
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
File: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft (raw, json)
Hash identifier: tvU69Y4XVEhHZLVDxgTrNnxdcVBsXy63alJz9uKVADo=
Subject key identifier: D8:8C:5C:52:FD:8C:98:6F:78:BC:68:11:9B:97:BC:2B:A3:A3:B4:96
Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Certificate serial: 056F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
Manifest number: 04C8
Signing time: Sun 22 Mar 2026 23:53:03 +0000
Manifest this update: Sun 22 Mar 2026 23:53:03 +0000
Manifest next update: Sun 29 Mar 2026 23:53:03 +0000
Files and hashes: 1: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl (hash: vLiknwCo5W1lTNQe/7Rqu/JBtghM1LJbUyO0fffx3o0=)
2: 36DD8A88B68A11F09D04E950C4F9AE02.roa (hash: GWrEAedNxq26S9u3npD3fV7eXN2tOVtJvTAoCK+jrPA=)
3: 3050FB0E9F7511F085D9D70FC4F9AE02.roa (hash: VV9KXmgRKf+FOm7HICubh1e+YuZrynDmGju0xNgq3eg=)
4: 8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa (hash: eFW9dgfgDhQ46WggGF+7xnQXK6hHzPnIupphxiZfKs0=)
5: 37D5EC8CB68A11F09D04E950C4F9AE02.roa (hash: 6aVnE8xoctQeLsx9ZDOTJHTWJS72yU7v5odJKGzLwnc=)
6: 69A02F92B69011F0AFB90732C4F9AE02.roa (hash: 2GDXW34y0UeqYApW2yftSPb+tT2ESSz3aUeD8fKFqqs=)
7: 5E009276B69011F0B54BD22FC4F9AE02.roa (hash: w0/Y20ZivT/a5tcFD2rl9Yy1BY1/AxocW5RgryvCT0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 23:53:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1391 (0x56f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Validity
Not Before: Mar 22 23:53:03 2026 GMT
Not After : Mar 29 23:53:03 2026 GMT
Subject: CN=69c080df-6ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a6:74:78:7d:1a:67:3f:a3:08:4c:93:0f:57:
cc:a5:ae:55:ea:97:7b:78:f1:4a:6e:2f:a2:42:5f:
c1:6f:62:ea:d8:d9:04:27:6e:03:67:65:96:19:b1:
37:5e:b4:39:f6:87:aa:9a:83:24:85:41:c5:7c:fd:
22:bb:a3:3b:df:8f:67:42:34:f1:86:81:14:50:a3:
8e:de:90:f7:71:78:81:3c:b6:6c:df:47:6d:14:65:
f3:27:f9:18:e1:d5:45:57:01:02:21:36:82:ce:85:
06:05:8b:5f:39:b9:83:98:cf:d7:a2:15:3a:7f:40:
ff:0e:cb:c6:bb:42:78:91:6a:12:9f:31:be:43:42:
87:a0:5b:51:78:87:d0:55:34:13:3b:4d:b5:40:27:
4f:4c:7c:c6:8c:cd:73:d8:92:d5:40:7f:aa:cd:04:
e6:3e:33:72:4d:c8:e7:d0:25:38:c2:9b:59:8c:11:
a0:8e:00:ae:d6:eb:1a:61:44:ac:da:17:94:6b:b7:
85:10:cf:c5:8e:ee:33:a5:42:66:cb:8b:c7:41:8c:
29:d0:48:c5:65:d8:8f:d9:c9:6c:04:bc:06:52:5e:
a7:ee:0c:fc:e6:71:c5:bf:1a:84:1f:90:2c:c6:d5:
dc:95:76:30:c9:e9:6f:b5:57:09:29:a2:6f:4a:de:
13:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8C:5C:52:FD:8C:98:6F:78:BC:68:11:9B:97:BC:2B:A3:A3:B4:96
X509v3 Authority Key Identifier:
keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2d:40:d3:df:13:66:3d:9c:66:d1:c3:33:e1:95:75:a8:3b:
cd:bb:ea:36:e2:d1:de:30:80:ae:7b:31:06:6a:1a:d3:1b:da:
26:46:9d:8d:22:29:39:78:07:6d:e8:54:16:4b:1b:0d:23:e1:
26:b4:f2:4d:0d:df:41:66:15:d1:c7:0c:f2:e1:1d:9e:5b:d6:
cc:dd:66:a5:d5:a3:26:82:88:5b:21:10:c9:d6:60:7b:8e:c1:
fa:f8:19:59:fa:91:91:50:b6:8f:9d:88:88:47:35:cd:bf:1b:
92:28:f7:f0:77:2a:d4:7f:ef:11:77:22:43:6a:db:9f:5d:51:
3d:83:c7:f2:2e:1f:53:47:b0:43:36:43:aa:17:8f:88:27:1f:
7b:a8:2c:0e:4c:8c:be:d9:1f:a4:c1:f1:49:4c:78:ce:10:3b:
3d:9c:a5:62:88:50:7c:e1:4b:91:ce:c2:ab:a9:2e:5e:11:1d:
d4:ba:4d:dd:aa:6f:bb:8c:08:65:44:cf:ee:e4:d7:4f:0e:38:
6c:ae:d0:b6:05:f1:65:5e:d6:4e:f2:40:e9:b6:9c:ef:5d:8b:
15:41:bb:67:87:47:1f:8a:47:d2:26:f9:4b:c7:53:42:ae:7d:
9d:42:ff:f3:ed:17:88:a6:b0:d9:75:68:35:92:86:2f:3b:d4:
6c:bc:9e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 15:52:17 2026 by rpki-client