
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft
File: zm6S_KABf3WmLfkoXo18IQt6vAI.mft (raw, json)
Hash identifier: 2uUGpjPLrRm9/7FD8x/BHaOZloTtETcZx+O1Y2PE7a0=
Subject key identifier: 41:EC:2B:81:0A:13:2F:9D:C5:56:9C:98:70:C2:DB:A2:00:44:D7:E4
Authority key identifier: CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02
Certificate issuer: /CN=A9199BCC/serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02
Certificate serial: C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft
Manifest number: C1
Signing time: Wed 15 Apr 2026 06:31:36 +0000
Manifest this update: Wed 15 Apr 2026 06:31:36 +0000
Manifest next update: Wed 22 Apr 2026 06:31:36 +0000
Files and hashes: 1: zm6S_KABf3WmLfkoXo18IQt6vAI.crl (hash: Tt9Oa+A9rl3NcC4Ukf0VKq90RJAL0Al5T4/wWfUlTVQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl
rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:31:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199BCC, serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02
Validity
Not Before: Apr 15 06:31:36 2026 GMT
Not After : Apr 22 06:31:36 2026 GMT
Subject: CN=69df30c8-4189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:03:76:5d:50:7f:c6:71:bf:ca:da:f1:28:9a:
4b:b8:db:b7:c2:51:dd:ce:f7:12:08:31:9b:15:73:
c7:92:46:c4:00:74:a1:dc:a5:41:88:9a:dd:da:78:
d8:aa:8a:86:cb:ce:6f:38:c2:2e:ea:5f:88:50:25:
11:5a:6b:20:da:90:0c:e9:2d:b0:f1:d2:bb:b7:92:
79:fc:6c:3c:a1:0b:a9:d5:53:c6:d9:5a:5a:c7:58:
e2:0f:5b:00:7a:c4:84:e9:c4:19:4b:ba:ee:34:54:
c1:4c:d5:36:2b:f4:9b:37:2d:6e:a0:c9:b7:45:a0:
fa:2d:dd:4e:90:43:1c:81:5d:7e:00:88:04:d1:85:
76:a6:9d:87:bf:b9:c6:8b:ef:f7:aa:ba:53:43:07:
e4:6c:52:9c:86:a8:ca:67:70:a5:8b:d3:9c:aa:99:
d4:9a:2c:53:46:db:a2:69:69:0f:55:7e:2b:47:1e:
2d:72:7f:af:0d:ec:4f:01:4e:a7:90:a2:3c:d6:11:
c9:36:27:d2:15:3d:2a:79:87:47:d7:fc:8c:ba:53:
f0:54:3e:42:1b:88:68:c9:6a:59:d4:79:f9:9b:5b:
7d:ad:3b:48:a5:ea:f8:71:e9:7c:2c:b2:d0:51:08:
11:75:d0:b5:55:e8:b0:44:43:5f:a2:1b:7e:c8:1a:
bf:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EC:2B:81:0A:13:2F:9D:C5:56:9C:98:70:C2:DB:A2:00:44:D7:E4
X509v3 Authority Key Identifier:
keyid:CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0e:4a:d4:0f:0e:79:54:f0:a1:ce:f2:fa:cb:19:6c:be:1c:
af:4b:34:03:24:bb:62:64:c8:78:eb:a7:84:85:78:fd:f1:e2:
2f:8a:01:a3:93:47:24:a1:e9:02:d8:4a:e7:85:75:a6:04:09:
24:d8:49:15:e2:f2:26:b8:a7:a5:c5:15:35:2a:ee:54:8e:a9:
94:a4:ab:1e:14:26:71:48:26:df:a1:95:71:3e:87:81:14:bf:
de:56:ef:4f:eb:41:b1:da:f9:67:4a:78:de:4b:b0:88:bd:b0:
23:29:71:5f:51:a8:e0:ed:10:fe:45:6a:58:d8:24:a3:a4:a3:
c2:2a:b4:75:5b:42:a2:08:84:1b:b7:53:ee:bd:b5:c2:b4:66:
2c:cd:3c:53:88:0d:05:7e:36:3f:47:a0:d3:47:dc:4d:41:1d:
f3:14:b1:2c:2e:2e:b3:bd:12:fb:ae:da:15:22:3b:38:f0:ec:
8c:ef:05:d8:51:14:f4:8c:6d:6a:f4:36:a0:38:f8:52:de:a9:
aa:93:0f:a0:2f:16:ba:10:ab:a6:0c:62:40:31:df:4e:8a:06:
14:e9:2e:7f:42:72:24:41:a5:9b:d1:cf:6e:0a:5d:18:63:59:
59:9b:2e:2d:b8:d9:ef:67:b4:e1:9e:15:78:ca:25:f8:bc:5a:
36:dd:c3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:42 2026 by rpki-client