
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
File: zT31OqDpo5hZXpVwFRVbzKxWjRU.mft (raw, json)
Hash identifier: rnpjLHeR1Ewa3SearLFQga2Fl0YlTaNWR8nl0LO+9kU=
Subject key identifier: 1E:7C:31:18:5D:00:0D:34:B3:DE:CB:1B:F5:86:F8:5D:3E:23:F2:24
Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15
Certificate issuer: /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15
Certificate serial: 01BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
Manifest number: 01A5
Signing time: Tue 21 Jul 2026 05:56:09 +0000
Manifest this update: Tue 21 Jul 2026 05:56:09 +0000
Manifest next update: Tue 28 Jul 2026 05:56:09 +0000
Files and hashes: 1: zT31OqDpo5hZXpVwFRVbzKxWjRU.crl (hash: B+RP/VxuXsbl+tIPVpRfM77p8Ld1/WIRVENp/7Jt+G4=)
2: 9292865625AA11F0A63D1D85C4F9AE02.roa (hash: UeaRLdDzY1ShESbWYDfFd7UbKiVJI/tCLkGrM3fnfPc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl
rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 05:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EBB2, serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15
Validity
Not Before: Jul 21 05:56:09 2026 GMT
Not After : Jul 28 05:56:09 2026 GMT
Subject: CN=6a5f09f9-c6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c2:3f:b3:ba:8a:10:ad:05:3b:32:bf:06:14:
03:87:2f:58:41:54:d0:ba:2d:0b:23:a2:ee:e1:4f:
b0:64:18:c4:79:cc:1e:73:7f:5d:ee:64:92:d3:3a:
72:1e:74:ff:ee:1e:d7:2f:de:9a:51:97:f4:19:01:
af:1a:03:3f:81:4a:0b:4b:71:7d:a0:23:a1:0c:64:
40:da:0f:bb:cb:82:f9:e8:25:74:4f:db:f5:71:42:
fa:f6:0b:d8:02:30:83:94:68:a8:e7:b7:6d:42:1f:
84:fa:b9:2e:66:5b:e6:12:25:37:d7:94:96:26:4a:
c3:57:76:5b:64:66:57:4c:08:6a:d2:44:1f:77:c9:
da:d4:38:db:9f:5c:10:e5:96:ee:8c:cc:c3:f5:56:
4c:77:04:76:e7:28:fb:ce:cb:be:16:76:04:2b:5a:
7c:ba:7b:cc:39:7e:e4:ad:57:c6:49:b9:5f:ea:93:
f9:09:41:4b:be:13:4c:b8:a2:42:0f:02:fb:24:9d:
e9:b9:ab:9d:a6:71:4a:69:09:09:67:7d:a0:c3:8e:
73:c0:4a:9b:ba:66:5a:60:3e:d0:79:cd:29:bd:aa:
d8:d6:19:b1:f4:c2:74:df:81:3f:aa:53:58:a9:d6:
10:3b:70:ae:81:74:3c:1b:fd:f1:89:9d:b7:e0:fc:
fe:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7C:31:18:5D:00:0D:34:B3:DE:CB:1B:F5:86:F8:5D:3E:23:F2:24
X509v3 Authority Key Identifier:
keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:08:d5:2a:06:9c:b9:0a:41:42:6f:6b:b3:44:e3:3e:65:1f:
b2:2f:34:e0:0d:33:6d:ad:af:77:9d:91:81:20:72:53:42:c8:
01:65:91:bd:10:b3:f4:40:9e:77:19:41:bc:c6:c5:67:dc:77:
34:48:fb:a5:87:4e:87:65:32:1f:e6:39:99:b5:04:5f:74:22:
e5:6c:31:8c:40:3c:6c:38:e8:64:3f:8e:a0:d6:74:dd:e3:69:
96:51:10:91:ae:61:8e:9c:d6:ad:8f:2d:61:16:30:b8:80:42:
49:fa:95:ec:e9:a0:02:d8:76:e7:4a:2d:f4:e5:e2:76:80:8c:
a8:f2:b5:a1:b6:23:b0:56:7b:d5:9a:eb:db:ad:32:8c:a4:3f:
8f:94:13:91:1d:33:cb:ef:79:c5:a4:3c:eb:e0:1e:48:d6:d8:
1b:b7:ab:7f:aa:cb:af:a3:c5:d2:54:85:9c:fd:00:08:4a:cc:
c6:e8:10:42:53:ff:2a:fa:4a:9c:de:b2:51:a4:3f:f3:48:e5:
39:2d:ea:f3:d1:7c:2d:2d:86:d5:fa:92:43:90:6a:8a:29:d0:
56:40:32:eb:e8:47:68:79:ae:0e:8b:75:fa:2d:9d:82:cc:26:
1b:1e:c4:3f:5d:cc:64:05:a7:a1:55:81:bf:f3:f5:36:cb:cf:
23:7f:fe:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:24:06 2026 by rpki-client