
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
File: ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft (raw, json)
Hash identifier: u3qj+OAxMAOxlKlxcV5sp+j2Shd0OeTRyv0dEi5+7QQ=
Subject key identifier: 10:18:01:C9:E8:CE:74:37:58:7E:A2:AE:81:06:10:15:E0:17:D1:87
Authority key identifier: 65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB
Certificate issuer: /CN=A9157A68/serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB
Certificate serial: 08EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
Manifest number: 08D7
Signing time: Fri 12 Jun 2026 20:25:38 +0000
Manifest this update: Fri 12 Jun 2026 20:25:37 +0000
Manifest next update: Fri 19 Jun 2026 20:25:37 +0000
Files and hashes: 1: ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl (hash: nk5xKHmK85z7h3UfK3wjn7OyfZCQftuY4RUgCvLr0FQ=)
2: CCB2690EED0B11F0949792B43C6F56BC.roa (hash: ZB/ULJRoBGb/gcATfxowXu3Mcvz58isc65+AiNaWIZA=)
3: 294CEBA68FDD11EDBC45E84DC4F9AE02.roa (hash: hJLpP/cI9jDZ/8DhHypoNSXnMVx/3+PYyqeD/Uo9Ujw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl
rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2283 (0x8eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157A68, serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB
Validity
Not Before: Jun 12 20:25:37 2026 GMT
Not After : Jun 19 20:25:37 2026 GMT
Subject: CN=6a2c6b42-46cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:17:50:97:6d:74:fa:34:16:41:63:f4:11:37:
e2:5a:b2:5f:24:fe:9b:d7:38:bf:8e:88:14:41:b1:
b7:39:37:dc:a0:14:40:a0:51:be:18:82:84:af:c4:
6b:56:37:e6:9c:68:c0:58:00:6c:25:78:57:10:6d:
9a:07:0a:bb:23:17:31:38:12:bf:34:b2:fa:31:45:
1d:21:4a:e4:0b:90:b1:f6:1b:cf:29:09:88:32:bc:
91:59:55:89:01:7b:78:87:f2:67:6a:55:ac:39:5c:
63:e3:30:88:a5:bf:80:c2:56:08:8f:c9:db:4e:df:
f0:76:48:e3:ec:83:c1:04:13:af:91:7d:d0:1a:ea:
4d:b1:b0:1c:4d:39:ff:6f:d5:34:07:ec:9e:03:1d:
8c:16:de:1d:58:74:30:c1:9b:27:05:fd:a2:76:34:
57:89:74:a0:01:0d:d1:c3:86:0b:cc:cc:b7:40:14:
5d:02:17:50:1c:ba:c9:ad:4d:12:3b:8c:2a:cb:57:
79:ed:ef:2d:09:64:7b:84:8e:34:a5:58:d6:4f:5a:
07:15:08:9b:0f:af:09:62:02:3d:bd:22:04:d0:0c:
28:2e:97:c7:7f:ff:47:ef:8d:df:c7:3e:90:19:69:
aa:8c:05:48:81:88:f2:ff:e7:1f:2b:25:05:66:80:
49:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:18:01:C9:E8:CE:74:37:58:7E:A2:AE:81:06:10:15:E0:17:D1:87
X509v3 Authority Key Identifier:
