
$ rpki-client -vvf rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft
File: ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft (raw, json)
Hash identifier: PxegDBTlLRx6WLNDHojOSvF66lUu+Ose1Y0wCz8FUsg=
Subject key identifier: 22:95:80:9C:F0:05:CF:78:00:6E:ED:F7:E0:0D:F6:BD:6D:79:A4:D9
Authority key identifier: 64:64:A8:D4:CB:7A:6B:C9:2B:94:9D:1A:1E:6F:09:93:33:C5:6D:F1
Certificate issuer: /CN=A91694A4/serialNumber=6464A8D4CB7A6BC92B949D1A1E6F099333C56DF1
Certificate serial: 05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft
Manifest number: 04
Signing time: Sat 13 Jun 2026 09:18:26 +0000
Manifest this update: Sat 13 Jun 2026 09:18:26 +0000
Manifest next update: Sat 20 Jun 2026 09:18:26 +0000
Files and hashes: 1: ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.crl (hash: bTMROows99ULSYpkoRgW5FvWQ+e5jrXJJrWRcxyafSA=)
2: CCB3F0C665C411F19AAB55CC8147A888.roa (hash: 6HsQ3Z7sCMaiW2glN0WOtCM/Fh9gJPdbJXQJdZ4RzC8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.crl
rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 09:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91694A4, serialNumber=6464A8D4CB7A6BC92B949D1A1E6F099333C56DF1
Validity
Not Before: Jun 13 09:18:26 2026 GMT
Not After : Jun 20 09:18:26 2026 GMT
Subject: CN=6a2d2062-2675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:11:eb:8a:47:71:4a:fe:9f:63:6f:9f:e1:d5:
7b:47:6d:dd:dc:e1:18:4d:f7:41:ac:5e:de:db:4a:
a1:46:2e:0b:26:18:90:1e:86:b1:c3:f8:71:1e:31:
81:c8:98:2f:55:ba:4b:3f:1c:1c:8c:ba:0b:50:2b:
cc:bb:aa:db:13:eb:a4:10:9f:fd:b8:0a:3a:47:7f:
04:69:d3:84:64:3e:90:7e:ea:74:20:93:73:f4:47:
73:1c:94:3b:f8:c1:62:9b:04:18:f1:96:e6:74:eb:
2d:58:45:cb:1d:28:d7:a3:34:bb:68:a0:82:fc:f7:
84:3b:77:af:ef:b1:4f:3f:87:f3:0e:ec:07:a1:43:
66:46:68:67:07:7a:1a:e5:05:32:cc:2c:42:17:94:
24:03:5f:09:04:47:78:c6:39:d1:7c:b6:44:3e:71:
98:b9:a4:08:b6:d5:e1:dc:1c:2a:ac:33:da:68:28:
c0:1a:15:d6:ce:70:44:b6:b6:61:00:80:40:1f:0b:
55:22:07:c9:d2:4f:3e:d9:65:f7:13:07:30:fe:58:
e5:e8:a9:3f:cd:e5:6e:3c:10:e1:98:39:d4:d9:ad:
8c:b1:dd:34:f9:40:7e:a8:52:f7:6d:53:21:2b:31:
1b:43:23:ff:6b:c1:92:50:32:e0:8b:4f:60:bd:9d:
73:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:95:80:9C:F0:05:CF:78:00:6E:ED:F7:E0:0D:F6:BD:6D:79:A4:D9
X509v3 Authority Key Identifier:
keyid:64:64:A8:D4:CB:7A:6B:C9:2B:94:9D:1A:1E:6F:09:93:33:C5:6D:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4a:02:e1:17:3a:89:a5:5b:03:fe:b5:4a:78:ca:3d:87:a7:
83:c4:87:a7:c7:43:7e:08:fa:f8:2f:af:72:29:db:e0:98:c2:
82:6a:d9:34:6c:fc:8d:e8:11:9a:c3:89:31:2a:0b:e7:e9:6e:
d1:d5:7e:a7:cf:66:70:82:e9:c2:79:66:04:e4:b4:d7:39:68:
47:6d:54:30:b0:8b:0e:90:74:07:a7:c0:f6:85:c0:88:e7:44:
08:d4:3e:33:d1:88:ac:d2:ff:8e:77:5d:d8:cf:20:4f:5c:eb:
e0:18:34:a4:40:7b:80:1c:72:85:66:b9:1f:1d:59:6e:aa:e0:
4c:a9:d3:e4:34:3d:42:00:c3:ad:4f:01:50:9d:98:79:37:71:
20:a5:fa:fc:1a:f8:0e:10:57:b4:66:67:b9:d6:c9:18:db:33:
4b:46:6a:65:1c:44:bd:5d:e7:32:ea:23:a3:0f:12:d8:35:e9:
49:83:f3:1d:32:66:2f:e9:33:08:2c:81:b9:49:7e:a0:e6:43:
04:ec:1a:23:e8:7c:ef:4c:96:43:52:d7:67:7f:41:6c:23:f5:
1d:77:35:5a:ff:9a:3a:1a:2c:09:d5:9b:ed:ec:9d:26:c3:54:
e5:69:3a:28:9e:ae:97:45:c8:ab:63:b8:14:46:f2:62:74:4b:
08:27:67:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:43:44 2026 by rpki-client