
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
File: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft (raw, json)
Hash identifier: n5uZLmMOUE13mx9lhk95ZfQxejfIIAH2LeoUwJZhB/I=
Subject key identifier: E8:B0:A4:03:36:CD:85:B0:4B:C1:01:96:6A:95:B8:AF:CC:EA:E1:AF
Authority key identifier: 66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84
Certificate issuer: /CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
Certificate serial: 107D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
Manifest number: 1066
Signing time: Fri 12 Jun 2026 17:21:29 +0000
Manifest this update: Fri 12 Jun 2026 17:21:28 +0000
Manifest next update: Fri 19 Jun 2026 17:21:28 +0000
Files and hashes: 1: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl (hash: kHpivztbR9V1tuz+cTxaaF+DdLBJJYp4IUUi+/zUIjQ=)
2: 373ADDFC1CC411EF90865B7DC4F9AE02.roa (hash: BUHXcbwgDCfppQqI14tt+SHKjsNJaOwlcThHrAcU48k=)
3: 27A298A00C6C11EC82638A40C4F9AE02.roa (hash: +GqC4kHrlGijBhG+Vf9OqiE+irbiFIUUxvaGXJ8E0NA=)
4: 1313114A5B3D11E996E4A744C4F9AE02.roa (hash: d+s7KZXz1WqJhrg7kNulx9MrS05rezWlx0peNL2GZrc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl
rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:21:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4221 (0x107d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194E51, serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
Validity
Not Before: Jun 12 17:21:28 2026 GMT
Not After : Jun 19 17:21:28 2026 GMT
Subject: CN=6a2c4019-15bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:6a:0f:2e:50:01:c1:15:db:06:bd:3b:30:
c3:8d:88:49:fe:5d:d1:d4:29:cd:f2:af:a3:e0:51:
8f:98:2b:d5:44:83:76:df:84:91:61:cd:51:6f:5b:
85:7d:34:3f:92:f4:18:53:92:bc:41:5c:7a:c7:57:
b6:c1:fa:aa:49:88:0f:b0:d1:36:57:30:15:17:a3:
85:b1:68:91:6f:7c:9e:6a:5e:ab:43:ab:ca:ca:e8:
a5:28:79:a5:4e:c6:04:bd:d1:45:68:b7:6d:16:8e:
4e:70:a6:83:5a:79:d6:19:77:57:5b:39:51:5a:97:
10:68:7e:88:c1:03:fe:50:c0:ef:46:76:d3:00:5d:
50:4b:b1:f9:12:35:b5:97:a3:4c:63:7a:aa:56:a3:
37:c6:23:a9:79:aa:8c:fb:1b:47:31:15:1d:7c:0c:
8d:ed:5c:30:84:9b:91:f5:5d:94:e3:17:74:7b:2c:
22:6b:20:a0:ec:34:ab:87:92:e8:3a:82:4f:ed:8a:
23:3c:9b:57:21:f5:53:6e:a1:2a:5b:3f:a2:e6:21:
c4:9c:d8:00:da:bf:63:9e:6b:28:be:50:0f:74:b8:
49:d5:5a:5d:e1:02:bd:7c:34:1d:4d:bc:ee:76:d3:
b8:30:ae:93:7c:2c:48:2a:1b:aa:d8:25:37:0f:82:
d2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B0:A4:03:36:CD:85:B0:4B:C1:01:96:6A:95:B8:AF:CC:EA:E1:AF
X509v3 Authority Key Identifier:
keyid:66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e6:14:70:17:9e:f9:be:f7:0e:fa:c7:25:a7:fc:8f:bd:80:
66:97:0d:66:2d:6a:91:2b:35:30:ea:6c:83:b0:7e:8a:e2:8e:
d8:78:e3:45:74:69:9f:84:52:65:0e:95:08:7e:04:26:f3:8e:
23:ce:2a:50:b7:6d:9f:35:b9:9c:ad:2d:46:19:8d:01:ac:02:
bb:72:52:b3:9e:b4:27:39:45:0a:3d:e5:16:7f:53:36:52:64:
a0:90:fb:67:d4:ce:90:5f:1b:16:59:7d:46:2c:56:fc:9c:f9:
7c:8e:ea:60:4a:28:95:f2:d7:61:92:ab:57:21:27:29:4e:83:
46:fe:35:b8:2c:93:8e:cf:c8:48:4b:03:19:40:97:92:67:73:
36:d5:69:b6:4d:34:fa:cc:60:6f:e6:f6:24:01:b3:f3:1b:ea:
b7:8a:a7:39:3f:81:68:e1:e5:ce:84:ed:64:35:55:2b:35:ba:
22:92:ce:af:73:83:c8:4d:ac:b7:a2:bc:bf:61:d3:8e:7e:25:
7d:e5:d7:c3:5d:72:15:c7:1a:a9:c7:9a:5f:8b:a6:a2:e7:1c:
96:5e:78:b4:78:7b:c6:5a:95:2c:8a:ec:83:9e:86:10:2c:f1:
98:3a:ce:6f:2c:61:c3:53:ef:52:08:6f:27:fa:14:66:67:16:
28:f8:c5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:33:18 2026 by rpki-client