
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
File: _z4OD6f_JX29huYrEpqZTYpJ2E4.mft (raw, json)
Hash identifier: BAixFUf/GV+BrbDLIaTB9dAMRKdCzUXSWfNUkSXmL7U=
Subject key identifier: 8A:A1:FA:B4:47:F5:D8:E2:1F:1C:01:2D:AE:C0:15:61:C5:14:EA:1E
Authority key identifier: FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E
Certificate issuer: /CN=A916B1F5/serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E
Certificate serial: 02F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
Manifest number: 02EB
Signing time: Tue 21 Jul 2026 02:12:51 +0000
Manifest this update: Tue 21 Jul 2026 02:12:51 +0000
Manifest next update: Tue 28 Jul 2026 02:12:51 +0000
Files and hashes: 1: _z4OD6f_JX29huYrEpqZTYpJ2E4.crl (hash: kzRrI7k95C58jTaxrGwc/dt627Ut8X1jnk196wKQcpg=)
2: 28536FDC340111EDB747A054C4F9AE02.roa (hash: FbLoVUwsuqm0sT8Nxbam5MwbDmX4JcPXq2npG0lokuo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl
rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 02:12:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 753 (0x2f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B1F5, serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E
Validity
Not Before: Jul 21 02:12:51 2026 GMT
Not After : Jul 28 02:12:51 2026 GMT
Subject: CN=6a5ed5a3-35b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2e:69:ad:0c:37:ad:bb:22:74:52:ee:ad:43:
41:75:c1:b1:f5:74:4a:f3:48:47:2e:f9:79:eb:a4:
af:2a:54:b9:14:86:67:92:5d:4e:89:cd:b8:e3:1d:
9b:84:20:76:5d:8a:8d:83:96:08:88:0a:52:b9:96:
57:a7:6b:32:89:b8:d1:a4:48:71:16:5c:bc:cb:91:
bd:1d:1c:51:f1:49:d3:e4:45:23:cb:0a:d3:50:ef:
33:5c:63:94:87:bd:95:64:c5:4c:aa:1b:67:7b:19:
b5:8c:6f:28:7c:03:d5:d3:ae:ac:0a:8d:ac:68:28:
54:5c:5c:28:8c:32:e4:30:96:5d:c0:98:5d:6e:59:
6d:b6:06:c2:0d:79:aa:4d:3f:93:bb:b8:63:de:10:
92:01:97:0c:6b:ba:d9:17:d3:48:d9:fd:9f:20:57:
3f:ed:a5:cc:3d:35:08:06:55:3d:b5:5b:ba:33:fa:
05:c2:0e:6e:b5:9d:4a:ac:95:35:dc:ab:56:a5:25:
ac:39:0b:9a:51:69:13:0e:ee:89:6b:c1:2f:5a:0a:
d3:5d:0c:59:c2:77:40:16:0a:ef:f3:5b:d0:fa:3f:
ed:b2:f0:9e:e7:95:c3:30:e3:92:70:b4:ae:bf:2a:
93:40:00:26:95:5f:92:18:22:af:f6:7c:ea:7c:6d:
e1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A1:FA:B4:47:F5:D8:E2:1F:1C:01:2D:AE:C0:15:61:C5:14:EA:1E
X509v3 Authority Key Identifier:
keyid:FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:75:37:11:43:38:a8:96:87:6d:0d:84:7d:1e:94:97:98:80:
e1:4b:45:9d:47:88:33:fd:f7:ea:33:65:24:a8:58:d7:af:c4:
55:4e:e6:be:8b:de:a9:20:38:e8:de:99:48:6d:1a:44:91:80:
11:8b:e0:92:58:2f:d5:32:b2:0f:73:f2:f6:ae:59:7e:bb:d3:
84:3b:f2:e8:5b:5b:05:cc:7a:83:0d:24:b6:a9:55:28:e6:b9:
aa:9d:cb:9f:c3:f7:e7:33:fe:be:f7:ac:47:c9:77:df:68:89:
5b:a4:16:5d:72:3f:13:f0:88:d6:9d:f8:10:2b:f1:e6:1d:9a:
d9:b1:c1:ae:0e:53:e3:9b:fe:23:16:c9:d6:6f:b5:a9:68:cb:
33:b0:bd:e2:22:14:a5:7c:66:d9:1f:cd:8a:0c:ef:c2:a5:6e:
b7:60:0d:0f:bc:8c:05:8f:c5:32:3f:ac:d9:d8:50:a9:b6:16:
94:58:a4:a4:7a:4a:ae:d0:a5:e7:b6:9a:14:b1:a5:34:e2:80:
09:ea:d5:4c:fb:36:4b:e0:25:76:dc:05:4c:ce:28:58:64:65:
62:95:be:3c:13:33:fa:64:c0:52:9f:ea:a2:9e:b1:29:c7:ec:
9f:24:cb:07:2a:bc:c6:79:d3:34:3c:4d:42:21:91:82:d7:aa:
a7:2e:ea:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:16:42 2026 by rpki-client