
$ rpki-client -vvf rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft
File: zES2e9GPRfbhN63kcxM1pVGmYSc.mft (raw, json)
Hash identifier: I4dJQPsZZ9f1xwRu2OFq7ZdHwGc4rlwCF/LexQhvQ4I=
Subject key identifier: DC:8F:E8:04:01:67:D4:AF:8C:D1:DD:74:CC:DC:05:D4:AA:72:C8:F4
Authority key identifier: CC:44:B6:7B:D1:8F:45:F6:E1:37:AD:E4:73:13:35:A5:51:A6:61:27
Certificate issuer: /CN=A916523A/serialNumber=CC44B67BD18F45F6E137ADE4731335A551A66127
Certificate serial: B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft
Manifest number: B7
Signing time: Thu 11 Jun 2026 09:20:31 +0000
Manifest this update: Thu 11 Jun 2026 09:20:30 +0000
Manifest next update: Thu 18 Jun 2026 09:20:30 +0000
Files and hashes: 1: zES2e9GPRfbhN63kcxM1pVGmYSc.crl (hash: dOzu3w0GXKEXYQscoOWSECACU3eom7SaxjWEnneMZj0=)
2: 469F3FE44CDF11F08D2EFF16C4F9AE02.roa (hash: daCSAN1/L7FpC1GH73B6zID6rVi/iS9JfJ6E1UGDmuc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.crl
rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 09:20:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916523A, serialNumber=CC44B67BD18F45F6E137ADE4731335A551A66127
Validity
Not Before: Jun 11 09:20:30 2026 GMT
Not After : Jun 18 09:20:30 2026 GMT
Subject: CN=6a2a7ddf-c827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:66:13:5f:db:78:18:1e:16:df:58:ab:12:
93:b5:f6:85:00:b8:07:4e:1a:bd:bd:3a:66:c4:6d:
eb:ea:a5:41:a2:64:a9:b5:f1:d6:6a:ff:0f:85:a4:
7e:91:9a:d7:a2:17:13:ee:ad:dd:f6:be:4b:4f:47:
24:eb:78:c7:ea:29:3c:2b:a4:54:b9:fc:d9:90:c1:
76:ed:e2:1e:38:6e:5d:6a:50:6e:74:26:cd:de:60:
76:08:f3:0a:3f:61:15:33:c1:73:a0:bb:25:44:d8:
48:cd:59:4b:a4:46:10:87:bc:eb:64:40:7b:b9:04:
64:32:d8:54:9b:e4:bb:c9:6c:a6:29:5d:22:e4:d7:
05:70:80:d1:68:50:e6:ef:98:49:6c:3d:ef:4c:bd:
eb:74:60:85:c2:5c:31:61:77:56:b4:8d:44:56:0c:
b5:d7:70:cd:8a:39:1d:1e:b2:d7:95:3d:97:b2:c8:
ac:3d:5c:d9:f4:08:ed:19:dc:a6:5f:64:f2:a3:c8:
26:c0:f1:2c:44:d1:3a:c9:64:2e:e6:1d:6d:3f:e0:
47:f8:71:9c:fd:3d:df:cc:8e:3a:34:44:72:28:78:
11:a3:4e:17:5c:12:1b:4e:6e:7b:aa:5c:5c:28:1e:
e2:b9:34:5b:43:9c:08:72:5b:b8:68:3d:df:36:89:
db:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8F:E8:04:01:67:D4:AF:8C:D1:DD:74:CC:DC:05:D4:AA:72:C8:F4
X509v3 Authority Key Identifier:
keyid:CC:44:B6:7B:D1:8F:45:F6:E1:37:AD:E4:73:13:35:A5:51:A6:61:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:16:05:bf:31:de:fc:96:f2:5f:0f:2d:59:08:d2:7c:05:05:
e9:d7:af:db:f8:97:a0:ea:1c:83:86:32:d3:ec:e8:1a:51:06:
a2:cd:7d:5e:d5:ec:3e:33:50:f2:6e:dc:2e:32:e0:31:d7:5a:
a2:55:af:7b:5e:1d:6e:06:a5:e7:da:2a:10:49:48:17:48:8d:
ce:82:be:93:66:ac:ab:fe:76:10:99:e3:ef:d1:48:39:b0:3d:
c1:0d:f7:fd:c4:3b:05:d3:6b:fa:cb:24:0e:06:bc:c3:54:a3:
a1:bd:dd:bc:39:75:cb:ea:87:c9:e7:d8:37:8a:d5:ca:e0:ae:
24:c5:4d:bc:8f:17:54:97:b2:b4:4e:9d:5b:df:d3:1a:1b:ab:
4f:55:4d:97:e1:f7:18:59:6a:76:85:6f:f6:3e:9b:76:e7:71:
02:b6:8e:70:18:ef:6e:52:1c:ef:c9:2b:07:cb:e2:bd:c9:9d:
23:6c:8b:58:27:a0:8e:e5:1f:5d:ab:e2:97:99:fa:0d:d9:91:
ea:70:68:98:ef:ab:43:ae:3e:83:83:5a:29:7c:1e:1c:2f:44:
bc:82:22:eb:48:14:58:6a:cc:45:bc:c6:8c:61:e0:c0:2f:f7:
b1:88:cf:0f:4e:67:36:10:2a:da:bf:78:6a:c8:45:9d:9a:8f:
6a:3f:cc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:31:23 2026 by rpki-client