
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.mft
File: ZVgfndzt1kYkkalmT_KWJlal-FQ.mft (raw, json)
Hash identifier: ZmJ02d1qZMF+Ax/lsJRhRdxucxS7lehMzueo0Ow7YrA=
Subject key identifier: 62:30:70:BA:E1:78:07:79:DD:C7:1A:0F:52:9A:87:5E:58:2A:C6:47
Authority key identifier: 65:58:1F:9D:DC:ED:D6:46:24:91:A9:66:4F:F2:96:26:56:A5:F8:54
Certificate issuer: /CN=A913EECE/serialNumber=65581F9DDCEDD6462491A9664FF2962656A5F854
Certificate serial: 5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVgfndzt1kYkkalmT_KWJlal-FQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.mft
Manifest number: 5A
Signing time: Tue 27 Oct 2026 08:29:05 +0000
Manifest this update: Tue 27 Oct 2026 08:29:05 +0000
Manifest next update: Tue 03 Nov 2026 08:29:05 +0000
Files and hashes: 1: ZVgfndzt1kYkkalmT_KWJlal-FQ.crl (hash: 637hYgzIRjCb+A41h8o7WIpGhWwmvLkEMA+vBp6zPR8=)
2: y_gp4LNOTzJ7X2SOJLw8ypIAsDo.asa (hash: S9Bc8mXLb9sh0aNUGQrKudMwGjEjDbETo3LwaIAst0c=)
3: 4D03668449E711F1BCBB7A79B5833773.roa (hash: LGCooesPA4j4gXzOKKJURalYXy31FTNPJfPPUMRN1nE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.crl
rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVgfndzt1kYkkalmT_KWJlal-FQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 08:29:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EECE, serialNumber=65581F9DDCEDD6462491A9664FF2962656A5F854
Validity
Not Before: Oct 27 08:29:05 2026 GMT
Not After : Nov 3 08:29:05 2026 GMT
Subject: CN=6ae060d1-88b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5e:3d:10:64:ac:e3:76:f2:6c:8a:6c:3d:1e:
ad:3e:ce:0e:0c:20:d5:a1:34:b8:d9:44:62:f7:80:
f0:5b:a2:8f:9e:e9:50:b4:f5:a0:33:24:f9:83:5f:
b9:c2:4c:8f:78:65:40:f5:81:23:54:2e:45:9f:23:
6c:e2:a3:ff:50:67:16:d6:fb:05:eb:2c:02:28:a9:
04:e9:c6:13:0d:d8:2b:61:a9:88:f7:90:6c:ff:fb:
04:d2:f2:21:e0:cc:ef:b0:29:5a:bc:31:90:a2:85:
a1:a1:67:cd:49:01:7a:cb:60:ab:08:7e:45:78:bc:
1c:5d:07:9c:f2:a5:cd:37:8f:04:7a:da:ec:75:4a:
89:0b:a1:34:ca:2a:42:2b:aa:d0:25:0f:50:ef:44:
2f:18:03:a9:44:23:e1:29:81:76:a9:0b:b5:27:76:
47:14:73:8d:6b:a0:42:48:69:c6:7d:ab:dd:32:ec:
a4:90:8a:7b:ae:97:92:61:37:3c:53:8f:f5:94:cd:
79:b6:53:7f:24:9d:ce:ff:cb:73:0a:15:89:eb:42:
8a:4a:9c:cf:2d:fb:d9:a1:e9:f9:7d:44:33:0f:67:
ca:c6:20:a0:53:5c:73:db:62:a2:bc:1b:ea:bd:98:
5f:7e:54:a8:84:84:78:0d:bb:43:a5:a2:a1:66:8a:
94:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:30:70:BA:E1:78:07:79:DD:C7:1A:0F:52:9A:87:5E:58:2A:C6:47
X509v3 Authority Key Identifier:
keyid:65:58:1F:9D:DC:ED:D6:46:24:91:A9:66:4F:F2:96:26:56:A5:F8:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVgfndzt1kYkkalmT_KWJlal-FQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:58:74:7e:e3:ed:29:c2:78:a3:d4:29:6a:1b:b1:ad:5d:3f:
12:89:aa:36:6b:08:ab:28:9c:29:b3:e4:9c:a7:8a:81:b4:5d:
ba:e3:6e:73:82:b3:a9:90:c7:e3:10:d6:b3:9f:02:c0:e9:9a:
45:93:f5:6c:a2:ed:3c:bc:e4:cd:b2:92:f3:67:e7:95:f7:37:
3f:59:95:d5:b6:dd:5f:cb:b0:f1:31:93:5d:8c:e3:b4:cc:ad:
d4:7f:21:ff:91:a1:b5:a5:81:ea:c5:aa:fa:48:a1:a0:9f:61:
d7:18:d1:5b:9c:cf:74:8a:44:c2:1c:91:69:0c:ff:58:85:18:
9e:aa:fc:6d:b5:3e:75:3c:e1:de:64:02:ca:85:ed:b9:16:56:
b3:bb:70:37:89:0d:c5:39:fa:17:37:c7:57:6e:6a:21:d8:e0:
67:6d:56:9c:7f:75:76:31:16:b9:f8:c8:12:40:65:11:5b:00:
13:98:cc:6b:04:0e:18:b7:d7:7b:30:7d:42:68:b1:fa:3d:ba:
9c:db:34:3b:3c:c9:d8:82:15:56:87:a2:2b:23:3c:bb:b8:df:
37:f9:7f:9f:d8:13:47:35:ba:05:29:a0:b3:09:e9:99:6d:a3:
a0:88:64:00:f2:e1:79:5b:1a:97:e5:43:36:6a:af:c2:48:f9:
cb:42:6c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:19:40 2026 by rpki-client