
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft
File: Z849nCahS83_mzOU0zVXZoIYoVY.mft (raw, json)
Hash identifier: CmQ5e61L9tmi6MYbGgul0LJNkjbcb+e7EzqTY1quvi4=
Subject key identifier: 88:11:BD:16:FC:F4:AB:82:6A:1B:71:C5:6C:3C:18:AC:CE:35:36:16
Authority key identifier: 67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56
Certificate issuer: /CN=A911A557/serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156
Certificate serial: 010F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft
Manifest number: 0105
Signing time: Tue 23 Jun 2026 06:23:37 +0000
Manifest this update: Tue 23 Jun 2026 06:23:36 +0000
Manifest next update: Tue 30 Jun 2026 06:23:36 +0000
Files and hashes: 1: Z849nCahS83_mzOU0zVXZoIYoVY.crl (hash: UzdLPlzU4/ZEOeXrqibA3tywz+xJg+O36LQ2+ElQJ80=)
2: 4550C0B2E86D11EF9AF14D6FC4F9AE02.roa (hash: rWwijXJAVvwDQWA01RBFKoOEEpLL7p1+vQhY5pyzCLI=)
3: C1D2BAAAE87711EFBE7C537EC4F9AE02.roa (hash: mBhPexFJCjhETjgQ1BBwLO6vkuwTxq2sdBYZtB3P694=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl
rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 06:23:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A557, serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156
Validity
Not Before: Jun 23 06:23:36 2026 GMT
Not After : Jun 30 06:23:36 2026 GMT
Subject: CN=6a3a2668-b4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3b:35:18:0b:eb:1b:f8:67:c4:54:85:7e:55:
4d:41:06:6e:eb:45:6d:ed:2f:a6:4a:d4:a3:e9:5b:
25:4a:38:8c:d9:60:c8:e7:f3:41:9f:ee:7f:3e:65:
8a:85:14:db:a0:76:16:ea:e9:90:bd:dd:e8:1c:dd:
44:6e:e8:69:57:b9:2a:70:9d:6e:16:01:d0:3d:c9:
ee:1a:be:c0:40:a5:38:6b:15:57:84:c1:0e:5d:59:
fd:83:2b:37:bf:8f:c5:8b:bd:36:35:17:b9:38:69:
49:e2:3d:4f:09:77:24:3a:92:89:da:d5:36:af:59:
af:cf:c1:c1:a7:8e:cd:aa:f3:96:37:e2:22:5a:fa:
38:37:66:19:ac:dd:cd:b5:56:2f:a6:79:a3:22:69:
30:f0:0b:80:5a:28:16:cc:cd:b0:5e:a4:db:9f:39:
ef:2e:f0:c9:ff:ce:90:47:f5:53:36:b4:37:ee:d2:
19:a8:c1:e7:a9:f6:bd:8e:48:6a:8e:a6:21:f2:0a:
7e:8b:3f:08:e7:27:27:2d:fb:61:af:cc:c4:33:b2:
76:e3:83:28:8a:a3:d4:b2:b3:47:c7:03:f6:bd:ae:
0d:9a:08:8b:80:e4:ca:4e:0f:17:c8:78:dc:6f:3a:
69:5a:ac:19:1c:63:43:10:e8:73:a8:b8:44:cb:41:
f9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:11:BD:16:FC:F4:AB:82:6A:1B:71:C5:6C:3C:18:AC:CE:35:36:16
X509v3 Authority Key Identifier:
keyid:67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:77:f8:7d:5c:ea:5d:5e:4a:29:db:1d:c5:d2:00:1a:04:38:
d2:02:2c:21:ab:b0:9e:27:b1:ed:0d:7a:99:db:2f:05:10:f2:
2f:65:ff:bb:bf:10:a8:5e:7b:df:42:c8:3f:80:c7:53:d7:0e:
0b:e5:90:2f:f4:7f:f9:ae:97:87:b8:e3:df:e7:5d:ee:64:60:
82:bd:bb:9f:f6:78:20:be:02:26:3f:70:6b:e9:95:46:13:fb:
eb:a6:a0:70:11:5e:88:69:c5:79:68:d9:5a:fe:71:59:8c:e1:
98:b2:5a:ee:e0:04:c5:25:bf:d7:c0:ac:34:28:3e:e3:6a:0b:
b3:18:15:b8:a7:37:67:23:59:1e:1b:ac:08:21:f4:9d:d2:50:
a4:51:26:4a:23:54:88:49:bb:15:98:12:3c:27:62:bb:20:41:
73:97:03:e8:3e:7b:22:42:22:f9:16:7a:e1:80:c9:c3:df:12:
f0:22:53:8e:b4:11:5c:a5:08:0d:0c:36:2e:09:40:d1:1d:73:
18:b5:43:e9:37:c0:67:01:37:32:40:f6:48:ae:97:b9:08:e8:
a8:43:94:f5:0b:3e:24:9d:b6:ed:9d:c9:ca:82:ca:08:97:8d:
48:c1:06:da:eb:7e:54:9a:25:4d:08:c0:80:40:00:82:7f:22:
ae:65:e4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:39 2026 by rpki-client