
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
File: zEJAcHQQNjc16_bvsZT7Zw80X0I.mft (raw, json)
Hash identifier: 0vNx4qxUpzmly9ANUjWrH8vbzQ9l7emb2zXIG2zi1Kw=
Subject key identifier: 18:F2:5A:38:65:3F:6D:51:B8:82:6B:31:69:2C:AF:DB:40:65:DC:B0
Authority key identifier: CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42
Certificate issuer: /CN=A9160AEE/serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
Certificate serial: BD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
Manifest number: AD
Signing time: Mon 27 Jul 2026 09:32:47 +0000
Manifest this update: Mon 27 Jul 2026 09:32:46 +0000
Manifest next update: Mon 03 Aug 2026 09:32:46 +0000
Files and hashes: 1: zEJAcHQQNjc16_bvsZT7Zw80X0I.crl (hash: 4f8VUzTgWWTyefWop24HFCavjNmg0XIAj65K59EHOaw=)
2: 6FBBA45AFD2711F0B1802E18426F56BC.roa (hash: InU5YhYgQdECTfOQlDj5F02bMyaCjuUJFEGGYk6O1Jc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl
rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:32:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160AEE, serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
Validity
Not Before: Jul 27 09:32:46 2026 GMT
Not After : Aug 3 09:32:46 2026 GMT
Subject: CN=6a6725be-f095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6f:0f:98:87:bf:9c:71:cf:94:0b:14:35:e4:
b7:8c:de:ac:02:be:3c:53:ee:09:75:a4:9a:c9:a0:
c9:d3:41:f7:2a:01:52:81:09:52:ae:2a:13:d1:4f:
c0:a3:77:e2:9a:24:5b:2e:66:fb:73:9d:29:29:e4:
27:a7:ab:b5:1d:e3:64:92:64:ab:2e:39:f6:34:fc:
89:d5:d1:31:23:0b:bb:b0:4f:0a:82:0f:3b:ef:cf:
53:ae:df:aa:fa:27:27:cf:d4:8d:8f:b9:67:2b:95:
a1:6a:ec:66:a8:5e:7d:f9:a8:24:b6:a2:e6:bd:ee:
2b:33:ff:18:27:9a:97:fb:25:e9:91:a6:41:2b:a1:
6f:e6:9c:ee:bd:8c:87:cb:7d:23:6d:ac:1a:fe:a5:
9a:2b:52:ed:fb:d6:cc:57:2d:1d:5c:dc:d2:84:b1:
6f:5e:b9:ec:97:10:36:4a:a2:7b:b3:82:1f:eb:c2:
a2:61:07:94:fb:ee:0d:95:38:c0:ef:9e:dc:f7:f7:
93:e9:b8:2e:9e:8e:c2:9e:dc:f2:30:ec:23:af:e5:
06:1c:bc:58:6d:80:e6:46:d7:52:62:50:06:25:d7:
af:cf:fd:01:c1:c8:54:80:b0:65:9b:d2:31:c1:4c:
67:52:8c:06:3f:47:5f:72:82:71:f8:5c:73:91:17:
77:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F2:5A:38:65:3F:6D:51:B8:82:6B:31:69:2C:AF:DB:40:65:DC:B0
X509v3 Authority Key Identifier:
keyid:CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:e8:92:7b:3a:66:c2:4e:93:02:a8:e7:ff:29:94:92:91:b1:
9c:0b:83:4c:b1:8c:8a:ad:a8:f0:54:66:8d:9a:93:33:7a:2b:
be:54:a7:98:a4:51:92:b7:b2:fa:c1:33:2a:ad:04:4c:b6:70:
06:07:05:83:93:2c:d6:44:b3:80:ff:a9:5f:a3:0d:97:20:c7:
49:4e:7e:c2:23:d8:cd:19:0d:cf:9a:91:e7:7b:39:66:ba:bc:
e0:cd:28:38:2c:f1:6b:69:8a:80:a0:00:7e:b0:75:07:f1:f2:
b2:fb:ae:9a:31:3d:a3:3e:fb:60:99:33:5e:54:fd:97:9f:b1:
8e:a8:41:80:d7:b1:87:25:10:9a:ec:ea:d6:05:8f:53:d3:6e:
5b:39:fa:00:d0:52:6b:97:2b:57:92:59:b2:7b:86:33:fd:35:
ac:09:ff:15:19:ef:45:da:31:5c:c4:f8:fc:8b:8c:7a:55:11:
7e:9e:c5:81:b5:87:14:9f:c7:1f:07:00:99:61:21:d4:49:15:
91:3b:0f:c1:39:d9:80:03:4e:59:53:29:ed:b8:dc:ea:65:b5:
6e:9a:ab:b5:b1:4e:ac:ef:29:ad:28:55:74:e8:a0:91:47:a6:
f4:22:9b:47:30:60:5c:82:6c:1c:f0:79:eb:6e:0b:1c:89:62:
53:09:5e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:57:03 2026 by rpki-client