
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
File: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft (raw, json)
Hash identifier: bz2pbLHtOQUNx5t1tlk/YTiPXHvBBPGBo/XvzesruC0=
Subject key identifier: DE:9A:77:C9:01:7E:0E:07:55:7B:66:CF:7C:D2:3A:FD:D5:05:06:BC
Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Certificate serial: 05FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
Manifest number: 0541
Signing time: Wed 07 Oct 2026 00:07:58 +0000
Manifest this update: Wed 07 Oct 2026 00:07:57 +0000
Manifest next update: Wed 14 Oct 2026 00:07:57 +0000
Files and hashes: 1: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl (hash: HI6ZnOBDGdz1km2JKAG/uMpmNx2muJTk1ygUHdb8lnc=)
2: 33B5008E817811F198EF28E28EA30FBC.roa (hash: dhdm8ifZMbfHcmPmtcvJgps8m/quTfZgQcRwecxEd4o=)
3: FCC76842A3FE11F1AD0732AA6311F970.roa (hash: 1I+bUDo2mDKieQlqOO+SjmU9khOZDViuGtw2fztkpUA=)
4: 85E1EA3CBD2011F181CACAEB4C11F970.roa (hash: RYvFgW2BQXfzCIFCCMGnmkTlTXuzevdEpcNnHbIZfi8=)
5: 37D5EC8CB68A11F09D04E950C4F9AE02.roa (hash: 6aVnE8xoctQeLsx9ZDOTJHTWJS72yU7v5odJKGzLwnc=)
6: 3050FB0E9F7511F085D9D70FC4F9AE02.roa (hash: VV9KXmgRKf+FOm7HICubh1e+YuZrynDmGju0xNgq3eg=)
7: 62D9B996A3FF11F19DE49AE66311F970.roa (hash: 58436ywWioeIyXvUQgf54PxYopx4wdMLShpWCNHvyY0=)
8: 5C92DD9AA40111F1A3E298106411F970.roa (hash: PtrVig6rANGuDw4j5aNoWsmOfVkMKFzjnif4UqOH7zI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 00:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1532 (0x5fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Validity
Not Before: Oct 7 00:07:57 2026 GMT
Not After : Oct 14 00:07:57 2026 GMT
Subject: CN=6ac58d5e-efc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:97:56:4c:fb:5e:20:c7:70:63:94:aa:1f:73:
80:76:26:f6:ad:aa:87:8c:fa:ed:3e:cf:8e:f6:ec:
c1:c9:79:92:99:f5:36:c5:88:10:89:63:03:98:de:
d7:50:fe:a3:5f:ef:cd:7a:d8:df:de:c9:6d:4f:79:
d6:7e:99:44:ba:0f:90:05:cb:57:0a:4d:7a:da:e5:
f7:2b:e2:79:24:94:2e:a9:de:d7:e7:06:10:21:e8:
13:71:59:25:63:dd:a5:e1:e5:58:15:c8:0f:12:20:
b5:90:81:0f:81:fc:fe:78:25:df:99:40:a7:62:65:
af:1d:09:aa:16:57:31:5a:d1:c8:58:d0:d4:75:44:
28:c9:c5:a9:24:92:cc:3d:aa:8c:e4:f3:9f:ff:bc:
9a:98:f3:01:1d:af:4f:75:2a:f1:a6:3e:c6:2c:38:
c4:1e:52:c5:d8:65:56:8e:af:6d:59:6c:84:fb:e0:
b6:97:24:14:ec:29:40:74:23:4a:7c:95:a2:39:46:
73:17:06:a3:d3:d0:00:ff:aa:1e:29:dc:31:a2:b7:
87:72:de:9b:e6:1a:14:48:32:82:5d:a5:59:f2:e2:
a6:2c:86:e2:b4:35:64:dc:e8:00:a4:fa:6f:85:b1:
aa:bb:5f:d1:6a:2b:57:1a:03:e4:dc:c5:8a:ea:ac:
7f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9A:77:C9:01:7E:0E:07:55:7B:66:CF:7C:D2:3A:FD:D5:05:06:BC
X509v3 Authority Key Identifier:
keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:43:1d:2d:d5:82:77:0f:ab:87:78:6a:e9:19:bd:ef:aa:20:
7e:c3:91:91:f3:0f:10:88:08:64:08:fb:37:32:fd:a4:79:77:
5f:84:70:da:fc:d0:a3:91:63:b0:10:fd:26:7e:c2:00:a4:9e:
13:5a:72:5e:23:a2:94:ac:16:43:bf:be:f9:d1:34:69:22:55:
78:22:79:9f:95:65:dc:46:67:e2:70:de:3f:85:08:76:8e:16:
dc:00:c1:24:9c:c0:e7:c8:e1:7d:19:77:3c:ea:10:8d:92:f7:
bb:6d:aa:1f:8c:ab:5f:c2:81:20:17:8a:e1:ed:02:c4:2a:4b:
6c:23:c6:72:12:26:59:bd:84:11:12:dc:16:b2:db:fe:e5:0e:
43:53:57:7c:b4:3b:fb:80:8e:07:87:af:4a:aa:97:60:46:69:
cf:2f:7b:b4:fc:ec:d9:98:f8:dc:dd:57:0a:cd:14:3a:52:00:
42:e6:ba:ef:44:68:5a:d4:5e:16:74:52:30:44:19:1e:e8:2f:
2d:af:e8:85:bb:c8:70:fe:93:76:79:ff:63:e4:08:84:8c:a5:
96:ec:6e:1b:89:09:14:f6:27:74:19:1d:a4:93:cc:d5:95:ba:
2f:27:d0:96:07:a9:2d:1c:2a:5e:5d:9b:f4:09:e6:ce:cb:5f:
25:4e:e4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:04:49 2026 by rpki-client