
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
File: zEJAcHQQNjc16_bvsZT7Zw80X0I.mft (raw, json)
Hash identifier: BYCkhzVBapVyhboBeoATsF6sAUFuSlAsfeMHsNF4O+U=
Subject key identifier: 5E:21:7F:EB:85:E8:4E:AC:00:CD:2C:8E:E0:F0:14:E9:27:27:2E:2E
Authority key identifier: CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42
Certificate issuer: /CN=A9160AEE/serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
Certificate serial: A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
Manifest number: 97
Signing time: Sat 13 Jun 2026 07:42:05 +0000
Manifest this update: Sat 13 Jun 2026 07:42:05 +0000
Manifest next update: Sat 20 Jun 2026 07:42:05 +0000
Files and hashes: 1: zEJAcHQQNjc16_bvsZT7Zw80X0I.crl (hash: PFMJA6FsaK9K1mU9FiRYtbb/HWk367itkoHr1ekX3AQ=)
2: 6FBBA45AFD2711F0B1802E18426F56BC.roa (hash: InU5YhYgQdECTfOQlDj5F02bMyaCjuUJFEGGYk6O1Jc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl
rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:42:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160AEE, serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
Validity
Not Before: Jun 13 07:42:05 2026 GMT
Not After : Jun 20 07:42:05 2026 GMT
Subject: CN=6a2d09cd-d080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c9:34:e8:db:8f:0d:b5:87:55:d5:8d:1a:3f:
79:c9:95:95:ac:b2:f3:42:e2:a7:e3:b0:33:d4:06:
a1:f5:47:b2:a9:9b:49:4b:17:2d:8f:54:b9:41:05:
61:5b:4c:96:12:74:86:9a:d3:5d:d2:81:da:2e:c8:
e9:9a:4f:ed:f2:04:a1:7b:08:e8:88:0b:ef:04:99:
48:b0:fe:14:65:10:45:e8:b2:38:05:35:cd:ee:d0:
62:a8:fb:9e:52:59:e6:ba:2f:73:8a:71:12:7b:c1:
90:fc:e2:40:2d:ab:68:eb:8c:71:f3:26:4e:4e:ff:
33:d8:01:82:37:21:2a:43:ae:b3:3b:a3:31:b6:7a:
34:90:43:c0:a3:53:89:13:3e:b6:b2:09:6f:70:ff:
85:12:18:06:98:8a:43:36:49:a9:ff:44:94:7e:75:
ba:e3:53:b6:62:95:99:0a:02:d2:44:f0:96:6c:47:
ce:7c:cc:99:82:cb:38:fe:8d:89:7f:16:0d:92:16:
7c:6b:ad:11:f2:d1:a0:be:e3:4d:69:cf:d4:4e:11:
c7:24:7d:7c:ce:a1:43:ad:28:7b:12:0b:da:dc:b3:
39:a8:01:ba:3d:f2:55:0e:e8:ac:1b:84:8c:aa:af:
2d:c7:f2:ad:7b:fd:1b:75:36:a5:ac:01:ac:e8:4e:
eb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:21:7F:EB:85:E8:4E:AC:00:CD:2C:8E:E0:F0:14:E9:27:27:2E:2E
X509v3 Authority Key Identifier:
keyid:CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:b6:c4:27:96:89:7d:f4:cf:b1:93:ae:18:f0:5b:87:2d:9e:
