
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
File: ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft (raw, json)
Hash identifier: QO/9w1bEF6WgqbmBhBHviPlbHyrQlwdezXLav/uf8yA=
Subject key identifier: 1F:11:E6:8F:AC:3C:51:E3:A4:5F:E9:34:42:12:C9:EE:14:92:5A:0D
Authority key identifier: 66:C2:DB:0D:8B:69:0C:95:36:B0:6A:B7:CE:C6:5C:08:D5:76:3F:4F
Certificate issuer: /CN=A9131194/serialNumber=66C2DB0D8B690C9536B06AB7CEC65C08D5763F4F
Certificate serial: 79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
Manifest number: 77
Signing time: Sat 13 Jun 2026 07:48:46 +0000
Manifest this update: Sat 13 Jun 2026 07:48:45 +0000
Manifest next update: Sat 20 Jun 2026 07:48:45 +0000
Files and hashes: 1: ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl (hash: pEagQa7tcKG1NiO3VnpS/ZrE+jGIin1ulq+TFjqfIqg=)
2: BCD0C756B3D111F09D2C6B5BC4F9AE02.roa (hash: 4o6d3Mckrzy48+xLI8bsyNkRAk7N9AqNPet+OzlxVP4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl
rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131194, serialNumber=66C2DB0D8B690C9536B06AB7CEC65C08D5763F4F
Validity
Not Before: Jun 13 07:48:45 2026 GMT
Not After : Jun 20 07:48:45 2026 GMT
Subject: CN=6a2d0b5e-4492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e3:f0:9d:4a:6b:b0:c5:90:91:3d:49:48:bb:
4d:22:0c:b5:27:e1:df:d2:3c:51:78:4d:3d:64:ea:
e5:94:b5:7d:91:08:d0:a0:44:9a:d0:31:9f:09:70:
5f:a2:55:b3:26:67:d2:6e:60:fe:98:33:63:f4:5a:
04:5d:c6:8f:75:04:6e:c1:8a:69:16:a6:a7:da:d8:
e9:12:6f:4f:f2:df:df:bf:dc:a1:17:9c:bb:f6:1b:
22:39:38:30:aa:a9:92:a4:d6:75:51:db:45:98:41:
fe:4b:86:f8:1d:84:54:09:ac:c8:49:24:a6:0b:1b:
91:21:34:91:88:28:35:40:1e:4b:fe:73:fc:a1:c7:
d4:a4:31:47:7d:7c:7f:eb:db:78:cd:f4:e8:30:19:
95:c5:9b:23:12:cf:f7:51:ff:e2:97:ed:53:fd:75:
b6:c3:1d:f8:ab:1e:a0:28:79:8a:46:18:16:c1:12:
f8:43:15:f3:d6:fd:f9:46:fd:4c:25:48:f9:31:5f:
e8:ad:af:f0:a7:ae:9a:3f:42:c8:74:11:39:69:9f:
85:a6:15:ef:8b:5e:1a:56:32:7a:a1:ca:2f:5b:67:
bf:e7:2e:96:3a:f8:7b:bc:fc:4f:c1:d0:84:ae:68:
4e:d9:31:ae:37:0f:a3:ff:c3:9f:b2:f5:3c:31:28:
b3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:11:E6:8F:AC:3C:51:E3:A4:5F:E9:34:42:12:C9:EE:14:92:5A:0D
X509v3 Authority Key Identifier:
keyid:66:C2:DB:0D:8B:69:0C:95:36:B0:6A:B7:CE:C6:5C:08:D5:76:3F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:49:bb:2f:42:6e:03:0f:b5:58:12:c3:68:65:90:21:68:88:
6c:0c:84:f1:19:13:2d:44:86:89:2e:1b:23:d8:44:00:4d:78:
c2:c8:57:92:c9:38:e7:35:53:bb:b1:56:a2:7d:0b:c0:a1:96:
9f:1f:e5:58:5c:a1:12:64:74:33:28:8e:f9:5f:5a:7c:4d:34:
c6:8c:ca:5a:37:7a:da:5d:67:71:6c:eb:81:4d:6d:d5:9b:bf:
07:8b:d5:e7:8b:3e:61:43:e3:48:ab:bc:33:6d:59:bc:f5:26:
90:92:c2:50:d9:88:20:dd:92:5e:2b:b6:f5:1f:bc:e5:42:be:
fc:62:8e:e0:52:15:d8:2a:32:96:f5:c9:08:c2:39:a2:f9:c0:
4a:d9:6a:51:fc:0f:14:20:d6:3b:9c:1d:a7:53:6f:60:33:98:
a2:f5:8f:7b:f2:b0:8e:5e:0b:dc:e8:9c:35:89:34:2e:b9:d9:
02:da:b5:0c:87:31:70:78:03:ce:dc:ef:11:65:c4:05:2a:a1:
45:67:ea:53:7e:61:80:85:e2:9c:45:15:d7:a9:d6:ed:4a:2d:
2e:aa:8a:58:c8:ee:4d:5d:4e:d3:be:79:10:ec:c9:b7:2d:e7:
9f:bf:a5:3a:06:ac:4a:88:f4:e0:89:3d:33:65:71:c2:b2:e2:
6e:b5:04:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:07:13 2026 by rpki-client