
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
File: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft (raw, json)
Hash identifier: paDzyRE85QVpgabdJgNoyfJ1E6AH5w7v1E7s6r/aibE=
Subject key identifier: 18:82:67:6C:03:F0:D5:C0:11:F2:58:CE:A0:28:61:8F:D1:C0:35:73
Authority key identifier: 67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F
Certificate issuer: /CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
Certificate serial: 0D40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
Manifest number: 0D31
Signing time: Tue 18 Aug 2026 18:23:30 +0000
Manifest this update: Tue 18 Aug 2026 18:23:29 +0000
Manifest next update: Tue 25 Aug 2026 18:23:29 +0000
Files and hashes: 1: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl (hash: ynk3TVeGoPezvvg1hXANbn7jvmJ6519WllVFQh/mtj4=)
2: 5BF38D62058E11EA96051368C4F9AE02.roa (hash: mfe6dh8HV+B3Izq2cj3w4opPN3aJ9/HVDtDRjSUh3Hs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl
rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:23:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3392 (0xd40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A6CB, serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
Validity
Not Before: Aug 18 18:23:29 2026 GMT
Not After : Aug 25 18:23:29 2026 GMT
Subject: CN=6a84a322-472f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:da:bc:0f:81:55:7e:22:72:a1:56:c7:cc:
1f:d3:c0:1e:03:b4:99:e6:5c:71:ce:91:1b:93:6b:
0b:ba:2d:80:db:63:ea:ff:2e:a8:9d:f1:b1:0c:b3:
b3:71:63:38:a1:36:99:4b:51:0d:9f:b9:f3:c9:cf:
14:41:13:2a:f8:11:31:40:9f:13:84:eb:6e:19:c1:
07:30:ba:35:c2:95:6a:87:61:98:71:25:8b:0a:93:
af:29:fa:d9:9b:aa:53:25:d6:27:6f:5c:4e:02:0a:
df:16:7c:16:51:63:ca:74:3a:0b:bb:0a:6a:0b:87:
c2:99:98:66:1e:df:92:dd:00:9f:3a:34:21:6a:9d:
3f:ff:b8:37:11:1b:90:67:33:67:cd:de:37:49:c9:
73:ad:36:af:97:44:1d:93:a9:d6:39:33:80:c2:0e:
e9:65:4d:74:26:dc:18:75:10:9a:99:77:62:81:ba:
9e:6a:25:06:5f:be:7d:48:a0:47:03:66:21:64:e4:
4a:96:8a:9f:17:fc:25:a6:2c:89:1b:80:f7:ce:e9:
2a:cb:99:ef:9d:c2:21:53:db:26:c6:0f:1a:6c:8e:
cc:f6:2d:ef:a1:11:68:98:46:c7:7a:23:d1:18:6d:
08:d2:f3:8e:ae:2c:20:76:2a:26:c6:9a:3c:80:b1:
d1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:82:67:6C:03:F0:D5:C0:11:F2:58:CE:A0:28:61:8F:D1:C0:35:73
X509v3 Authority Key Identifier:
keyid:67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:71:bf:70:d0:e8:e1:0d:0f:65:a9:57:ea:a6:2e:b6:10:ac:
25:24:88:76:58:54:95:15:00:9a:d1:fa:f3:98:83:a1:d7:2c:
ad:bc:18:87:a8:61:c0:36:fc:a2:76:ee:91:a9:92:73:fe:1a:
b1:93:2b:bc:5c:92:4e:bd:8c:70:8c:15:24:06:58:bc:15:3d:
04:24:08:c9:79:db:8b:92:cc:d2:89:72:9b:50:f2:dd:57:1e:
7e:e3:33:48:27:ba:7b:db:94:81:56:93:97:c1:94:f2:4e:51:
e3:1c:67:95:c2:33:5b:ea:dd:0c:97:8b:13:04:54:b4:3d:ba:
41:4a:0c:c1:67:02:c5:08:f8:e9:12:29:1b:e4:14:ad:51:82:
94:c3:82:e4:29:5c:63:93:35:2f:44:83:58:2c:4c:3e:d4:f8:
3e:23:fb:a3:ec:a1:71:81:19:e2:81:2a:1c:d8:48:c7:80:89:
ac:eb:e2:58:42:1d:e2:c2:f5:b2:c4:65:dd:c8:66:f9:00:b8:
9b:e1:07:60:25:fe:d9:60:98:54:cf:5e:b4:d2:6f:da:40:b1:
eb:de:48:fd:bc:2a:91:ea:e1:01:8c:d1:80:f7:79:71:25:32:
d9:34:89:75:70:fc:98:e9:0d:db:b6:1b:43:c1:0c:64:eb:91:
eb:af:0a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:35 2026 by rpki-client