
$ rpki-client -vvf rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
File: CzZuBwz-cA5HfuR01slUndOzi_I.mft (raw, json)
Hash identifier: L9lh6t7CBfGisy0E3HCeYLdSL5JBGF/P+Z0DMv/+qRc=
Subject key identifier: 17:F9:43:27:33:0E:2A:81:C6:AC:74:5C:CE:A1:B5:BF:BE:0A:88:A5
Authority key identifier: 0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2
Certificate issuer: /CN=A913819A/serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2
Certificate serial: 0170
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
Manifest number: 0158
Signing time: Sun 05 Jul 2026 05:55:09 +0000
Manifest this update: Sun 05 Jul 2026 05:55:08 +0000
Manifest next update: Sun 12 Jul 2026 05:55:08 +0000
Files and hashes: 1: CzZuBwz-cA5HfuR01slUndOzi_I.crl (hash: cVq2wx+Dv3RzPsfT+It+Ld6QKbp4aCgpIa+Hyjzw/+U=)
2: D985E93886B111EFA11BDF53C4F9AE02.roa (hash: PKsDzQz8Iz9pp87aDZQ9VcpxtBwvynLDnu1x8wN8n3E=)
3: 3EFB586286BB11EFBD5D541DC4F9AE02.roa (hash: hlTOhKlRcRDqDLJx9A76x4qFo+ibdhrZ7489cVCKdJ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl
rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 05:55:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368 (0x170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913819A, serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2
Validity
Not Before: Jul 5 05:55:08 2026 GMT
Not After : Jul 12 05:55:08 2026 GMT
Subject: CN=6a49f1bd-a052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:95:5e:14:e3:18:32:2c:e9:eb:ed:c9:af:8d:
62:86:f5:cc:18:f4:92:a5:d6:09:d9:a3:28:a9:55:
83:5f:b8:64:3e:1d:09:86:76:d4:27:ff:cf:72:52:
fe:d1:c7:fd:73:1f:31:66:21:e6:c8:91:e2:bd:a6:
a0:56:86:78:df:b4:39:82:81:e2:c8:38:8e:55:b9:
e6:de:9b:96:d9:5b:b0:7a:80:85:4b:fa:4d:8a:d8:
b9:dc:f0:72:84:43:ec:09:67:76:27:61:dc:39:0c:
d6:94:63:fd:44:88:94:33:32:f1:d2:51:6a:2b:f2:
a0:0f:42:0d:22:af:6a:dd:20:56:8d:4e:24:ed:52:
b4:82:22:6f:3b:56:bf:2d:3e:b4:65:f6:a1:31:6a:
66:a4:d4:a8:8b:f0:f6:b2:a4:66:21:3a:af:4b:a3:
5d:78:74:1f:eb:b5:10:2b:a8:2b:0d:7d:d4:93:ad:
12:1f:9c:0e:5e:34:06:a8:90:b8:0c:1b:af:de:3b:
f1:91:da:31:21:e3:e6:0b:1f:d9:fd:a4:d7:e2:04:
7b:62:bf:f4:8e:f8:ea:14:ad:a9:bf:60:24:74:9a:
be:8b:06:ad:f2:a7:9c:b6:84:f2:65:17:ba:5e:8f:
d8:3c:bd:89:a4:d9:f4:71:dc:35:63:64:8e:6b:05:
d4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F9:43:27:33:0E:2A:81:C6:AC:74:5C:CE:A1:B5:BF:BE:0A:88:A5
X509v3 Authority Key Identifier:
keyid:0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:74:e4:ac:1c:78:95:bc:4b:48:76:54:74:c7:3b:2c:fa:ce:
94:ec:fa:17:73:7e:a3:f0:85:67:60:f1:8c:1f:1a:09:b1:bf:
10:76:91:0a:88:64:1c:59:94:00:f7:70:8b:b3:00:94:fe:e5:
99:4e:61:16:de:f9:2d:44:fb:4f:6c:94:93:60:46:cf:18:4d:
fa:62:a2:df:14:1e:21:32:14:b6:e9:14:99:ad:ef:89:c6:a0:
e8:17:8c:5a:4b:95:49:8f:fe:31:b9:96:3e:ac:19:25:42:a7:
60:c3:7e:04:b4:3f:8b:f1:2f:2f:f5:d5:30:80:c9:bb:0d:23:
58:58:d6:5e:c0:95:94:0b:08:6e:42:54:8d:50:26:96:b6:1b:
66:51:3f:e7:ae:19:fc:73:7d:68:ba:e4:6f:3a:fd:f7:c7:a7:
01:61:57:e9:a4:20:72:49:34:34:1a:dd:01:1a:f6:67:a7:ad:
33:48:d8:42:21:fc:c7:9c:28:e3:f0:a0:42:b1:fc:a8:dc:68:
cd:a7:10:fa:c8:f0:76:48:fb:9e:58:b4:17:ad:27:49:0c:6b:
95:36:7f:84:83:53:14:39:2a:a2:00:56:a5:ea:c2:c5:d3:8b:
be:c9:36:74:89:fb:3b:af:bc:03:3c:d0:67:e3:60:2c:fa:ae:
0f:7a:e2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:13:52 2026 by rpki-client