
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
File: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft (raw, json)
Hash identifier: RB9bopMAd6u8JRi+70z4IjThdwWlHeejelcKIUtmVE4=
Subject key identifier: C9:83:8A:82:64:90:9A:86:53:56:7A:CA:2A:7B:52:DD:EB:ED:0F:06
Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Certificate serial: 05AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
Manifest number: 04FF
Signing time: Tue 23 Jun 2026 00:15:34 +0000
Manifest this update: Tue 23 Jun 2026 00:15:33 +0000
Manifest next update: Tue 30 Jun 2026 00:15:33 +0000
Files and hashes: 1: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl (hash: Om59K0hSJqp7lEQFHDnfv2QBicHdtquA+ageCooonbw=)
2: 6ADAC8EE49DF11F19FFA59D5AE833773.roa (hash: Nj3mxAwy1SbNod9tF7k791WTI9ejpqbsgsRWdIlygZ0=)
3: 69A02F92B69011F0AFB90732C4F9AE02.roa (hash: 2GDXW34y0UeqYApW2yftSPb+tT2ESSz3aUeD8fKFqqs=)
4: 8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa (hash: eFW9dgfgDhQ46WggGF+7xnQXK6hHzPnIupphxiZfKs0=)
5: 37D5EC8CB68A11F09D04E950C4F9AE02.roa (hash: 6aVnE8xoctQeLsx9ZDOTJHTWJS72yU7v5odJKGzLwnc=)
6: 3050FB0E9F7511F085D9D70FC4F9AE02.roa (hash: VV9KXmgRKf+FOm7HICubh1e+YuZrynDmGju0xNgq3eg=)
7: 36DD8A88B68A11F09D04E950C4F9AE02.roa (hash: GWrEAedNxq26S9u3npD3fV7eXN2tOVtJvTAoCK+jrPA=)
8: 5E009276B69011F0B54BD22FC4F9AE02.roa (hash: w0/Y20ZivT/a5tcFD2rl9Yy1BY1/AxocW5RgryvCT0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 00:15:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1454 (0x5ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Validity
Not Before: Jun 23 00:15:33 2026 GMT
Not After : Jun 30 00:15:33 2026 GMT
Subject: CN=6a39d026-c773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cf:a4:bf:c1:d0:a1:d2:76:a9:1d:22:4a:38:
66:34:ac:4e:15:63:5c:d5:ef:2b:73:31:83:00:eb:
1d:5c:30:62:88:ca:fb:b3:9c:f2:e5:b2:5e:fb:a6:
7f:9d:7b:86:f0:b7:5e:45:e2:e4:f7:b0:27:a4:57:
99:70:f3:8e:1c:97:f6:16:df:96:ba:9f:09:2e:b5:
0b:49:ab:e6:a8:63:07:e1:34:1a:95:0d:9e:87:03:
48:b4:46:26:4f:52:3c:41:4a:47:57:7e:02:67:61:
1d:65:86:5d:ed:fa:b7:c2:89:de:63:36:57:e3:93:
bf:f5:53:4d:75:3e:0e:31:b4:a3:46:fd:66:b0:53:
1f:3a:ee:66:73:7f:1b:c2:96:41:7f:dc:a8:93:34:
cf:85:de:fd:b2:26:ac:ae:78:90:ff:b8:d3:19:4c:
60:b6:89:38:7a:a1:8b:0d:14:ff:16:9f:58:51:f2:
bd:e9:b3:cc:93:6e:1c:7e:32:79:22:a4:ac:ad:0c:
44:dc:61:a8:29:ac:c0:ee:f4:f7:8f:bd:67:3d:75:
e6:0c:ab:e8:95:fc:d4:4c:fa:b4:fe:9a:cc:8e:68:
20:ba:05:47:06:01:37:1b:e4:a2:db:74:14:c4:f7:
38:1c:51:df:94:b2:49:f1:20:3c:df:79:fa:5e:a5:
0f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:83:8A:82:64:90:9A:86:53:56:7A:CA:2A:7B:52:DD:EB:ED:0F:06
X509v3 Authority Key Identifier:
keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:ba:8d:d4:86:49:0f:a6:de:00:54:42:a4:1f:8b:a3:99:ed:
d4:cd:01:67:56:4b:20:4d:0a:a7:c0:39:56:d6:9a:75:4d:a9:
31:39:c6:64:3d:6b:66:6f:6c:f8:12:e6:4d:09:da:be:34:f5:
67:c9:bf:c8:f7:0a:39:76:68:bc:dc:b8:1f:c3:8e:34:35:87:
cb:49:31:fd:96:8f:c1:c3:bf:7c:cb:9b:ab:00:44:80:5a:07:
4e:10:dc:84:a7:44:96:b2:a6:3c:88:b9:b4:b7:ee:3f:1a:ae:
ba:bb:b7:a7:28:51:e5:75:51:85:07:21:ff:0e:c4:2d:26:e2:
85:1f:ce:6c:7c:f2:4c:8f:ff:8c:4a:4e:6c:88:65:ec:87:8a:
e4:6e:7d:ff:08:7f:e3:6e:42:45:7d:1f:20:cf:a4:c3:b8:6e:
07:16:80:b2:d6:dd:b0:56:20:22:b8:0d:56:89:c5:02:c9:6d:
fb:1c:97:ca:00:65:d2:6f:3c:6b:cd:e5:09:36:f5:69:39:42:
ce:bd:9c:d2:dc:1b:fa:0c:ea:9f:a6:43:be:2b:0e:77:02:a8:
1a:ee:70:0a:98:36:6a:1a:a9:09:97:62:1a:4f:bf:d9:9b:84:
33:20:64:85:1b:10:27:d5:a2:89:d2:fe:0a:44:14:bb:62:8a:
be:93:ac:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 11:54:25 2026 by rpki-client