
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft
File: ZrIR6cz336FdfNNyNqX1gvGUUwo.mft (raw, json)
Hash identifier: WcXomYguaggwuc2E7Az5RNQthh9kzqABNO0Ls0tHPYM=
Subject key identifier: 78:4C:E8:E1:00:16:69:64:21:8F:FE:80:A7:83:CB:8A:AF:48:DD:FC
Authority key identifier: 66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A
Certificate issuer: /CN=A9162C2C/serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A
Certificate serial: 061D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft
Manifest number: 0619
Signing time: Fri 12 Jun 2026 22:50:45 +0000
Manifest this update: Fri 12 Jun 2026 22:50:44 +0000
Manifest next update: Fri 19 Jun 2026 22:50:44 +0000
Files and hashes: 1: ZrIR6cz336FdfNNyNqX1gvGUUwo.crl (hash: Ip0PZiF2Bjkpjs9WCoN6QNUMUrx6wcfdI2lKUrnAzow=)
2: B9FDAFA436D511F09007A616C4F9AE02.roa (hash: 14hjxCWDN1Xl0Tkh1WoOKZgmhqThzo7epHMxj3MS5qU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl
rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:50:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1565 (0x61d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162C2C, serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A
Validity
Not Before: Jun 12 22:50:44 2026 GMT
Not After : Jun 19 22:50:44 2026 GMT
Subject: CN=6a2c8d44-a3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:4e:ec:69:72:01:8f:bc:bb:e0:d6:9d:10:
ea:2f:a4:94:29:7b:bd:5e:00:3e:87:06:b5:a4:12:
a9:38:81:78:a6:f9:2c:93:09:18:8b:24:a6:68:8c:
9c:8d:f0:5a:ed:e6:2c:0f:a2:2b:29:88:d8:d5:dc:
23:ff:79:9e:31:2e:9f:b1:bc:f2:34:85:48:0f:af:
57:bd:cf:c2:b6:c2:0f:f0:c6:7d:89:b7:d3:8e:0c:
b2:ae:d4:62:e0:73:e2:28:2d:50:51:1c:2b:fb:0d:
8d:d7:57:07:44:19:6c:97:28:4b:98:e1:70:87:20:
7a:28:90:45:cd:aa:86:bd:15:48:f4:90:1c:65:e1:
66:9e:37:30:ad:76:5d:5a:cd:c5:eb:1d:c9:6d:13:
b1:2c:7f:72:8c:20:a1:eb:7c:ea:26:5d:a2:43:3c:
c3:91:d3:11:e8:fa:09:99:f6:9a:b9:a0:97:b3:51:
e3:87:72:78:e7:ef:f1:dd:6d:46:7e:51:61:74:d5:
fa:24:65:1a:d0:18:ae:9a:d3:2c:63:1a:87:b3:7c:
a8:de:a9:b8:d8:40:45:d1:34:b2:cb:ee:9b:45:e8:
4e:6c:07:6b:8a:45:d4:e8:98:65:8f:81:12:d2:35:
d1:3f:f8:f3:ac:7c:e0:dd:66:ae:82:71:99:03:10:
0b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4C:E8:E1:00:16:69:64:21:8F:FE:80:A7:83:CB:8A:AF:48:DD:FC
X509v3 Authority Key Identifier:
keyid:66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:02:8e:16:6e:aa:07:b8:71:83:b5:4c:98:1a:f6:8d:4d:85:
83:b4:e7:aa:a1:59:92:d3:be:b0:38:0e:52:ee:a3:ab:c4:bd:
e2:cc:72:db:01:a0:ff:0b:11:a5:72:46:f9:8b:af:1b:67:81:
a9:60:1b:71:02:4d:fa:76:f9:2d:86:65:1f:b1:60:74:7d:48:
c8:9c:53:cd:52:a6:bf:50:9f:b8:8c:a1:84:63:b5:0d:5f:73:
3b:9d:97:9a:2c:82:f1:8d:7a:e2:22:51:2a:36:9e:23:80:be:
39:45:43:98:5a:5a:f0:77:a0:ee:c4:cd:73:22:a0:b7:96:e1:
d8:be:d7:2b:76:c4:f5:9f:55:58:d6:16:21:4f:65:89:a6:ce:
fd:95:0c:37:3f:8a:9d:a6:0e:41:1d:15:59:98:c5:bd:65:18:
56:ab:18:49:0d:4c:fd:dc:61:b5:16:02:4c:54:d7:8d:50:d7:
77:ed:40:c2:2f:f1:d8:76:d8:e3:5e:8f:3d:cb:dc:48:4e:e3:
66:0a:4d:27:b7:d5:2a:6e:cd:10:85:6a:d1:9a:fa:bf:8a:d9:
7e:cf:09:40:2d:fd:e4:9e:eb:42:c1:3c:7f:9a:f2:c4:18:ac:
aa:2b:11:a5:b3:68:b7:07:4b:ae:f2:0e:61:bb:9e:19:66:4c:
23:a1:6b:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjJDMkMxMTAvBgNVBAUTKDY2QjIxMUU5Q0NGN0RGQTE1RDdDRDM3MjM2QTVGNTgy
RjE5NDUzMEEwHhcNMjYwNjEyMjI1MDQ0WhcNMjYwNjE5MjI1MDQ0WjAYMRYwFAYD
VQQDEw02YTJjOGQ0NC1hM2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsQxO7GlyAY+8u+DWnRDqL6SUKXu9XgA+hwa1pBKpOIF4pvkskwkYiySmaIyc
jfBa7eYsD6IrKYjY1dwj/3meMS6fsbzyNIVID69Xvc/CtsIP8MZ9ibfTjgyyrtRi
4HPiKC1QURwr+w2N11cHRBlslyhLmOFwhyB6KJBFzaqGvRVI9JAcZeFmnjcwrXZd
Ws3F6x3JbROxLH9yjCCh63zqJl2iQzzDkdMR6PoJmfaauaCXs1Hjh3J45+/x3W1G
flFhdNX6JGUa0BiumtMsYxqHs3yo3qm42EBF0TSyy+6bRehObAdrikXU6Jhlj4ES
0jXRP/jzrHzg3WaugnGZAxALfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHhM6OEA
FmlkIY/+gKeDy4qvSN38MB8GA1UdIwQYMBaAFGayEenM99+hXXzTcjal9YLxlFMK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkMyQy8wQTExREIxNkVB
ODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2RmRmTk55TnFYMWd2R1VV
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pySVI2Y3ozMzZGZGZOTnlOcVgxZ3ZHVVV3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MkMyQy8wQTExREIxNkVBODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2
RmRmTk55TnFYMWd2R1VVd28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnAKOFm6qB7hxg7VMmBr2jU2Fg7TnqqFZktO+sDgOUu6jq8S94sxy2wGg/wsR
pXJG+YuvG2eBqWAbcQJN+nb5LYZlH7FgdH1IyJxTzVKmv1CfuIyhhGO1DV9zO52X
miyC8Y164iJRKjaeI4C+OUVDmFpa8Heg7sTNcyKgt5bh2L7XK3bE9Z9VWNYWIU9l
iabO/ZUMNz+KnaYOQR0VWZjFvWUYVqsYSQ1M/dxhtRYCTFTXjVDXd+1Awi/x2HbY
416PPcvcSE7jZgpNJ7fVKm7NEIVq0Zr6v4rZfs8JQC395J7rQsE8f5ryxBisqisR
pbNotwdLrvIOYbueGWZMI6Frmw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:12:58 2026 by rpki-client