
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft
File: ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft (raw, json)
Hash identifier: miSNGzM0atp0XhACGtZC1Y4EBTz3riJ85f1Xcw4u8y8=
Subject key identifier: 40:95:7A:23:D4:A7:21:8F:95:36:85:2C:9A:F1:03:0E:0F:65:03:E9
Authority key identifier: 66:C3:06:D2:3F:8B:FE:AA:A4:4C:CC:C5:57:39:69:51:F9:86:C6:BD
Certificate issuer: /CN=A914DA9E/serialNumber=66C306D23F8BFEAAA44CCCC557396951F986C6BD
Certificate serial: DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft
Manifest number: D8
Signing time: Sat 13 Jun 2026 06:45:53 +0000
Manifest this update: Sat 13 Jun 2026 06:45:53 +0000
Manifest next update: Sat 20 Jun 2026 06:45:53 +0000
Files and hashes: 1: ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl (hash: DRI9utYQSYNKjbHzH52AzrgPc8LQxKaEdTKk1edWEjw=)
2: 7E10232C1F3411F0BFBD616EC4F9AE02.roa (hash: nKzM70QPhUVpp0u2YyPA0zkA9ybuWJok66S7cxRVoIQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl
rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:45:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DA9E, serialNumber=66C306D23F8BFEAAA44CCCC557396951F986C6BD
Validity
Not Before: Jun 13 06:45:53 2026 GMT
Not After : Jun 20 06:45:53 2026 GMT
Subject: CN=6a2cfca1-37ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cf:25:88:d6:28:a2:5f:77:c0:11:01:2f:4c:
3f:8e:62:e6:e0:d0:bd:d9:53:5f:cb:f3:e2:48:23:
7c:2a:ab:66:ef:81:6e:23:57:81:a9:85:d9:5d:fc:
49:b1:b7:83:17:db:12:fc:bf:bb:34:08:0a:3c:82:
12:fe:dd:98:7f:32:c4:f0:86:2b:cb:96:b6:e8:08:
48:b7:29:90:05:20:83:2c:8f:fe:35:f9:16:fe:b4:
f6:3f:5b:5d:70:c8:32:65:f9:8e:20:98:1d:82:5d:
b6:71:12:be:e6:6b:45:5b:ed:bf:23:fe:b0:b7:6c:
12:78:30:39:55:6a:1e:b1:b5:bf:84:dc:30:2b:ad:
bd:b8:f4:e5:b1:85:cb:d2:73:46:54:a4:74:92:a4:
ab:d2:59:69:00:40:0a:29:cf:21:8b:6a:cd:6c:b4:
8b:85:d3:d5:2a:66:17:64:50:b9:8e:8f:05:1e:3c:
61:3c:c6:f9:cd:be:d1:27:75:e8:1f:6d:9c:75:e8:
43:35:da:31:ac:94:87:4f:5e:c7:16:59:66:19:f4:
9f:cd:a9:f6:a9:02:d5:97:39:f9:f5:1e:a6:14:6a:
12:40:8e:69:13:48:aa:13:3e:21:1d:80:06:a7:4d:
c4:1d:a6:57:8c:88:c3:9d:1a:ce:e8:9d:fe:95:19:
4e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:95:7A:23:D4:A7:21:8F:95:36:85:2C:9A:F1:03:0E:0F:65:03:E9
X509v3 Authority Key Identifier:
keyid:66:C3:06:D2:3F:8B:FE:AA:A4:4C:CC:C5:57:39:69:51:F9:86:C6:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:6f:b1:a9:1b:0b:16:88:22:1d:e3:4f:9f:fa:4a:3e:32:f6:
40:ae:a7:3f:82:50:33:41:f5:aa:eb:c5:48:5a:2d:60:04:d3:
74:bf:dd:b1:8d:00:2d:77:58:8d:5d:68:1c:bb:0e:5f:a9:14:
b0:f0:91:05:42:74:45:39:42:78:12:9e:83:b3:fd:fb:42:0f:
44:ef:69:12:7c:3a:5a:38:d6:a6:e3:b9:ce:98:25:1f:e4:d2:
1c:8a:68:60:02:ba:2b:76:ed:65:a3:2a:a9:99:0d:c8:ec:cc:
b9:ad:1e:0c:e3:21:a4:8b:8b:dc:7d:ce:a5:29:70:da:60:f7:
4f:07:e9:4a:fe:35:c4:5a:3c:07:0c:89:62:46:ef:ac:18:a7:
26:03:2d:1b:8c:8e:d2:ed:c1:3b:b7:39:a6:55:f6:5f:bf:70:
a9:87:1b:67:94:ef:46:eb:c6:65:e4:2e:80:ba:84:a7:d5:88:
30:d2:a6:49:99:c6:ae:b5:ea:d4:d1:f4:13:66:f7:fb:0f:94:
db:45:21:08:8f:15:a7:54:38:71:62:12:8a:50:70:e0:fa:0f:
98:41:ce:d6:ee:c7:1a:e3:7e:2b:fc:69:aa:62:68:a8:07:83:
a9:99:ce:cf:d5:15:e8:b9:78:e2:64:50:94:fd:ea:cf:0a:88:
75:19:fe:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:32:52 2026 by rpki-client