
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
File: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft (raw, json)
Hash identifier: IqG/gJ4QicE95AKQMh6/EGIziknZNMHcfcr2u2IVGvs=
Subject key identifier: 42:42:48:C8:25:3D:3C:B3:81:93:9E:0F:3E:9E:ED:4E:FC:B6:9A:D5
Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Certificate serial: 0597
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
Manifest number: 04E8
Signing time: Sat 09 May 2026 00:16:32 +0000
Manifest this update: Sat 09 May 2026 00:16:31 +0000
Manifest next update: Sat 16 May 2026 00:16:31 +0000
Files and hashes: 1: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl (hash: HjN2rhaPjHVvPZQ4ARP8VeHJ0jK67tDN8Gid99TGGes=)
2: 6ADAC8EE49DF11F19FFA59D5AE833773.roa (hash: Nj3mxAwy1SbNod9tF7k791WTI9ejpqbsgsRWdIlygZ0=)
3: 36DD8A88B68A11F09D04E950C4F9AE02.roa (hash: GWrEAedNxq26S9u3npD3fV7eXN2tOVtJvTAoCK+jrPA=)
4: 3050FB0E9F7511F085D9D70FC4F9AE02.roa (hash: VV9KXmgRKf+FOm7HICubh1e+YuZrynDmGju0xNgq3eg=)
5: 5E009276B69011F0B54BD22FC4F9AE02.roa (hash: w0/Y20ZivT/a5tcFD2rl9Yy1BY1/AxocW5RgryvCT0U=)
6: 8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa (hash: eFW9dgfgDhQ46WggGF+7xnQXK6hHzPnIupphxiZfKs0=)
7: 69A02F92B69011F0AFB90732C4F9AE02.roa (hash: 2GDXW34y0UeqYApW2yftSPb+tT2ESSz3aUeD8fKFqqs=)
8: 37D5EC8CB68A11F09D04E950C4F9AE02.roa (hash: 6aVnE8xoctQeLsx9ZDOTJHTWJS72yU7v5odJKGzLwnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 16 May 2026 00:16:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1431 (0x597)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Validity
Not Before: May 9 00:16:31 2026 GMT
Not After : May 16 00:16:31 2026 GMT
Subject: CN=69fe7cdf-6bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:f8:29:05:9c:87:86:ae:f3:0c:7d:69:03:
41:57:7b:4b:de:9c:4b:53:d0:b3:ae:5e:77:98:c7:
32:8f:69:12:94:f1:d5:bd:23:b2:bb:76:e0:79:76:
93:23:48:04:8d:3b:07:c1:63:2c:63:e3:96:12:5c:
3e:3a:d8:fe:f5:d5:a0:a3:44:6e:cd:29:d8:30:12:
fc:c3:23:89:45:d0:48:ff:82:a4:44:c0:01:81:06:
35:43:ea:df:f5:29:0b:49:0e:2e:3a:78:25:6c:0a:
34:33:a3:f3:dd:9f:cf:f8:a3:f0:8f:2c:19:bb:42:
17:7c:42:55:40:63:a1:99:78:a4:fd:84:1e:47:07:
83:f8:18:70:dd:1a:e2:2d:6a:68:cb:ca:69:0b:06:
8e:55:42:b6:20:40:0a:d4:3c:c6:1d:a5:66:c9:eb:
9f:9f:0f:6e:bd:a7:a7:91:ef:d1:73:3f:2f:4a:ca:
83:d7:32:41:76:e6:b3:35:d1:03:04:7a:56:7f:f1:
33:06:78:ee:c8:ef:0f:f0:53:70:4f:98:c0:71:ee:
3d:30:0a:6c:38:0c:37:52:f8:5d:8c:91:df:df:8e:
73:5c:68:b4:02:d2:45:4b:8c:8e:ed:0e:1f:c3:bc:
c4:84:6f:69:cc:15:c3:ec:3c:22:91:cd:23:89:37:
12:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:42:48:C8:25:3D:3C:B3:81:93:9E:0F:3E:9E:ED:4E:FC:B6:9A:D5
X509v3 Authority Key Identifier:
keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:45:1b:66:66:40:89:f4:4b:5c:a8:e7:44:ca:ea:09:74:a6:
3e:2e:fa:a4:2f:5d:e7:56:38:7f:19:c1:61:2a:fc:48:26:7b:
b3:94:49:1d:cc:31:a8:bc:72:68:0e:d5:7c:fc:ef:1a:7f:07:
29:43:92:8d:e0:12:c4:07:56:a6:04:5c:61:fe:be:aa:f2:c0:
31:8b:b4:26:04:5e:62:f8:6c:09:be:3e:02:e9:ae:cd:c6:7e:
f6:a3:26:8c:5d:27:21:56:a9:14:fd:f6:d2:ed:a6:fc:51:56:
a4:71:2a:31:c8:27:6f:37:fa:64:f1:57:ff:23:27:b6:06:2e:
25:86:bc:9c:b4:8c:60:95:ee:58:00:ee:b5:f0:97:72:f5:b4:
81:39:8b:02:13:24:00:ac:e9:2e:2a:eb:cb:98:a2:10:ab:62:
2e:c1:a9:19:ee:cb:08:22:de:09:61:db:63:d3:cf:90:58:57:
3d:9f:8a:1a:23:b9:b6:c3:58:b7:b8:d1:f1:cd:ab:ff:c7:6f:
c2:d9:4a:a4:66:71:f3:35:6b:27:5b:d2:9c:fa:27:51:84:2e:
4b:91:17:8d:23:04:76:84:81:f4:d6:fd:4c:bb:66:64:58:94:
07:ae:cd:bb:a2:e3:64:db:a0:9a:d5:38:4d:0b:7e:71:b2:1f:
11:ce:f2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 08:09:48 2026 by rpki-client