
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft
File: zURUsk4_99x1y76Rm92nnEe5Xqc.mft (raw, json)
Hash identifier: 2CogPrselZUbpMUmokW5ROEgDH4SG+5tjmwh+ZldYlw=
Subject key identifier: 6E:00:D4:CA:42:0B:8A:F0:7A:BC:D5:63:28:0F:25:0B:55:77:21:6F
Authority key identifier: CD:44:54:B2:4E:3F:F7:DC:75:CB:BE:91:9B:DD:A7:9C:47:B9:5E:A7
Certificate issuer: /CN=A9172999/serialNumber=CD4454B24E3FF7DC75CBBE919BDDA79C47B95EA7
Certificate serial: 2C
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft
Manifest number: 2A
Signing time: Mon 27 Jul 2026 01:58:16 +0000
Manifest this update: Mon 27 Jul 2026 01:58:16 +0000
Manifest next update: Mon 03 Aug 2026 01:58:16 +0000
Files and hashes: 1: zURUsk4_99x1y76Rm92nnEe5Xqc.crl (hash: tycqYl2itMUg9pUEMspl3N90SzTZqJPQC2416nvoqGY=)
2: A53F1E96647311F1BC2A35D47947A888.roa (hash: aWkLi47uIb9GIJOKXHkRTH7Cyo2StRxOnkwZBq2MqlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.crl
rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172999, serialNumber=CD4454B24E3FF7DC75CBBE919BDDA79C47B95EA7
Validity
Not Before: Jul 27 01:58:16 2026 GMT
Not After : Aug 3 01:58:16 2026 GMT
Subject: CN=6a66bb38-b494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:08:68:36:6b:14:3f:92:b2:41:ed:51:09:83:
b8:93:78:a4:be:46:da:71:bd:08:91:be:04:3e:02:
b3:62:15:cf:f4:40:fd:4a:be:7f:72:d3:25:51:8c:
0b:e7:61:8e:19:48:9c:63:fd:19:a1:49:e9:91:e4:
fb:c0:cf:05:e5:4c:11:60:cf:ec:69:52:ab:e8:78:
b1:9d:a4:43:53:4a:f9:e7:2e:4e:7d:2d:e2:1c:7a:
c9:4e:75:3f:74:d7:df:f6:0a:19:a3:e5:35:6d:4b:
74:6a:66:16:64:97:0d:3b:54:39:a9:9b:91:aa:ec:
ff:fc:6e:de:d6:a1:bc:49:75:8d:71:57:6c:2f:78:
6c:05:58:01:d7:b1:39:c6:65:b6:72:91:d0:4d:97:
f8:69:43:b0:12:11:72:ee:8c:58:81:b9:2a:dd:8c:
fc:82:2e:ba:42:02:80:cc:ee:75:37:48:01:c6:a0:
30:3a:77:b2:13:e2:19:10:ec:b7:71:3d:1a:4a:00:
25:c1:12:e1:6c:b9:14:31:a7:cb:26:47:96:dd:db:
b9:a9:09:6c:c7:d4:ea:99:65:24:4b:0e:f1:c2:c3:
de:f9:76:61:83:4c:e5:0e:c7:ba:32:20:46:5e:a1:
10:ce:12:a4:50:d2:1d:b7:19:2e:af:80:0f:c8:f0:
c0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:00:D4:CA:42:0B:8A:F0:7A:BC:D5:63:28:0F:25:0B:55:77:21:6F
X509v3 Authority Key Identifier:
keyid:CD:44:54:B2:4E:3F:F7:DC:75:CB:BE:91:9B:DD:A7:9C:47:B9:5E:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:d8:b7:69:f8:6e:48:0f:ff:fb:c9:92:b2:66:25:81:06:bd:
a6:8b:c4:47:db:fa:c9:90:f1:43:08:ca:f4:6b:9f:e4:ec:02:
4a:cb:c9:d3:48:34:37:df:ac:95:c5:82:74:1d:6e:ba:15:12:
f9:11:00:37:bf:90:4a:15:6c:6c:fd:83:da:5a:52:3f:2b:b5:
d9:03:9f:04:25:cb:9c:27:39:cb:cd:3a:23:08:11:fb:f0:f9:
84:73:05:97:94:a8:65:25:83:45:4a:57:19:5c:48:41:59:44:
54:69:af:7c:c8:e9:c8:bf:0f:69:1e:d3:cb:03:54:61:67:a0:
37:25:db:41:6c:1b:35:d8:ee:2b:4c:4c:1f:b8:f6:40:03:5d:
de:9b:8e:ba:be:de:7c:04:42:38:bd:57:a4:d2:ad:e3:c2:ad:
00:0a:fa:ef:b1:32:23:b5:22:36:c9:16:ed:b7:ae:6b:17:53:
25:34:4f:0d:23:61:dd:4e:85:43:e5:b9:d5:c1:da:e6:47:5e:
56:70:da:ca:9c:74:bb:40:fa:3b:f1:cb:36:fc:ce:49:b7:b1:
f1:f3:b4:29:9b:52:ec:64:5a:72:e9:a9:3f:b0:76:06:f4:df:
f3:b7:18:66:fc:ef:f1:53:e0:b7:8b:a8:65:71:a1:f7:7d:e8:
b9:7c:61:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:00:24 2026 by rpki-client