
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft
File: RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft (raw, json)
Hash identifier: /3Eb+Tm5/0TEHd5UPwyDCIZmzItgQMzSnYkQeLU7Wlc=
Subject key identifier: FF:BB:76:51:1D:CF:57:E5:B8:B6:B0:2F:6F:DF:2A:E6:EC:9A:C8:5C
Authority key identifier: 47:34:64:84:71:59:BB:15:2F:BF:E1:DB:B5:A1:B0:15:46:82:2F:17
Certificate issuer: /CN=A911DD04/serialNumber=473464847159BB152FBFE1DBB5A1B01546822F17
Certificate serial: 0201
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft
Manifest number: 01FC
Signing time: Mon 05 Oct 2026 03:34:02 +0000
Manifest this update: Mon 05 Oct 2026 03:34:01 +0000
Manifest next update: Mon 12 Oct 2026 03:34:01 +0000
Files and hashes: 1: RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl (hash: UYuPG7iY83/OVYfhdjEW1LOEzU/eeHdUUjoJUpFEIQo=)
2: 939790AAB9BD11EEA19BE74DC4F9AE02.roa (hash: 4Xxfcn9vWAxmFmsir9WaEVwPirqEsxparkquZplonJM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl
rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 03:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513 (0x201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DD04, serialNumber=473464847159BB152FBFE1DBB5A1B01546822F17
Validity
Not Before: Oct 5 03:34:01 2026 GMT
Not After : Oct 12 03:34:01 2026 GMT
Subject: CN=6ac31aaa-fa9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:12:7f:7e:f4:cb:0b:60:d9:85:7f:78:9a:81:
95:06:40:3e:08:3a:62:3b:ba:2d:38:03:80:18:c7:
ce:b5:01:14:22:86:aa:4f:9a:72:ec:6c:f8:5a:07:
49:96:53:fa:47:9b:2f:00:cd:ee:f9:86:11:f6:06:
5a:df:f2:03:2e:15:ee:98:36:4e:26:08:16:ee:00:
e2:a5:ce:c4:cd:e5:b0:38:49:03:0b:06:0d:27:9a:
bf:28:1a:7f:fb:59:61:50:b6:f0:bc:77:eb:df:d1:
c5:a7:b8:7e:04:f6:ff:e1:e9:7b:9b:a3:e5:7b:f6:
ee:78:ca:10:ce:90:1f:d4:54:98:c8:81:9a:7b:87:
bb:1e:4a:57:15:79:ec:b2:f4:7d:e6:cd:67:1f:c5:
fe:48:50:9b:60:dc:b2:f5:e7:5e:f6:f3:10:91:78:
d2:57:98:e8:9c:9d:54:61:17:53:ec:07:9d:81:be:
cd:1f:92:ad:52:6f:fe:59:13:48:37:9b:c8:1d:a8:
fe:c3:bc:12:22:03:95:af:16:4f:27:6b:29:b0:5f:
32:71:b4:9e:79:bd:3d:43:c5:22:45:a4:8d:57:28:
b3:62:1f:6a:65:81:b3:de:a2:14:9a:6d:39:af:da:
ee:70:a1:43:59:c2:62:f5:fc:0a:49:61:ac:e4:bb:
8a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BB:76:51:1D:CF:57:E5:B8:B6:B0:2F:6F:DF:2A:E6:EC:9A:C8:5C
X509v3 Authority Key Identifier:
keyid:47:34:64:84:71:59:BB:15:2F:BF:E1:DB:B5:A1:B0:15:46:82:2F:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:81:0d:24:33:7d:a9:7b:49:06:07:da:6f:30:19:5d:5b:3b:
7c:c1:c1:c3:2b:e4:41:c2:b6:08:d3:f7:41:06:cd:41:86:9e:
30:ba:77:ae:dd:74:a7:0a:12:4b:0c:4a:be:de:7b:f3:21:9d:
20:9e:22:5c:2a:55:87:55:51:7a:ed:d0:1f:a7:57:20:3f:a6:
53:c1:1a:23:bd:fb:fe:70:19:14:6f:ae:e0:24:5b:38:3b:88:
4b:96:83:e2:38:ea:05:d6:0f:da:92:d0:07:74:0c:33:35:4d:
f0:38:db:08:b0:d5:aa:63:a5:0e:6f:65:00:de:c3:d4:35:88:
8d:97:11:2b:9d:72:da:c0:31:aa:e8:a4:31:ac:d0:43:1e:79:
da:32:ed:97:ab:9e:81:04:cd:a5:37:a7:bf:eb:94:97:21:cb:
60:67:45:28:94:9c:55:1d:53:1b:75:d2:d1:51:70:55:c8:34:
4a:cf:56:8a:13:d2:3a:90:a2:a7:78:2f:3a:7f:15:a1:0a:c4:
6b:7d:53:26:ed:1b:55:1a:81:26:f7:d4:ce:40:4f:8e:84:8c:
dc:c5:e2:af:9b:09:39:53:63:d3:9a:72:9d:4b:24:0c:79:7b:
73:26:81:ee:90:66:fd:7e:c0:24:c3:e7:5c:64:54:75:17:16:
d0:c3:3f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:52:21 2026 by rpki-client