
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
File: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft (raw, json)
Hash identifier: bQ0Kn8L3F4GcDF9gGvsqB3xNjZfUKG63exx6SAOp/kM=
Subject key identifier: DE:BE:18:AC:CE:CD:BE:80:50:CA:FD:E2:86:5C:39:6E:A2:2A:AF:48
Authority key identifier: 64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C
Certificate issuer: /CN=A9179581/serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C
Certificate serial: 23D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
Manifest number: 23C7
Signing time: Tue 28 Jul 2026 15:54:10 +0000
Manifest this update: Tue 28 Jul 2026 15:54:09 +0000
Manifest next update: Tue 04 Aug 2026 15:54:09 +0000
Files and hashes: 1: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl (hash: hBnv6h3STztAA/w/WUJ8oFPN07/kA4B2TYsEgjBjQZM=)
2: E043A9A4B14511E5B83D2120C4F9AE02.roa (hash: Qn2+lYGa2h6xQsCbP0A3ivL3myO3Z5q3ATYz2Fpqscc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl
rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:54:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9176 (0x23d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179581, serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C
Validity
Not Before: Jul 28 15:54:09 2026 GMT
Not After : Aug 4 15:54:09 2026 GMT
Subject: CN=6a68d0a2-207e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:8a:9a:c5:c3:82:20:59:48:78:0e:4e:6a:
98:ef:8e:96:f8:09:5b:2f:88:c1:76:7e:49:2d:3b:
81:05:31:f9:e1:6a:69:8b:6b:c3:18:8c:fa:3d:df:
16:f7:b8:cf:c6:12:a7:7c:b4:c9:03:dd:e9:f9:47:
1f:6b:c5:c6:73:fe:48:90:4d:43:44:23:1f:91:9d:
96:6b:1e:24:d3:05:4f:c3:00:d1:b4:32:62:69:52:
fb:b7:ff:5c:1e:c9:d8:84:7b:d8:15:3e:a4:de:57:
ab:e6:c8:33:4a:26:dc:5b:a4:fd:79:9a:f5:bc:44:
92:f5:8b:2c:5f:39:dd:86:9e:1f:63:7c:fe:e2:1c:
00:46:09:ef:a8:f8:ed:1d:b3:0e:ae:4f:fa:f4:71:
aa:a1:b6:e5:e5:f5:0a:e8:b0:ea:75:92:09:6d:73:
68:88:a7:d2:fb:d9:b4:5b:ee:af:f5:93:d9:f6:22:
3e:84:58:8f:e4:0f:c2:33:fe:9c:37:1e:35:f8:b4:
12:45:98:dc:48:5b:46:df:07:60:41:33:d0:e8:ec:
28:a0:bb:e6:2f:5a:6a:12:2d:2b:b9:04:11:4b:4b:
18:88:52:da:9a:13:09:aa:0f:83:82:81:9b:98:43:
e3:26:c8:66:31:a0:d4:69:c7:19:f9:5f:2c:c0:22:
99:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BE:18:AC:CE:CD:BE:80:50:CA:FD:E2:86:5C:39:6E:A2:2A:AF:48
X509v3 Authority Key Identifier:
keyid:64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:52:e5:29:c5:ab:ca:f8:d3:13:4e:7c:2b:d8:8e:d4:4d:d9:
03:eb:3f:93:0c:3f:5f:6a:d2:e3:c9:9c:c5:96:85:f2:d0:b3:
17:da:28:b5:6b:48:dd:f7:8e:cf:f1:4a:a7:3f:32:a6:83:b4:
ae:5d:15:55:05:aa:ff:ef:c5:d3:91:4f:3b:7b:2c:b0:18:c8:
cc:56:26:17:3d:f4:d2:6d:24:06:ba:57:87:5a:74:4f:b9:ee:
df:60:5b:4a:ad:07:67:c5:dd:24:a7:c7:67:60:b4:b0:82:9d:
b3:2d:14:6f:ea:ba:4e:1d:31:e6:9f:23:bd:79:6c:2a:86:2d:
16:3b:ef:ff:35:ca:ca:d9:ef:dc:c9:bd:3f:1d:5d:e1:ee:66:
4c:a0:7c:0f:b5:13:fc:6e:d2:4f:57:49:eb:12:d5:bc:47:0c:
ca:ad:92:5c:b3:73:15:b0:06:84:37:8f:b0:66:73:e7:1d:dc:
c2:54:05:cd:28:45:55:35:e0:37:b7:ba:f6:b6:f1:ba:6a:52:
06:8a:b0:01:e2:57:cf:a4:a2:be:8f:44:69:83:e7:a8:b2:21:
41:f9:b0:8c:ea:70:38:5a:26:3d:7f:62:2b:2e:c4:be:06:5c:
b0:0c:af:1c:89:3f:cf:bf:42:6b:b1:92:a0:bf:61:5c:31:b8:
cf:62:d6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:47 2026 by rpki-client