
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
File: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft (raw, json)
Hash identifier: 4MPPsPXWRMkdJWV11qJOud9cCBGvg52egPyXYz1mPag=
Subject key identifier: 40:19:E0:E8:A5:4F:58:3C:3A:B2:23:65:81:E4:7A:DA:BF:46:27:1A
Authority key identifier: FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8
Certificate issuer: /CN=A914A8CB/serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8
Certificate serial: 1BF2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
Manifest number: 1BD8
Signing time: Mon 22 Jun 2026 16:13:01 +0000
Manifest this update: Mon 22 Jun 2026 16:13:00 +0000
Manifest next update: Mon 29 Jun 2026 16:13:00 +0000
Files and hashes: 1: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl (hash: EMIKZFOsPUuyLkrUpKd2mICsJ/70qtfWfCdkdR9+1Ug=)
2: 90C8D27021C211E786829418C4F9AE02.roa (hash: 6tLlav7T5aehzWc+XnkNI6MiVWdGYAaMzT2i5SR388w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl
rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 16:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7154 (0x1bf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A8CB, serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8
Validity
Not Before: Jun 22 16:13:00 2026 GMT
Not After : Jun 29 16:13:00 2026 GMT
Subject: CN=6a395f0c-5000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4a:f9:13:f7:f1:75:c5:ec:f5:c2:95:64:8b:
6a:9e:b7:18:f7:f0:2b:a6:3b:31:6f:84:31:9f:4c:
d8:56:2e:7a:07:f6:2a:3c:22:7a:dc:c6:e8:1b:fa:
5f:43:73:78:02:05:dd:29:f2:4b:7d:59:5a:8b:cb:
f0:03:45:ac:9a:80:e7:e8:bc:15:94:5b:de:7d:da:
cd:f2:7a:39:25:01:cd:87:fa:f7:bd:b1:cb:8e:49:
78:1b:51:d4:44:e3:93:89:58:84:e7:32:e2:64:88:
ba:46:aa:cb:55:32:53:fb:cd:20:61:e8:8e:0c:1a:
a0:42:ae:3d:76:9f:1f:a0:00:87:95:06:37:9c:0a:
16:88:02:c5:6d:45:9e:90:91:0c:19:72:e2:af:db:
06:e8:92:de:34:10:15:2d:46:7e:6e:41:05:68:4a:
21:a2:32:c2:f0:f9:03:3a:73:57:64:49:3a:9b:2f:
70:cc:06:ac:14:1e:f9:a5:a6:3e:4c:d2:b2:be:cb:
ae:30:f7:25:35:a5:fc:24:14:11:57:01:e0:61:63:
b9:6d:48:d8:33:f2:0c:d3:5c:fc:a1:c4:06:8b:40:
87:59:e7:85:ff:99:bf:01:ea:b6:60:c6:57:3c:16:
e5:75:fd:4f:a7:82:49:4b:81:8c:85:1d:16:33:9e:
f0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:19:E0:E8:A5:4F:58:3C:3A:B2:23:65:81:E4:7A:DA:BF:46:27:1A
X509v3 Authority Key Identifier:
keyid:FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:84:a0:b7:fe:c3:48:bc:23:64:62:c2:e3:88:68:01:f3:83:
b0:d4:27:17:be:39:6a:23:4c:83:df:77:02:ae:24:47:0d:22:
90:fe:76:66:0b:ee:22:89:ec:a0:77:c6:01:b2:2a:b1:39:c1:
46:19:7f:cc:cf:da:44:6f:63:60:35:37:b9:c8:8b:b2:cf:5c:
4a:31:5a:cd:8c:26:dd:81:47:dd:42:c7:76:73:1f:5b:0e:87:
c2:94:3b:b1:d9:5c:60:e2:79:20:3b:e9:cc:6c:77:bb:20:18:
c2:e2:06:11:a8:bd:b0:33:b9:4d:ba:95:dc:3a:16:21:5d:88:
02:cb:69:7e:23:33:d0:f1:0d:b3:42:68:f5:cb:01:7a:30:5b:
69:e1:1c:71:1c:58:cc:0f:de:33:3b:c1:fa:94:aa:6a:a5:fe:
e2:00:2e:90:3e:ca:6d:ff:a8:e3:2f:22:c7:7a:ae:05:e1:fb:
61:32:79:d5:11:9f:be:0f:ff:98:aa:1b:51:05:ad:88:f8:b4:
2a:a6:03:d9:e8:8a:7f:20:b7:00:04:c4:59:cc:4d:22:f2:8b:
2c:f7:e3:ec:cd:e5:ea:de:47:d1:7a:33:eb:34:89:5d:f9:6e:
a2:be:37:0a:1e:2a:fa:53:e1:6c:4b:71:e1:f6:c9:cf:09:55:
38:af:1e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:41:24 2026 by rpki-client