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1
Certificate issuer: /CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1
Certificate serial: 052B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
Manifest number: 051C
Signing time: Mon 27 Jul 2026 00:38:48 +0000
Manifest this update: Mon 27 Jul 2026 00:38:48 +0000
Manifest next update: Mon 03 Aug 2026 00:38:48 +0000
Files and hashes: 1: zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl (hash: LiVgAtoo0nXaKCFrr2elSdkkkv66JjsELa7p1TRIe8A=)
2: 6E5D9F026AD211EF84B5841FC4F9AE02.roa (hash: ynmW2tXKon2Mm9XJxO05TX1KTfoacHd+1EhVNC9kNXU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl
rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:38:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1323 (0x52b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E990, serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1
Validity
Not Before: Jul 27 00:38:48 2026 GMT
Not After : Aug 3 00:38:48 2026 GMT
Subject: CN=6a66a898-22a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:bf:df:04:9c:77:ea:98:64:4c:41:76:b1:
9a:89:d9:58:c4:a0:b1:0a:b7:d9:9e:f8:02:1a:a2:
40:c9:93:81:ac:03:4f:6d:b2:77:27:c5:7e:5f:50:
2c:26:32:bd:2b:4b:79:64:a2:f1:20:4d:d3:25:2a:
1c:ec:0b:8a:77:0e:ef:7e:79:e3:91:ae:16:b8:31:
01:73:a3:73:09:b2:54:94:75:05:ea:41:f7:28:cc:
40:0c:71:06:08:96:97:f4:fc:4b:d2:36:db:71:47:
cf:b2:f4:40:25:3b:cb:e5:9a:9c:7d:54:98:e4:f7:
22:f5:71:61:7d:1f:68:e1:26:15:b7:a4:eb:07:6d:
e1:83:3e:3f:a9:17:b1:97:37:d7:39:d4:4b:10:77:
02:d6:bb:d5:25:57:01:54:74:33:cb:07:13:40:9f:
b5:81:b6:89:42:f9:de:ed:74:90:12:f3:ef:d5:5d:
ea:36:fd:72:f3:7c:16:ab:44:5d:96:b2:4a:cd:0d:
03:a6:c2:97:fa:df:0e:88:a3:7e:e5:3f:99:34:4f:
21:e8:d2:0f:69:a0:0c:90:08:b4:23:78:c8:c1:0b:
1a:6f:e1:21:4a:47:47:08:7d:01:95:83:4c:24:ea:
ef:d1:42:4d:4d:e8:0e:60:fe:c5:7f:ab:4b:32:aa:
76:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EE:54:3F:BF:D3:97:EB:6B:71:41:5D:96:0C:D7:0B:70:B2:65:EC
X509v3 Authority Key Identifier:
keyid:CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:a2:eb:7a:d1:ef:18:63:1b:ac:5e:25:86:f2:4a:df:91:89:
b3:18:d4:79:3d:af:99:48:95:ac:31:73:99:ae:2d:3c:58:4c:
56:b7:45:2b:36:8c:1e:b9:68:a7:5b:1d:05:9d:8d:34:9a:a7:
fa:32:b3:64:38:80:61:bb:f5:e3:02:23:16:32:68:16:65:ed:
e3:e8:80:c9:52:f1:bf:83:5d:63:b8:61:54:e7:59:44:f5:a2:
b8:4f:fa:e9:73:18:71:af:cd:ad:6d:e2:88:4d:a5:28:07:28:
76:0e:27:87:8c:47:c2:99:5a:39:b2:a9:cb:a1:cc:30:64:13:
9a:07:24:21:6a:d9:4f:61:16:27:86:37:8f:0c:df:c1:1f:c7:
08:19:37:9e:c5:7e:fd:69:1f:ad:c0:2d:3b:78:ff:40:37:c7:
8f:79:d5:d2:78:3a:b7:4c:52:7f:c1:07:f0:2e:cf:e0:e0:30:
de:c3:23:b1:2d:31:4c:a0:fa:0c:6b:80:dc:f5:4b:dc:2a:be:
6f:62:1a:f6:da:1b:cf:cd:6c:c6:8b:ba:92:b4:6f:16:dc:25:
c1:51:8d:49:db:22:d1:c8:94:c1:62:1a:aa:7f:f2:38:c7:ca:
6c:6d:75:f8:b9:19:13:83:95:13:e4:7c:b7:71:65:8a:f3:fe:
ac:0d:0f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:40:02 2026 by rpki-client