
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
File: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft (raw, json)
Hash identifier: Q6lS1raWcOxQOiNpuQKxCrMP69nRZ3IscAKa3b/UpLs=
Subject key identifier: C8:44:D7:5D:B7:6F:60:75:FC:5D:C6:14:21:13:80:B7:D3:2A:DD:38
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Certificate issuer: /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial: 01FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
Manifest number: 01C8
Signing time: Sat 13 Jun 2026 04:13:54 +0000
Manifest this update: Sat 13 Jun 2026 04:13:53 +0000
Manifest next update: Sat 20 Jun 2026 04:13:53 +0000
Files and hashes: 1: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl (hash: JHZZNYJ6cQ7QhMsTllFyX7bQho/zRkb4mBF2tOGPTEc=)
2: 5B4D02987E5B11F09260CE56C4F9AE02.roa (hash: YSqNnOxJ+Xkes9UNemwulrLNoP9a1fzLC+DIw2bAtgY=)
3: BDECB94CEC4F11EEB0B9B467C4F9AE02.roa (hash: fSlbtUc39UCW3k1Yy6pAqJg048Gxa2v6PcevURxg5Zs=)
4: 7BDC977E0AF011EF87265E12C4F9AE02.roa (hash: L+Pr2GihRWoedBardrydLcushDGXI9FYHRtqemwZ37o=)
5: DD0545F6324A11EFA615F80FC4F9AE02.roa (hash: Uj11T+QW0pwuoYmi/Tug3FzEFRy1nbJISrOyCvJDnIQ=)
6: E7F77E5E42E711EF8B9EF861C4F9AE02.roa (hash: Rk3j/x7/aK9tyzGNZkRW4uYz1dTdbytFeBnr/OmzBX8=)
7: BC26B7548CAB11F0BDAA8B67C4F9AE02.roa (hash: 1xbmeKrtdkfMeaYJXV3nxlxzWBfNoeXUz9/FaAvLRY4=)
8: D43F20C6C70F11F0BEE61E6CC4F9AE02.roa (hash: lU5HELzK1HgvUgy9a8UOHW1aya85BnCwdaSrvas6AAk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506 (0x1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Validity
Not Before: Jun 13 04:13:53 2026 GMT
Not After : Jun 20 04:13:53 2026 GMT
Subject: CN=6a2cd901-eff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4b:e0:6f:f8:54:50:35:8c:11:bc:93:5e:74:
20:ff:f2:8b:a3:de:08:71:4d:e5:ba:7b:31:b4:e9:
79:ff:db:14:60:fc:79:87:a8:20:4f:a6:4d:68:bf:
fc:ca:36:9f:ca:74:00:3c:69:c5:5b:a1:11:1a:e2:
58:4d:a6:f9:c4:60:82:ab:76:74:7e:2b:c4:ba:3e:
fb:ef:63:39:c4:2a:57:e9:b5:58:5a:5b:f6:c0:5b:
56:3a:83:1e:83:33:bf:52:16:f4:a1:77:e0:20:6a:
33:a2:21:b8:6e:ab:1e:75:31:87:5e:9a:49:b1:16:
a4:fe:c7:d6:04:f4:1f:15:76:34:54:54:ca:c1:c5:
93:6e:f9:65:ff:a4:7e:2b:ba:0c:35:d7:e1:31:64:
49:20:0b:0d:ae:90:b6:34:f8:c3:b6:fa:30:4f:7e:
50:6e:92:94:bd:63:02:1b:bd:ab:f8:26:d1:d1:56:
31:d8:84:48:84:9e:fa:da:aa:23:f8:c6:d2:cc:19:
a4:f6:47:3d:56:ef:6e:02:cd:35:45:0d:17:f0:37:
1d:41:3c:34:33:ad:a1:dc:c8:c4:52:6e:be:ea:ed:
04:da:ac:2a:81:60:17:fa:fe:05:76:1d:70:49:ca:
f9:d6:67:9b:0b:4a:a7:33:3e:e8:ad:6c:b5:4f:b7:
55:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:44:D7:5D:B7:6F:60:75:FC:5D:C6:14:21:13:80:B7:D3:2A:DD:38
X509v3 Authority Key Identifier:
keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:aa:75:ed:39:32:ea:86:2c:54:98:13:c8:37:94:a7:ca:87:
55:ca:39:0a:8e:64:7a:74:f2:c6:db:28:ad:9a:51:62:52:d7:
20:10:5d:09:21:76:1a:51:98:ce:27:f5:48:90:4e:fa:5c:05:
92:6c:7c:ff:f3:58:66:71:54:b1:91:fb:34:60:7a:2b:15:48:
26:4a:bb:63:0f:a2:c1:0a:54:5e:85:d6:36:eb:b5:e9:55:0c:
dd:5f:20:cd:8a:c9:16:6f:39:ae:29:6b:10:b9:13:52:c5:d2:
bd:8d:c7:a8:70:1b:e0:01:f1:2e:b9:2f:52:37:13:b4:ea:da:
7e:99:65:c1:9b:d1:ec:7d:09:d5:23:e7:ea:c5:27:2f:b9:83:
56:0b:1b:fb:0e:b0:d5:d6:e0:61:7c:34:27:4b:48:ac:74:60:
f8:d7:06:7c:7b:eb:f6:8b:b9:37:00:a2:e7:de:01:73:d7:1b:
35:f9:d4:97:58:46:70:1e:b5:11:9b:3c:1a:1f:51:4c:f5:11:
6f:e7:10:fa:56:3f:93:07:d0:59:1f:ea:06:a2:04:9c:58:e5:
ed:ca:33:c0:ef:ef:a9:49:76:88:4e:f8:ec:5e:05:7c:bc:82:
8b:4e:a5:c3:fd:78:0d:bb:dc:97:f6:0c:af:21:e8:9d:d7:26:
87:55:8a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:55:21 2026 by rpki-client