
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft
File: ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft (raw, json)
Hash identifier: KuWlnu+lEyJF5haR1fqsINhRN8UfD6E9NnaERBQEREo=
Subject key identifier: D6:81:D9:4E:B2:B2:3D:EA:E6:B7:CC:06:76:10:8E:46:E2:C9:57:EF
Authority key identifier: 66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12
Certificate issuer: /CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212
Certificate serial: 1099
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft
Manifest number: 1084
Signing time: Tue 28 Jul 2026 17:29:28 +0000
Manifest this update: Tue 28 Jul 2026 17:29:27 +0000
Manifest next update: Tue 04 Aug 2026 17:29:27 +0000
Files and hashes: 1: ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl (hash: BwO4PD2BCdtb7X8JE8JLwaEK+7SSyPhZ1w0G4jh9axw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl
rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4249 (0x1099)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199E3F, serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212
Validity
Not Before: Jul 28 17:29:27 2026 GMT
Not After : Aug 4 17:29:27 2026 GMT
Subject: CN=6a68e6f7-d974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:24:02:28:61:ff:a4:2c:89:37:1b:a2:be:
42:a3:b9:f9:cb:f8:c5:83:29:15:1a:f7:ce:b7:73:
c7:db:a8:03:cd:f1:33:20:2f:f8:79:34:9d:8f:39:
f3:89:a0:14:97:ae:db:b2:57:ae:14:8e:97:99:56:
fe:d5:be:c1:bb:ac:4a:d3:c8:0b:aa:2c:8e:e0:80:
c4:52:89:46:6e:69:ec:85:61:e9:34:bb:7e:13:2b:
80:5a:61:b1:ed:7c:ab:a1:b1:e6:5d:74:ec:62:b3:
9d:f0:78:7e:c2:f0:9b:a9:9e:e6:91:e4:8d:e5:4f:
ef:9b:d9:34:ab:cb:c9:3f:6c:33:a1:ee:ec:a5:34:
ea:06:20:b4:fb:7b:ec:b3:6d:f8:81:75:29:44:35:
83:d7:7a:5e:64:fd:b7:0f:27:86:7d:a5:8a:65:c4:
3d:2c:9b:66:b4:84:8b:39:ca:94:58:73:b6:f9:96:
7a:b9:f1:f7:c9:68:8b:3b:9f:ad:c5:6b:20:b5:61:
ea:55:5c:d4:f1:04:59:61:5d:60:30:19:b8:29:04:
a5:50:b6:fd:3e:67:51:47:4d:5e:0b:9b:5f:7f:41:
ac:ab:90:c3:5f:2c:f4:95:0d:05:72:bd:bd:6c:ce:
2f:9c:8e:70:e7:bb:1a:fd:c6:ea:0b:d4:fa:d4:83:
06:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:81:D9:4E:B2:B2:3D:EA:E6:B7:CC:06:76:10:8E:46:E2:C9:57:EF
X509v3 Authority Key Identifier:
keyid:66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:80:3e:49:a8:81:23:ea:45:4d:45:8b:c0:bf:6d:91:e1:24:
b1:a9:44:83:9c:15:41:92:6d:78:8c:f9:7e:97:a0:92:6a:1f:
98:bd:d2:4c:c3:86:76:dd:be:52:76:ac:55:05:7d:d0:5f:6c:
d8:97:08:20:26:fe:f8:72:e7:a2:7c:28:df:71:f1:7d:d6:b8:
4e:a4:4b:57:3c:be:04:3c:63:75:01:07:6e:5c:77:e7:84:ae:
3f:9a:0b:e7:d1:14:75:6a:7f:1a:33:65:5c:20:e9:af:0a:6d:
53:b5:4e:8a:cb:c0:e7:90:b6:5b:b1:28:38:69:71:22:54:0f:
32:86:70:df:f2:ec:81:15:c0:98:ab:ae:b7:51:11:b6:aa:32:
39:53:26:23:c6:7e:b3:79:ce:89:2d:77:bc:84:6f:d4:a0:62:
af:97:43:bd:b6:1d:05:a3:b5:fb:35:a9:ca:1c:ce:09:bf:ea:
7b:fe:75:e0:48:2e:6c:ef:d8:73:e1:86:8b:ac:6d:8b:4b:6f:
99:b5:8f:76:ad:07:88:5a:c1:48:c4:4c:69:86:ff:07:f1:6a:
58:db:1c:52:da:44:fe:1d:33:ce:88:e8:46:bb:55:2f:02:8b:
e1:d0:be:30:dc:68:35:c6:7e:8a:88:ee:ed:69:9a:0b:5f:c7:
2b:62:d7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:48:15 2026 by rpki-client