keyid:65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:bf:32:04:48:30:41:b7:eb:82:c2:8d:6f:0b:61:a0:2c:b9:
36:d5:08:94:a6:14:0b:ba:db:aa:23:ad:c9:94:d2:18:06:6d:
4c:7c:2c:e5:24:d0:c8:3c:24:95:31:61:f9:18:c2:d2:8b:1f:
d0:20:8d:b2:36:8a:53:2d:be:15:13:9f:b8:80:e2:ba:bd:e5:
36:dc:b9:60:7a:a7:4d:6a:8e:ec:56:1b:fb:2e:0b:2c:88:62:
35:a2:8c:38:47:2d:d1:fa:ac:fb:36:71:71:32:ea:e3:4b:98:
b6:53:26:01:66:91:c8:cf:95:fb:28:55:9c:ee:a9:56:1e:61:
23:e6:96:81:0e:7f:7d:0a:26:52:06:80:c2:f7:f3:0a:44:21:
2a:67:42:b6:2e:83:18:23:41:89:4f:50:7b:f4:41:93:bb:9b:
10:93:ed:5b:d6:45:16:d0:8d:2b:24:ea:12:18:cb:30:7d:6d:
87:c8:c9:38:7c:ca:9d:71:6e:41:ce:ca:d4:73:b4:4e:37:d4:
10:a5:26:8a:d0:9a:c9:aa:52:c9:b6:a9:07:04:22:77:7d:12:
2f:55:b2:a8:b2:9a:67:99:29:35:e9:cc:c3:67:3b:73:96:e4:
81:e1:74:d0:f8:ae:b2:76:c7:7f:39:2b:22:53:c9:1e:53:c2:
2f:fc:15:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdBNjgxMTAvBgNVBAUTKDY1QjdBRDk2NzVCMzgwOUVDRTA0QUYzMDFDMkVCNzAz
N0ZGMDJCQkIwHhcNMjYwNjEyMjAyNTM3WhcNMjYwNjE5MjAyNTM3WjAYMRYwFAYD
VQQDEw02YTJjNmI0Mi00NmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzBdQl210+jQWQWP0ETfiWrJfJP6b1zi/jogUQbG3OTfcoBRAoFG+GIKEr8Rr
VjfmnGjAWABsJXhXEG2aBwq7IxcxOBK/NLL6MUUdIUrkC5Cx9hvPKQmIMryRWVWJ
AXt4h/JnalWsOVxj4zCIpb+AwlYIj8nbTt/wdkjj7IPBBBOvkX3QGupNsbAcTTn/
b9U0B+yeAx2MFt4dWHQwwZsnBf2idjRXiXSgAQ3Rw4YLzMy3QBRdAhdQHLrJrU0S
O4wqy1d57e8tCWR7hI40pVjWT1oHFQibD68JYgI9vSIE0AwoLpfHf/9H743fxz6Q
GWmqjAVIgYjy/+cfKyUFZoBJZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBAYAcno
znQ3WH6iroEGEBXgF9GHMB8GA1UdIwQYMBaAFGW3rZZ1s4CezgSvMBwutwN/8Cu7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0E2OC80QjM2QjlCOERC
REExMUVBOUE4RDI4NDBDNEY5QUUwMi9aYmV0bG5XemdKN09CSzh3SEM2M0EzX3dL
N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1piZXRsbld6Z0o3T0JLOHdIQzYzQTNfd0s3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
N0E2OC80QjM2QjlCOERCREExMUVBOUE4RDI4NDBDNEY5QUUwMi9aYmV0bG5XemdK
N09CSzh3SEM2M0EzX3dLN3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASb8yBEgwQbfrgsKNbwthoCy5NtUIlKYUC7rbqiOtyZTSGAZtTHws5STQyDwk
lTFh+RjC0osf0CCNsjaKUy2+FROfuIDiur3lNty5YHqnTWqO7FYb+y4LLIhiNaKM
OEct0fqs+zZxcTLq40uYtlMmAWaRyM+V+yhVnO6pVh5hI+aWgQ5/fQomUgaAwvfz
CkQhKmdCti6DGCNBiU9Qe/RBk7ubEJPtW9ZFFtCNKyTqEhjLMH1th8jJOHzKnXFu
Qc7K1HO0TjfUEKUmitCayapSybapBwQid30SL1WyqLKaZ5kpNenMw2c7c5bkgeF0
0PiusnbHfzkrIlPJHlPCL/wVkg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:05:07 2026 by rpki-client