
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
File: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft (raw, json)
Hash identifier: rX9nxi94U1sG/nmSRkWGWvcVHWXRJFVTFvI98/VK2iA=
Subject key identifier: 02:F0:5E:D0:30:36:E0:6D:9F:CE:C9:C2:00:42:C0:42:C4:09:24:03
Authority key identifier: CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98
Certificate issuer: /CN=A913B018/serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98
Certificate serial: 01B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
Manifest number: 01B4
Signing time: Mon 01 Jun 2026 04:44:57 +0000
Manifest this update: Mon 01 Jun 2026 04:44:57 +0000
Manifest next update: Mon 08 Jun 2026 04:44:57 +0000
Files and hashes: 1: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl (hash: ZonBod0sxv3P+o+yRCZnjkVEh0VvOaYSXGDubprrvok=)
2: 8B7FA748C5F911EE8D0FDF82C4F9AE02.roa (hash: GLrzVbO/eZPffRoT3cGz+iLpJergigCKe+VSGEBiwVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl
rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 04:44:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B018, serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98
Validity
Not Before: Jun 1 04:44:57 2026 GMT
Not After : Jun 8 04:44:57 2026 GMT
Subject: CN=6a1d0e49-df8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:af:1a:8c:cb:74:60:7e:1d:1d:42:cf:42:
0b:9a:d7:da:cc:ef:bd:01:39:f2:e3:6f:69:ef:a2:
60:60:20:09:61:b4:76:16:d8:e4:df:31:0c:c6:97:
d0:24:fe:7c:ee:e5:82:19:74:1b:66:cb:f5:31:53:
d8:3f:03:fb:ec:f6:98:8d:54:bf:fc:42:3a:81:c3:
6f:58:98:9f:35:71:dd:3f:98:a6:0e:7f:28:d8:06:
5a:4a:55:8d:7a:d7:db:26:97:8a:e8:a2:76:35:8f:
b9:0a:d5:dc:9b:69:9a:3f:d7:6d:65:c6:fa:39:f9:
3f:48:99:ea:84:b7:65:26:c3:dd:9b:ed:c4:f3:f6:
a2:16:fd:79:44:4a:d2:c2:8a:5b:82:66:0c:2b:5c:
19:64:8b:7e:96:d6:03:33:18:93:55:2d:8d:3b:cf:
92:b8:3c:d7:7a:b5:4c:16:61:f2:af:db:c8:22:90:
2d:5f:d9:db:32:41:ab:49:e7:f8:f8:13:60:e6:5b:
9a:78:f7:19:41:16:bd:b9:f5:fc:23:58:79:d4:42:
6a:c1:9b:73:57:82:7b:34:35:60:dd:c4:2e:8e:8a:
a7:ff:e6:9c:1a:7b:2a:1d:c3:c2:24:26:cb:17:51:
25:d2:ba:2f:6a:b7:2a:98:ec:f2:e0:18:77:58:f1:
44:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F0:5E:D0:30:36:E0:6D:9F:CE:C9:C2:00:42:C0:42:C4:09:24:03
X509v3 Authority Key Identifier:
keyid:CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:48:c4:8f:9e:4d:4b:15:dc:52:d6:ed:cb:b0:f5:02:b0:81:
af:82:de:f0:d4:6c:5b:b5:6d:fc:08:32:51:95:17:df:b9:1a:
ab:5d:2e:96:a3:45:34:9b:08:1e:e7:df:d5:f8:10:c6:49:d3:
a1:4b:10:bb:47:93:5c:8c:e2:af:a4:e8:bd:7f:92:9e:6c:cd:
3c:85:0d:fb:b3:bf:b3:2c:86:84:63:89:05:74:94:26:5d:89:
71:b2:0b:d0:7a:af:04:ec:76:9a:83:64:88:20:b2:8d:34:fd:
1f:19:6b:d9:fb:55:b8:77:3a:cb:87:11:04:e4:7d:ef:4a:95:
8a:38:1e:36:24:3a:d8:b9:0c:1a:e7:8b:0f:5a:a1:d4:e9:5b:
90:04:45:3a:38:eb:bd:f2:31:26:3b:cd:00:91:4d:77:50:80:
42:96:40:3e:06:e2:79:63:75:f0:76:4f:59:7a:8e:45:36:d6:
d5:ac:fe:69:d0:8b:b4:6d:1f:61:0d:eb:34:4d:0f:a7:64:50:
e3:c4:a0:f8:0b:5a:48:5f:6d:56:64:67:94:0f:12:39:7d:4a:
f0:08:7a:7b:4a:68:ad:86:3f:c5:1b:62:b3:8a:54:49:2f:35:
cb:de:a0:d5:3b:60:55:25:be:67:39:ec:28:8b:8f:84:a4:50:
9f:71:48:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:14:24 2026 by rpki-client