
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft
File: sZKtRE3h8t51vroe79Ei7s99d8w.mft (raw, json)
Hash identifier: iq/hTuihgCkervYkBoEBNqQSQXEcg+lG3vb2MgzbqHs=
Subject key identifier: 82:5D:07:43:34:D4:22:7F:19:EC:36:BF:A9:1F:F7:6B:E7:85:3B:F1
Authority key identifier: B1:92:AD:44:4D:E1:F2:DE:75:BE:BA:1E:EF:D1:22:EE:CF:7D:77:CC
Certificate issuer: /CN=A913DEDF/serialNumber=B192AD444DE1F2DE75BEBA1EEFD122EECF7D77CC
Certificate serial: 022F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft
Manifest number: 0227
Signing time: Tue 23 Jun 2026 02:53:53 +0000
Manifest this update: Tue 23 Jun 2026 02:53:53 +0000
Manifest next update: Tue 30 Jun 2026 02:53:53 +0000
Files and hashes: 1: sZKtRE3h8t51vroe79Ei7s99d8w.crl (hash: pqC2LhOygWfvqK0mey3QIbheXwaLauDzKSJ31rYLxBc=)
2: DC5F1826D1BD11EF8CC80268C4F9AE02.roa (hash: 5ciRZnMNFhIo0Wo7M5ePcfg4YNpNsIJV7sTdX3rIjqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.crl
rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 02:53:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DEDF, serialNumber=B192AD444DE1F2DE75BEBA1EEFD122EECF7D77CC
Validity
Not Before: Jun 23 02:53:53 2026 GMT
Not After : Jun 30 02:53:53 2026 GMT
Subject: CN=6a39f541-98e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e6:d2:f1:54:54:b9:4d:da:ae:23:d1:5c:d5:
06:f5:1d:6c:17:58:0d:4e:a3:fb:eb:21:4d:a1:f3:
1e:7f:9a:63:c6:c9:b0:a0:63:06:80:9e:cb:ce:b5:
84:99:cd:91:89:15:53:3a:1a:8e:a4:b6:a4:ac:bf:
50:d4:35:26:5e:ec:7e:da:94:0f:5b:9c:0d:bf:52:
49:43:fb:fa:47:ba:11:ee:64:4c:8f:43:30:a3:8c:
7e:90:72:f0:17:8a:91:94:9d:bf:d0:d4:3c:c1:a4:
af:6d:2e:26:f2:fa:9f:f0:60:8d:5b:57:7d:fb:3e:
5f:7e:43:d4:fb:5e:50:e6:2c:7b:84:0a:08:ad:91:
46:63:91:e3:76:15:25:5d:6e:8b:33:8f:58:03:57:
0f:f4:77:9d:eb:da:7e:00:45:0f:f5:fb:4b:f7:87:
99:df:9d:d9:10:30:c7:07:a4:50:bc:58:fe:7f:c9:
e0:09:8a:02:32:60:08:4f:fa:35:98:ba:cc:ad:79:
6e:7a:54:b8:f2:6c:d4:79:9c:68:33:ef:30:31:1b:
79:94:c7:e5:d4:bc:fc:7b:a6:a3:88:3a:c2:d7:fd:
e6:66:60:e8:b0:00:7a:8f:9d:a3:e9:b8:ae:ca:ca:
fd:28:13:bd:7f:7b:ff:30:50:1b:40:67:eb:35:cd:
a5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5D:07:43:34:D4:22:7F:19:EC:36:BF:A9:1F:F7:6B:E7:85:3B:F1
X509v3 Authority Key Identifier:
keyid:B1:92:AD:44:4D:E1:F2:DE:75:BE:BA:1E:EF:D1:22:EE:CF:7D:77:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:2f:e8:2e:7f:de:22:d0:25:a9:59:32:59:5e:e3:80:58:ff:
83:df:c1:56:4a:e0:46:7e:bc:c3:9c:b1:f6:80:a4:c7:9b:60:
a4:7c:4d:cf:f1:20:ee:1e:14:0b:3a:b5:2e:9b:f1:b1:1b:42:
3c:01:4a:e9:0f:af:05:63:9a:c5:b1:35:2a:67:66:ee:5e:17:
07:89:0e:1b:e5:07:27:4c:bd:f8:b6:b1:b7:4d:e3:4b:e3:f1:
f9:ae:8f:06:25:5a:0a:c9:16:51:d9:1c:52:84:f1:ec:13:5b:
8d:e6:5f:c3:a8:38:3f:7e:67:ea:8b:4a:52:dd:b3:f2:81:36:
34:c1:31:5a:63:fd:d1:14:4a:8c:26:59:87:5c:16:91:e0:c5:
54:d9:b4:6c:a3:10:b8:33:37:8e:ff:dc:ca:db:23:58:3a:90:
f7:3a:14:20:8f:f2:b5:a7:0a:2b:e1:77:69:8d:f3:aa:8d:45:
54:df:de:c2:e5:03:e6:c1:12:02:07:62:c1:54:11:14:f5:04:
c4:3d:db:36:89:2f:0b:d8:ea:a5:58:a8:f3:c9:b5:e9:e7:9d:
b1:c6:40:89:fc:35:ca:79:8e:16:00:59:2d:7c:ba:5f:3f:86:
d2:01:24:52:53:f9:2c:ad:68:a0:f0:7a:39:8e:48:b3:78:c3:
16:19:f1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:25:32 2026 by rpki-client