
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
File: PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft (raw, json)
Hash identifier: zgpiwpdfmCjf6yHC8QqH3vv7cHioy4QcOv8wvHON6ww=
Subject key identifier: E1:05:1D:5C:37:2A:36:50:7A:5E:09:DD:70:5A:5F:78:BB:A6:F1:DC
Authority key identifier: 3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC
Certificate issuer: /CN=A9140A8F/serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
Certificate serial: 0844
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
Manifest number: 0828
Signing time: Fri 12 Jun 2026 21:09:36 +0000
Manifest this update: Fri 12 Jun 2026 21:09:35 +0000
Manifest next update: Fri 19 Jun 2026 21:09:35 +0000
Files and hashes: 1: PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl (hash: AU+no7Ig32JxwSIa/qMNVoLoRI8iISvzakR3YHbGEwU=)
2: 20322C32233F11EB9E4D160EC4F9AE02.roa (hash: EZxaNB8Cg1CajysGL+HI5uVaed24iixfpfYF8glfmow=)
3: ED8E5BC8CFD411EBA3172446C4F9AE02.roa (hash: uC8BC8FOfX07Bz7LL4CTmAUAe/spoS+Jn5Z7MYh3ovQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl
rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:09:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2116 (0x844)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140A8F, serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
Validity
Not Before: Jun 12 21:09:35 2026 GMT
Not After : Jun 19 21:09:35 2026 GMT
Subject: CN=6a2c7590-1fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2a:a6:84:64:f3:0b:13:a3:15:e8:f4:9c:6c:
5d:a0:41:4f:df:5f:a4:19:43:0f:96:f0:bd:74:57:
4e:71:f6:0e:4f:d8:1c:cb:f7:9e:37:55:54:87:41:
23:b1:af:77:75:8d:c2:96:50:29:6c:0a:d1:12:6e:
fd:2d:68:62:2e:49:e9:e9:b6:3e:7a:be:00:77:e5:
8e:b5:a6:80:27:e2:b1:b8:a5:15:43:40:a1:8e:3a:
9d:ea:7a:cb:ed:06:18:d8:e2:16:4e:43:7f:f2:e6:
4e:17:f1:e9:12:63:89:58:15:3b:8f:99:a6:38:34:
2d:b5:68:7e:5f:5c:d0:21:54:77:12:d5:0f:a9:87:
4f:e2:22:cd:fa:cc:c0:bd:58:52:8b:28:7f:fc:8d:
6e:47:12:d1:d7:87:9c:a2:f2:f3:ec:01:73:d2:c8:
f9:58:76:21:55:cb:27:ad:a6:3f:87:30:fa:bd:0e:
35:b0:51:a1:90:aa:b5:f4:2a:68:af:d2:6e:8c:e9:
95:d6:c9:4d:70:95:f0:fb:69:95:e0:70:91:ba:6a:
43:b5:39:da:5f:b8:10:a9:68:e9:0f:8d:e2:56:b1:
ad:b9:fc:26:14:e5:c5:fa:2a:ce:17:83:a2:86:cc:
77:25:e9:54:7a:d2:ec:b8:9e:97:cf:95:de:ea:dc:
25:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:05:1D:5C:37:2A:36:50:7A:5E:09:DD:70:5A:5F:78:BB:A6:F1:DC
X509v3 Authority Key Identifier:
keyid:3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:88:ce:fc:fd:eb:31:d5:8d:b4:73:79:65:84:d1:ac:bc:06:
f3:f6:86:7c:42:54:ed:a8:da:f2:89:1c:e0:9a:fa:96:fa:a2:
4f:69:9e:40:9f:4b:89:d2:ae:4b:9e:7e:fa:4d:89:91:f1:84:
4c:1c:83:81:84:f7:e1:29:b4:e8:af:e3:50:56:b4:88:88:cb:
0e:10:65:38:d6:17:b5:68:c9:36:20:30:2d:86:9c:9f:a9:f2:
3b:85:f5:88:f0:b3:52:41:ed:a7:78:d1:53:3c:74:84:4e:fa:
70:df:db:2b:6c:56:a6:ef:4b:67:a3:73:5f:dd:02:92:1f:d3:
1b:b5:3a:16:8d:ee:1a:f4:87:7e:f9:9f:40:59:8c:4e:10:06:
58:55:92:0b:fd:33:f5:35:b2:3f:34:46:cc:22:21:ff:ec:0a:
2b:3f:40:c5:8c:d9:d0:56:7a:6a:c3:dd:19:08:2d:b4:c9:bd:
61:6d:3f:06:b0:b2:70:c3:ee:de:80:b3:ca:fb:59:0f:1f:f4:
a7:5c:fd:53:06:56:01:9e:f1:43:34:b4:b1:68:72:39:6f:4e:
13:7e:d8:33:97:f5:e5:37:3c:6b:92:78:e9:0a:33:ca:4b:c3:
ce:ea:32:eb:1b:3e:9c:4d:7f:40:b8:eb:cc:9f:05:46:d4:ab:
dc:6a:b6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:09:18 2026 by rpki-client