
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft
File: zES2e9GPRfbhN63kcxM1pVGmYSc.mft (raw, json)
Hash identifier: BZBQbc+dk1lF9H9uLOZlwIuSNJWQYNQSe4qBRfrYWaY=
Subject key identifier: A4:F1:0C:7B:ED:0B:6F:0C:2C:C5:54:30:3F:ED:30:E3:7D:5A:46:FD
Authority key identifier: CC:44:B6:7B:D1:8F:45:F6:E1:37:AD:E4:73:13:35:A5:51:A6:61:27
Certificate issuer: /CN=A916523A/serialNumber=CC44B67BD18F45F6E137ADE4731335A551A66127
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft
Manifest number: ED
Signing time: Mon 21 Sep 2026 06:23:40 +0000
Manifest this update: Mon 21 Sep 2026 06:23:40 +0000
Manifest next update: Mon 28 Sep 2026 06:23:40 +0000
Files and hashes: 1: zES2e9GPRfbhN63kcxM1pVGmYSc.crl (hash: 39/Wt4pZ7/bI26TGRjvcvtlGyaljknrL9OyEZGGS8Zc=)
2: 469F3FE44CDF11F08D2EFF16C4F9AE02.roa (hash: a0gJVidh3CzBFwIa6hJB8PakgEK14/bCQvJ2r5FU3Og=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.crl
rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:23:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916523A, serialNumber=CC44B67BD18F45F6E137ADE4731335A551A66127
Validity
Not Before: Sep 21 06:23:40 2026 GMT
Not After : Sep 28 06:23:40 2026 GMT
Subject: CN=6ab0cd6c-8e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:57:31:fb:1b:e3:7f:54:1e:9a:ad:49:0b:d5:
f3:64:fd:7b:25:2b:be:84:1f:d2:85:c2:f8:8a:7e:
15:6c:e8:58:0b:63:77:0d:a1:73:96:b7:9c:99:68:
c1:8b:e5:65:d9:22:04:e3:3f:e8:6f:4b:16:ae:e9:
6b:48:f2:f0:53:c3:e4:dc:57:89:b2:be:ba:9a:d0:
38:ee:e8:97:1a:a1:ff:8a:95:c4:45:fd:a6:d7:5d:
51:34:2c:04:78:f3:17:27:38:9b:04:71:15:fb:26:
c6:0e:5f:8c:67:d6:81:85:d8:25:fe:a9:60:38:5b:
72:1b:fe:b5:dc:60:0f:4e:be:c8:05:04:9d:bc:06:
60:2c:a8:0e:37:5b:c9:7e:0c:8b:99:cd:82:ac:a3:
6f:0d:f8:0b:44:b8:3f:8d:5c:ea:cc:73:b8:34:81:
e6:18:74:95:7f:eb:10:f7:1e:fc:36:7f:95:4f:b7:
a0:4c:cd:c0:50:3f:29:d2:d1:3e:84:2c:b3:f8:28:
b1:1e:08:2a:5c:0f:71:9a:fe:55:af:83:a1:28:41:
1f:39:54:cc:bc:d8:fd:e0:25:5e:9d:12:8b:e6:2b:
2a:ad:b6:e3:5a:90:5c:9a:96:1f:a5:5b:f3:06:76:
7e:87:af:dc:03:94:8b:42:d1:77:81:46:1f:12:b1:
36:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F1:0C:7B:ED:0B:6F:0C:2C:C5:54:30:3F:ED:30:E3:7D:5A:46:FD
X509v3 Authority Key Identifier:
keyid:CC:44:B6:7B:D1:8F:45:F6:E1:37:AD:E4:73:13:35:A5:51:A6:61:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:d8:5e:ae:31:23:01:c3:f5:29:74:fd:e1:3d:ee:04:71:a0:
8e:e1:95:72:3c:f6:01:d4:41:30:e7:ef:5d:1e:01:80:61:38:
ce:6a:b4:89:35:bc:68:6b:a3:99:ca:a5:1f:61:25:7f:60:79:
6e:a5:98:d1:20:8f:50:ee:86:26:05:a2:51:34:6d:97:ea:65:
02:31:aa:55:ca:ef:f6:c5:17:ba:0e:5e:5e:f7:a9:48:b8:40:
5d:a5:80:20:28:5f:c1:a1:d4:a5:b1:ad:a6:8d:6f:d7:c3:59:
49:32:d4:bd:11:db:98:e0:01:69:14:3d:43:ff:86:80:e3:ad:
9c:aa:b9:09:b0:6f:ce:ff:cb:9f:3d:13:64:43:4e:09:86:03:
f7:e5:85:ce:66:f3:a3:95:52:54:c1:78:2e:7b:31:e2:77:6b:
90:81:38:c5:79:a1:10:a5:fa:b3:41:87:89:88:2f:b7:76:0a:
f7:8a:3a:f4:c4:e2:61:51:ac:25:f8:b6:19:21:b8:50:94:d5:
c1:21:22:cc:77:5a:b3:10:98:62:0d:88:39:a7:72:3b:39:b6:
a0:1a:93:2f:a3:da:c4:f1:21:58:15:6d:68:14:62:21:35:be:
8b:fe:ae:47:6f:39:d3:d1:6b:51:a0:cb:dc:86:fd:ec:aa:c3:
f2:6d:a0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:51:38 2026 by rpki-client