
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
File: CZJdtntKud9gBue9K8HY7cjMfhk.mft (raw, json)
Hash identifier: k+DE8V7BuYmJIcbeHF9L8W7NcozMJ7erMakG4cDBd7E=
Subject key identifier: 05:CC:9A:3C:61:9C:C4:6E:F5:A4:81:23:58:AF:B2:A6:7F:79:DD:C7
Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
Certificate issuer: /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Certificate serial: 0C33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
Manifest number: 0C04
Signing time: Tue 18 Aug 2026 19:09:57 +0000
Manifest this update: Tue 18 Aug 2026 19:09:56 +0000
Manifest next update: Tue 25 Aug 2026 19:09:56 +0000
Files and hashes: 1: CZJdtntKud9gBue9K8HY7cjMfhk.crl (hash: 997i0smSjRHyQMvePtIww3GtTl+Dt1NzrJbyGOzjxss=)
2: B23294C079DB11F191EADDAD63A30FBC.roa (hash: SFZvdt6UQ0ZxOBmTem6qPhZ0NzjnAbq88lfVuRLHYkM=)
3: C43C22501DEF11F1B60466D9163D8C67.roa (hash: xsIr4KFI9a9YHG0N66oMLWH8AurLcb1F9zQyd9fncF4=)
4: 6932258C2F1C11EDA3E29B09C4F9AE02.roa (hash: 53LWwpRVZrDTw/6Ogh5Ek7qxm98TR8hKYo+nI3Iokbw=)
5: CB926A64E58711F0B2CA0EBF446F56BC.roa (hash: 8Zv5MMAKEdi89aa0T4smQVaAo99bnl+ZMZOEdaQmF7Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:09:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3123 (0xc33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Validity
Not Before: Aug 18 19:09:56 2026 GMT
Not After : Aug 25 19:09:56 2026 GMT
Subject: CN=6a84ae05-a484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:fe:d8:7b:9c:88:89:8e:33:08:bf:3b:b2:
95:bd:69:23:e4:39:31:65:59:6a:61:7e:8b:8a:c5:
94:c9:ca:c7:16:6c:6c:1c:aa:48:61:af:e0:9e:5a:
3e:4b:55:72:56:0b:82:7f:7d:83:66:4c:73:13:87:
78:af:7d:e4:6a:7f:98:00:cd:55:b2:fc:a5:49:30:
56:2e:a1:b5:0d:46:49:c5:82:d9:7c:34:a6:90:07:
69:7b:ac:f3:ac:a8:27:08:4e:f5:9c:e8:48:6f:c6:
fa:d5:28:6b:b8:33:61:4e:c3:55:15:36:e6:41:b7:
dc:0c:f5:21:02:f3:3e:61:6b:c7:b5:a2:87:cb:fd:
d4:2d:cc:97:a4:d3:f4:95:2d:be:70:07:8a:ff:92:
04:95:1d:47:69:02:00:fb:0b:b4:58:a2:22:b7:81:
36:51:7d:74:ac:9a:2a:66:a8:ad:c9:3a:b7:05:4d:
ac:40:b7:49:40:79:a9:80:c7:ad:4b:cf:d4:3b:4e:
97:d7:25:56:40:5a:ff:66:ca:7d:78:3d:87:06:b5:
b8:83:a5:0a:89:94:55:d7:4e:fa:e3:66:25:de:27:
cd:35:c7:13:58:ea:9a:c5:29:bf:1b:28:b6:c6:5e:
e3:8d:0d:fd:c2:c9:e6:e6:84:81:f7:a3:b1:cb:8a:
62:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CC:9A:3C:61:9C:C4:6E:F5:A4:81:23:58:AF:B2:A6:7F:79:DD:C7
X509v3 Authority Key Identifier:
keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1a:22:e7:33:91:d1:c5:df:72:bd:0d:ea:f3:35:c0:f5:bf:
e2:fe:51:5b:65:4c:e4:a1:db:87:3e:fe:9c:65:e6:8b:41:04:
12:52:bc:40:1b:42:4c:aa:e7:88:c9:33:bb:64:14:01:71:ec:
1d:f5:2b:b5:d3:6b:ad:f6:77:9c:24:21:da:d7:6f:7b:23:5c:
14:ce:63:19:b5:42:80:6c:5e:72:fb:1d:ed:51:5c:85:58:fc:
74:e4:0c:fd:fa:94:6e:24:6a:dd:c5:dc:50:d6:25:15:d9:b1:
08:4f:05:5d:4c:72:a1:b6:b1:df:29:48:ba:3d:85:2c:b9:2e:
94:c1:be:fc:be:7c:3f:84:b7:ad:80:00:8b:bf:a4:3f:e0:02:
2a:f2:75:0e:50:36:4d:b2:49:34:be:db:1a:3d:fb:4e:29:55:
d0:8b:6c:70:e9:5d:17:7c:ef:d2:f3:43:00:b2:0a:04:2a:83:
f6:4d:69:04:cd:51:85:61:a5:4f:db:6e:49:75:83:a8:cd:72:
f5:b3:94:45:cb:db:05:42:55:6d:d1:00:4a:20:66:c3:d6:76:
e0:e8:4e:c5:a1:fd:a2:12:98:e0:18:8f:b7:70:46:45:a2:0d:
21:71:f4:dd:71:e9:a8:85:a1:ba:f5:84:4d:76:87:db:70:7c:
39:b2:69:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:01:48 2026 by rpki-client