
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft
File: znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft (raw, json)
Hash identifier: ApZThurjjU36uUb/0JytFiVdmkVegX5PDdQsuScQWI4=
Subject key identifier: 46:37:C7:C2:C4:62:72:40:3E:FC:ED:FE:93:BF:80:6D:E7:1B:9F:9D
Authority key identifier: CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50
Certificate issuer: /CN=A9136C5E/serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350
Certificate serial: 0275
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft
Manifest number: 026F
Signing time: Tue 23 Jun 2026 02:10:30 +0000
Manifest this update: Tue 23 Jun 2026 02:10:29 +0000
Manifest next update: Tue 30 Jun 2026 02:10:29 +0000
Files and hashes: 1: znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl (hash: 7Kj1Kqkx7M1gOLRRenFgXkIkYi3zNMib8rJEZBszMxM=)
2: 9BCEEFF4BC6911ED9B0FC554C4F9AE02.roa (hash: 0tGrUYawd9sMWVYCt8qeQNs8Dy+OY7IGn4NZ/aaWN2c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl
rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 02:10:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 629 (0x275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136C5E, serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350
Validity
Not Before: Jun 23 02:10:29 2026 GMT
Not After : Jun 30 02:10:29 2026 GMT
Subject: CN=6a39eb16-2a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2a:f3:c4:46:f5:a0:d4:94:62:d5:fe:66:01:
af:e9:bb:ae:33:79:9b:bb:c4:b7:6b:6c:69:c1:b6:
8d:6c:45:2e:cf:e0:b4:84:28:33:6a:18:ca:fa:d9:
9e:08:74:b6:89:90:ef:a5:e0:97:17:4b:c3:07:dd:
fe:a9:a0:f7:a7:90:d5:90:f8:58:d9:36:79:b3:fc:
e1:89:8b:e3:61:bd:dd:df:48:17:05:58:0a:18:dc:
55:26:53:3f:d8:57:f0:e5:28:25:34:6b:7b:ce:1c:
5e:3f:36:d0:6e:01:af:01:c3:83:c2:97:bd:90:3b:
f4:a2:b7:23:3b:ed:9e:c1:5c:0e:7c:00:5a:9f:28:
69:db:a8:3e:a9:a0:58:23:1e:b9:94:a3:c8:17:ee:
c5:f3:01:0c:ff:f6:a1:4c:93:78:3a:2c:b8:2d:84:
8e:d2:4a:fe:a1:2f:39:d2:9a:9c:23:44:91:0b:d1:
50:31:bc:f3:e5:36:d1:83:f3:ef:80:0a:b2:c7:ff:
b7:41:45:ac:ae:8f:b5:b5:22:83:4e:83:c8:22:e2:
30:1a:2a:ef:5a:55:3b:41:06:25:9a:44:14:bc:25:
a8:d2:8e:5b:1c:5f:25:43:f9:2f:2a:f7:f6:d4:32:
a5:0d:30:c7:8e:e5:f2:9d:5d:84:8c:b8:d5:15:13:
4a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:37:C7:C2:C4:62:72:40:3E:FC:ED:FE:93:BF:80:6D:E7:1B:9F:9D
X509v3 Authority Key Identifier:
keyid:CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:35:98:f1:3e:b7:49:09:63:ab:5f:a2:ff:0f:37:f1:5b:fa:
f6:d3:ca:8e:1b:5d:66:ee:0e:7e:38:00:44:1f:69:30:ae:3b:
fb:b1:69:41:1c:76:2c:7a:6b:dc:2a:eb:39:32:62:d7:5b:7e:
4a:27:d1:13:e2:99:07:bd:53:75:8e:12:45:f6:95:75:a2:cb:
c4:3b:87:9e:51:6f:92:68:c9:6e:24:cc:23:d3:4b:0c:2e:9c:
a6:c1:84:7f:db:fa:f0:15:ac:e3:ff:c7:72:8e:a6:17:95:fb:
18:a7:29:d7:09:32:f2:57:a8:c0:0d:1f:5a:49:c8:b0:87:44:
64:aa:57:48:f4:d1:89:d2:c8:4b:d4:4e:9a:21:62:7e:f7:ab:
d9:31:5c:49:fb:3a:60:96:46:35:8e:bc:3c:cb:8e:e1:a2:6e:
84:d5:3e:46:9a:6b:2c:57:74:ee:94:3e:a3:8e:28:d2:8b:cd:
bf:40:81:d5:4c:46:6c:0d:8a:5e:41:e1:6f:dc:cb:c0:e4:86:
be:7f:ad:4c:1f:49:b8:1e:dd:df:93:b5:f7:e7:05:48:29:cd:
27:e4:30:0a:ba:84:f9:d5:e4:a3:5c:9b:49:58:40:58:6a:75:
24:5a:7f:98:ff:69:cf:4d:8c:18:79:51:dc:0f:6d:72:74:e9:
f6:d3:ed:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:32 2026 by rpki-client