
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft
File: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft (raw, json)
Hash identifier: WuWelOmlEeQSKaMJaNWdOpaxS7vRaidm/7t33p65d+8=
Subject key identifier: F9:1D:E7:FA:C7:BA:1B:9A:7F:10:4E:E9:55:8B:B5:8C:CA:35:6A:9E
Authority key identifier: CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4
Certificate issuer: /CN=A912BE4E/serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4
Certificate serial: 0686
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft
Manifest number: 0685
Signing time: Tue 18 Aug 2026 22:51:45 +0000
Manifest this update: Tue 18 Aug 2026 22:51:45 +0000
Manifest next update: Tue 25 Aug 2026 22:51:45 +0000
Files and hashes: 1: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl (hash: upxxm/BacoC8GbzROKM3JZh7vNqJsoTEGlW325BSBaQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl
rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 22:51:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1670 (0x686)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BE4E, serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4
Validity
Not Before: Aug 18 22:51:45 2026 GMT
Not After : Aug 25 22:51:45 2026 GMT
Subject: CN=6a84e201-6d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:05:00:d6:34:01:ea:a4:89:30:80:2d:e5:b1:
09:48:1f:fb:f5:d0:82:b7:09:93:34:97:c6:04:a5:
10:7a:a8:8d:26:e0:3c:70:ab:b7:5e:3a:b3:fa:cc:
24:0e:f5:de:59:89:4d:0d:c8:a1:be:c7:d8:3d:ea:
0c:b3:39:f2:cd:9b:7e:29:d3:d3:3f:30:02:bf:61:
2a:ec:23:04:d0:a8:63:f9:a9:53:6e:68:d5:bb:ca:
5e:c8:50:76:1c:36:67:23:a2:48:93:14:97:d5:dd:
a0:77:3a:d0:59:72:6d:d3:a6:9e:c6:2e:10:cf:f4:
12:b5:0e:7f:9f:49:88:d7:aa:f1:21:3e:9b:59:fc:
cf:08:8d:dd:8a:e9:bb:e0:cb:0a:0f:5f:78:74:c3:
37:36:28:dc:45:7d:01:74:97:68:48:01:70:a9:40:
dd:12:34:9b:b6:da:a9:74:5d:95:26:2c:68:e5:ab:
83:d6:59:ee:8b:85:ff:df:3f:e9:c1:4d:e6:b5:d1:
54:20:eb:72:b4:63:a6:7e:f4:03:fc:20:1a:28:8f:
57:e2:c0:ed:57:b0:a2:30:c4:3b:13:a6:f1:26:6d:
db:ed:38:74:0a:c0:90:58:63:c1:4b:f4:2b:eb:49:
ab:91:bb:f2:02:cb:55:6c:06:19:99:a6:83:51:45:
77:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1D:E7:FA:C7:BA:1B:9A:7F:10:4E:E9:55:8B:B5:8C:CA:35:6A:9E
X509v3 Authority Key Identifier:
keyid:CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5a:68:b6:74:e0:c6:bf:e0:e2:a1:7a:0e:ac:77:a8:0d:43:
4e:46:ad:e7:12:16:41:64:44:91:69:26:2e:4d:8a:4e:96:95:
75:8a:40:70:a0:51:f7:6f:50:d4:85:9e:d5:b3:bc:3a:04:14:
3c:ad:2d:ee:fe:72:c0:e3:78:d7:f8:5e:af:b6:b9:4b:72:e3:
3c:75:fe:17:30:f8:bb:3c:4a:3c:a2:96:6d:43:e6:38:54:69:
3b:b0:d3:35:d8:a4:14:4d:d9:7d:83:69:43:fc:58:4c:27:f6:
a4:07:d3:49:3a:1c:03:cc:4f:32:2f:51:80:12:d2:ed:23:3b:
7a:09:76:ce:45:8b:0a:59:18:5a:a9:4e:c0:4e:73:3b:15:58:
8d:22:0a:6b:3e:68:44:b0:b4:84:f6:a4:34:5b:83:d8:1b:a2:
43:9e:20:a7:d5:55:4b:a2:14:9c:eb:3b:9e:7b:cf:10:72:16:
87:99:84:cc:c2:00:b8:55:96:0d:f7:a7:62:4e:02:8f:42:f6:
18:74:ff:bb:a4:80:e1:24:89:dc:96:d0:a7:93:bc:61:6b:0c:
10:75:b4:e5:99:cd:32:ee:ab:3d:23:35:3a:11:63:9f:38:35:
0b:2e:39:41:fb:28:4f:92:1a:ce:4e:e7:3f:f3:fd:ee:42:5a:
d4:4a:82:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:03 2026 by rpki-client