
$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
File: zmxG-AKxW4z0raNFqCiK1uf6U14.mft (raw, json)
Hash identifier: swdwhElK7GAxd/Utj63KJQ3Moe9lI2Z8wq5Lg+FnqvE=
Subject key identifier: 34:32:97:94:81:3E:88:8F:22:5E:DE:2E:8E:F7:A6:52:60:82:2B:1B
Authority key identifier: CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E
Certificate issuer: /CN=A914400E/serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E
Certificate serial: 01B4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
Manifest number: 01AD
Signing time: Sat 13 Jun 2026 04:05:28 +0000
Manifest this update: Sat 13 Jun 2026 04:05:28 +0000
Manifest next update: Sat 20 Jun 2026 04:05:28 +0000
Files and hashes: 1: zmxG-AKxW4z0raNFqCiK1uf6U14.crl (hash: OPMloXvaLlRv9qvAdrhKpGI+sxwTqZBzm5rxJW2UBpw=)
2: 4687D3AAD94911EEB080041BC4F9AE02.roa (hash: mDopMfVTaRsFnm6rlLIEGyxqISgf4DxErZsfORfZaA0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl
rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436 (0x1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914400E, serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E
Validity
Not Before: Jun 13 04:05:28 2026 GMT
Not After : Jun 20 04:05:28 2026 GMT
Subject: CN=6a2cd708-fe4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:64:a1:e7:80:19:fe:40:d6:c6:46:b8:69:a1:
75:59:f0:ba:17:74:a2:71:94:2d:3a:41:05:6c:23:
07:22:37:1c:bd:3b:71:b4:91:b7:be:7d:9e:2a:e0:
e7:80:9f:1d:fd:62:0f:bc:65:dd:a6:0c:d0:78:c8:
68:03:72:e2:b5:cd:f4:c0:57:ba:56:3b:c6:76:86:
80:d4:46:8a:52:67:66:d3:35:48:d1:90:60:c9:07:
be:12:95:00:ee:8b:57:7b:2b:b3:24:4d:5d:3f:f1:
f2:96:8a:39:33:94:ef:68:3d:37:34:b6:22:01:b9:
ba:2a:68:10:f1:5e:60:6a:ae:29:8e:67:43:a3:57:
db:16:73:ab:b0:c0:23:02:d9:96:b8:87:04:19:33:
88:c8:29:eb:de:3e:0b:62:db:44:6e:12:94:30:e3:
ee:b7:e3:ee:e8:39:aa:09:87:e2:7e:d1:3c:c3:2a:
dc:b0:d6:9f:ef:59:38:92:d9:1e:7d:b7:5a:ae:3d:
91:8b:43:97:6c:65:02:5a:72:2d:50:c0:57:12:e4:
c8:53:73:d5:75:ab:48:9e:5e:88:c4:4c:1a:1f:6e:
b3:15:9a:70:89:20:62:90:2c:e4:f8:2c:5f:b0:5e:
5f:e2:0e:01:b7:6d:f7:d1:d9:2a:50:d2:db:19:0f:
56:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:32:97:94:81:3E:88:8F:22:5E:DE:2E:8E:F7:A6:52:60:82:2B:1B
X509v3 Authority Key Identifier:
keyid:CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d6:9c:8f:0a:3e:88:6c:24:a6:67:f6:aa:11:ba:bd:d3:a0:
fa:74:06:60:b0:26:05:68:0c:d8:ea:07:03:0e:7b:54:c8:12:
34:7f:04:9b:72:1d:94:47:16:e7:4d:49:4e:1a:37:6d:47:a0:
1f:7d:f0:e0:50:df:b1:a2:29:4b:e7:39:cf:19:0a:59:13:70:
1b:12:da:1b:07:70:f5:fd:49:36:ac:83:36:05:d2:dd:89:9f:
76:aa:dc:fc:43:71:fd:c5:cf:36:db:c0:ae:91:82:f2:42:62:
ae:96:e6:c8:b4:0c:87:b8:42:30:7b:e9:92:bd:38:1c:9e:c6:
b3:36:0f:ff:e7:9e:01:bf:07:1e:60:1b:8f:48:01:62:63:f4:
51:cc:aa:9f:62:d3:76:a0:7f:53:4b:98:8c:de:c3:9b:56:8a:
57:fd:ec:71:b6:c6:05:ac:4c:0a:26:aa:a2:0f:00:c5:52:79:
2e:9b:38:b1:20:14:43:3c:fc:d4:48:4e:a8:47:69:e1:ce:19:
21:6d:18:f7:6b:0a:25:5e:00:9e:48:00:42:08:d9:78:cd:1d:
04:f6:c4:74:0f:35:47:05:28:a3:30:09:38:02:c9:ec:45:02:
80:4c:e6:ae:3d:84:f9:60:d8:fb:95:88:fe:7d:44:32:18:0d:
16:74:ed:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:35:22 2026 by rpki-client