
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
File: zUt2FunCVC_hBdTxTq4yFljUSzs.mft (raw, json)
Hash identifier: QGfdM/RIC6JgWDt4GN7vHMC4OqsJIWqKF9GPbqfL7XM=
Subject key identifier: 70:9E:AE:3E:E9:AF:9D:86:36:F2:1C:B3:DD:99:61:8B:5B:88:E7:64
Authority key identifier: CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B
Certificate issuer: /CN=A9141974/serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B
Certificate serial: 0D6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
Manifest number: 0D63
Signing time: Wed 20 May 2026 17:58:52 +0000
Manifest this update: Wed 20 May 2026 17:58:52 +0000
Manifest next update: Wed 27 May 2026 17:58:52 +0000
Files and hashes: 1: zUt2FunCVC_hBdTxTq4yFljUSzs.crl (hash: IK60U3kxZ+Q5w+9nj+EgCIAHLAhQTAC5ZiBri4RuyrM=)
2: DD53E3B8F0B511E98108C962C4F9AE02.roa (hash: yMGWSYKZJih8aQL2gVilfSresOlgwuqSCV4043Vk2h8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl
rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 17:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3436 (0xd6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141974, serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B
Validity
Not Before: May 20 17:58:52 2026 GMT
Not After : May 27 17:58:52 2026 GMT
Subject: CN=6a0df65c-6bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a3:3b:60:1f:c1:1b:66:78:1e:ec:d0:37:a7:
e3:77:e8:45:5c:98:3b:c0:68:6a:64:71:1e:06:eb:
0f:22:79:f8:0e:f2:60:4f:d2:e4:e9:9a:fe:98:ce:
fc:3c:02:53:4b:0e:12:48:9d:0a:82:ce:ab:c1:24:
47:d5:1b:9e:da:07:8b:71:d7:4d:7f:90:ae:07:44:
9c:79:b2:87:9a:d3:ed:13:85:b2:9b:50:03:5d:37:
c3:a0:3e:85:a7:90:5c:4a:7c:c4:f6:32:00:ab:0f:
11:12:3d:92:13:bc:e2:15:4e:13:04:b7:bd:31:39:
2d:ff:8e:0e:bd:79:7b:36:59:e5:ab:19:2f:45:1a:
19:bc:5f:9c:4e:c6:df:2e:6f:4a:63:11:b3:27:53:
fc:de:b7:62:a6:80:4f:fd:68:cb:7f:2f:ea:b8:d7:
26:1d:67:c9:2c:15:ed:09:78:16:4a:01:eb:17:05:
08:0a:b8:00:65:ff:28:8a:c6:12:30:66:7f:68:62:
bb:c5:a4:e1:2f:cc:4d:5a:7d:64:30:18:20:f5:22:
a8:10:d5:70:f1:f6:e6:9c:95:89:79:d1:93:3f:3f:
d2:c2:42:a5:01:ac:60:44:1b:f3:26:68:18:35:07:
01:e6:58:0e:6a:d2:84:3b:da:63:9a:f8:b7:49:f5:
6f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9E:AE:3E:E9:AF:9D:86:36:F2:1C:B3:DD:99:61:8B:5B:88:E7:64
X509v3 Authority Key Identifier:
keyid:CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:53:1d:5c:3b:e2:3a:44:bc:0c:ec:ff:19:da:bc:af:bc:c0:
43:d0:1d:c0:b1:6a:cc:2b:a2:bd:e5:14:4e:22:a1:c2:2e:3c:
20:2e:11:a3:a0:0b:07:e2:7a:43:68:13:3c:ca:8c:d7:d1:98:
08:e6:ea:fe:af:71:46:94:78:92:e5:a0:62:cc:b7:89:33:ab:
ac:e5:90:7f:e3:bf:00:e5:2d:88:2d:a2:04:cb:78:68:71:ef:
70:d0:f4:08:c0:9c:ae:1b:5a:d1:0e:ff:b5:ed:ec:86:df:6a:
24:85:2b:02:ed:ff:6b:7a:4b:69:45:f3:74:d4:9f:a3:4f:fa:
09:c2:11:c5:6f:bd:06:27:00:18:f3:4d:22:df:14:c9:ee:fb:
eb:ac:ed:57:d5:f7:6c:43:7a:7e:93:21:7f:c8:18:46:a4:c1:
b6:ef:d0:38:db:5b:b7:cf:72:ad:69:a0:c7:67:0a:3f:d3:32:
7e:27:e4:34:a1:be:af:e4:eb:1d:d7:58:97:35:bd:a8:66:ea:
ee:33:b7:9e:fc:7c:7e:30:6d:11:06:cd:5f:26:4a:56:a3:10:
cf:ed:39:8b:ba:36:af:0e:ca:90:83:4f:9e:ce:53:20:c6:c4:
e0:20:1c:44:7c:a1:c8:9c:93:bb:01:12:cf:23:61:98:34:08:
15:18:b8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:35:39 2026 by rpki-client