b8:09:a8:41:e2:d8:30:1d:17:ae:24:25:44:92:6d:66:93:20:
45:4d:8f:c5:71:b7:f8:36:cf:65:66:d5:dd:cf:af:18:9b:5f:
ac:7b:45:c0:9f:30:02:05:20:bd:e6:86:21:f8:b0:8c:fb:0f:
67:c0:23:66:e7:da:e0:1e:3c:54:cb:1a:8e:5f:b2:10:8f:88:
28:d6:6d:4a:6d:88:d9:9b:f1:5d:f1:f7:f7:0e:33:c4:3d:eb:
80:ca:38:27:7e:b5:2d:8b:f3:91:90:8c:5b:a8:12:b3:33:5b:
e7:b6:43:15:db:cd:d1:44:a4:32:01:99:c6:01:7d:0f:9e:b1:
f4:cd:99:41:58:18:25:cd:5e:12:87:15:8c:6f:1f:64:f0:df:
8c:1d:b0:28:da:9d:5a:81:9b:7f:76:1e:92:69:8a:c4:3c:d0:
22:c2:3b:11:98:9a:40:70:06:d5:72:9c:69:eb:4c:e7:20:d7:
87:85:b5:26:fd:65:05:3b:f5:7d:1b:bb:4d:dc:d4:ed:c1:a9:
4a:f8:0e:18:18:81:2f:ea:21:e9:07:a0:0e:87:8b:85:5b:cb:
04:d2:c5:5e:d1:0c:d1:bc:f1:77:c5:cd:e8:3d:70:26:71:0e:
03:4e:a4:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBBRUUxMTAvBgNVBAUTKENDNDI0MDcwNzQxMDM2MzczNUVCRjZFRkIxOTRGQjY3
MEYzNDVGNDIwHhcNMjYwNjEzMDc0MjA1WhcNMjYwNjIwMDc0MjA1WjAYMRYwFAYD
VQQDEw02YTJkMDljZC1kMDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu8k06NuPDbWHVdWNGj95yZWVrLLzQuKn47Az1Aah9UeyqZtJSxctj1S5QQVh
W0yWEnSGmtNd0oHaLsjpmk/t8gShewjoiAvvBJlIsP4UZRBF6LI4BTXN7tBiqPue
Ulnmui9zinESe8GQ/OJALato64xx8yZOTv8z2AGCNyEqQ66zO6Mxtno0kEPAo1OJ
Ez62sglvcP+FEhgGmIpDNkmp/0SUfnW641O2YpWZCgLSRPCWbEfOfMyZgss4/o2J
fxYNkhZ8a60R8tGgvuNNac/UThHHJH18zqFDrSh7Egva3LM5qAG6PfJVDuisG4SM
qq8tx/Kte/0bdTalrAGs6E7rPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF4hf+uF
6E6sAM0sjuDwFOknJy4uMB8GA1UdIwQYMBaAFMxCQHB0EDY3Nev277GU+2cPNF9C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEFFRS8xODhDQUYwNkEz
RUMxMUYwQjhFOTdGMzdDNEY5QUUwMi96RUpBY0hRUU5qYzE2X2J2c1pUN1p3ODBY
MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3pFSkFjSFFRTmpjMTZfYnZzWlQ3Wnc4MFgwSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MEFFRS8xODhDQUYwNkEzRUMxMUYwQjhFOTdGMzdDNEY5QUUwMi96RUpBY0hRUU5q
YzE2X2J2c1pUN1p3ODBYMEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAErbEJ5aJffTPsZOuGPBbhy2euAmoQeLYMB0XriQlRJJtZpMgRU2PxXG3+DbP
ZWbV3c+vGJtfrHtFwJ8wAgUgveaGIfiwjPsPZ8AjZufa4B48VMsajl+yEI+IKNZt
Sm2I2ZvxXfH39w4zxD3rgMo4J361LYvzkZCMW6gSszNb57ZDFdvN0USkMgGZxgF9
D56x9M2ZQVgYJc1eEocVjG8fZPDfjB2wKNqdWoGbf3YekmmKxDzQIsI7EZiaQHAG
1XKcaetM5yDXh4W1Jv1lBTv1fRu7TdzU7cGpSvgOGBiBL+oh6QegDoeLhVvLBNLF
XtEM0bzxd8XN6D1wJnEOA06kGw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:34:26 2026 by rpki-client