
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
File: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft (raw, json)
Hash identifier: qQ1kRx+s7LpKOsO6PdZF6SizJtYOPgouxDIvVP7XKwM=
Subject key identifier: D7:22:33:20:2D:A2:28:57:FB:6F:DF:A8:B8:84:27:33:F4:54:59:BE
Authority key identifier: 67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F
Certificate issuer: /CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
Certificate serial: 0D23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
Manifest number: 0D14
Signing time: Mon 22 Jun 2026 18:10:20 +0000
Manifest this update: Mon 22 Jun 2026 18:10:20 +0000
Manifest next update: Mon 29 Jun 2026 18:10:20 +0000
Files and hashes: 1: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl (hash: n5Crl8Q/F2EUBw/b0e1wMGOVnBUT/h/OS2w1XdvNPJs=)
2: 5BF38D62058E11EA96051368C4F9AE02.roa (hash: mfe6dh8HV+B3Izq2cj3w4opPN3aJ9/HVDtDRjSUh3Hs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl
rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 18:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3363 (0xd23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A6CB, serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
Validity
Not Before: Jun 22 18:10:20 2026 GMT
Not After : Jun 29 18:10:20 2026 GMT
Subject: CN=6a397a8c-76ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:81:ea:6e:6d:7e:45:23:9e:3f:49:3b:1c:02:
d2:83:fb:e3:aa:a2:f5:68:6d:b9:50:3f:d9:e7:6d:
d8:74:8f:94:6c:4f:ac:6a:56:f8:3f:a6:8b:6d:c9:
ff:75:b2:1f:5b:fc:ac:1a:dc:7c:93:20:88:ff:85:
5e:74:1d:d3:fa:c5:2b:d3:32:be:61:81:aa:e0:69:
76:47:4a:9c:89:f7:76:8f:3a:c2:8a:28:62:73:5c:
48:83:77:81:a3:15:ff:45:21:14:bd:9c:e6:9b:94:
76:2e:5b:8c:3f:90:9e:b0:e1:dc:ca:1a:45:68:44:
0f:36:18:8f:1e:42:d6:c9:92:3d:38:54:83:48:c6:
aa:d1:02:78:6b:60:d7:fc:a3:92:d3:07:fa:91:bc:
22:af:fb:3e:06:52:3b:9d:7e:69:41:55:08:43:fd:
25:5f:70:39:f9:cd:60:eb:3b:00:be:38:22:6f:a9:
fc:eb:97:72:00:f0:d2:ad:7b:cf:9c:c4:14:92:bc:
f2:28:59:25:2b:ff:a8:0a:07:29:90:bf:de:a9:fc:
5c:20:a5:ae:4f:72:60:5c:1f:b0:60:98:00:f8:7c:
d2:02:29:80:fe:a8:30:9c:74:08:20:4c:61:10:66:
b5:2b:25:22:e8:4d:a9:cb:16:fa:62:80:fc:e5:9b:
da:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:22:33:20:2D:A2:28:57:FB:6F:DF:A8:B8:84:27:33:F4:54:59:BE
X509v3 Authority Key Identifier:
keyid:67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:98:bf:35:e7:d6:77:20:46:68:01:7c:de:24:d2:16:c4:99:
4d:6c:6b:f4:f9:01:69:27:92:8e:dc:07:f9:5a:e6:3d:14:5f:
1b:dd:f1:a6:03:da:b1:d5:46:ba:af:48:63:ac:ce:ce:34:96:
68:cc:71:4f:81:58:90:76:a9:34:4a:5c:d8:44:0c:09:54:e6:
dc:34:40:5d:52:9c:d8:dc:e2:40:bc:1c:36:16:d4:5b:ae:9d:
7f:c8:ff:f2:fd:01:76:8f:31:40:bf:ea:a6:dd:55:a6:12:ab:
15:17:a8:10:f1:f1:b8:ee:af:93:b9:22:8e:40:e3:6f:06:3e:
37:e5:2d:6f:ea:cb:d3:60:69:0b:45:fc:93:c4:4c:15:73:f5:
6d:26:f7:0d:3d:61:ae:68:5d:c0:06:3e:76:06:8a:05:43:7a:
f5:34:93:d9:8e:07:f9:ff:09:ef:42:c9:c0:6f:20:65:80:db:
99:c8:a1:94:0a:56:ca:28:a1:ae:52:4f:54:81:c7:36:fb:03:
2c:b4:96:f9:d0:80:96:76:7b:3f:e8:0c:2d:e4:b9:13:20:c2:
cc:f6:42:f2:72:55:ad:62:d2:4c:19:f5:38:06:07:ba:2b:02:
41:db:19:52:9a:ab:fb:be:a8:28:26:6b:fd:f7:27:56:e1:ea:
f8:c6:12:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:19:07 2026 by rpki-client