
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft
File: zmNwmX29E9IOXsYWW1qe46KCprA.mft (raw, json)
Hash identifier: 3GJ3UheDy0By3wo7OwiMFHC3SoeSaofydPFHQGsXSGc=
Subject key identifier: A9:96:3D:4E:6E:57:80:32:6A:63:C1:17:5C:FE:DA:CF:7B:E2:D8:EE
Authority key identifier: CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0
Certificate issuer: /CN=A917ACA8/serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0
Certificate serial: 0201
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft
Manifest number: 01F1
Signing time: Mon 27 Jul 2026 05:06:08 +0000
Manifest this update: Mon 27 Jul 2026 05:06:07 +0000
Manifest next update: Mon 03 Aug 2026 05:06:07 +0000
Files and hashes: 1: zmNwmX29E9IOXsYWW1qe46KCprA.crl (hash: Ck9xoQI44uVig10akcjFI1iJkHlyY7HdDOR9C+xvyNM=)
2: CC389424E71D11F0959F3B7B706F56BC.roa (hash: ViUTH93Gp8AyO1ZPVD0Xv7OzlXm6aJc97Z4QEzfdTJ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl
rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513 (0x201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ACA8, serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0
Validity
Not Before: Jul 27 05:06:07 2026 GMT
Not After : Aug 3 05:06:07 2026 GMT
Subject: CN=6a66e740-f44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:38:3c:2b:ea:87:23:d5:41:bd:36:ff:27:c9:
9e:36:29:2b:9b:46:4e:a6:dd:15:bc:14:d4:4b:79:
07:3b:86:96:01:5b:ca:89:be:22:ba:1d:9a:6c:a9:
7b:65:ea:50:46:f2:7c:96:ee:31:17:ec:8f:43:6f:
88:7a:32:89:a1:62:df:c3:94:e7:c5:fa:15:95:5f:
25:30:63:35:c3:ac:30:47:78:4d:b3:6a:ff:a8:f1:
02:3d:aa:9f:84:6d:f2:3a:7b:a4:e7:74:5b:d1:9e:
e8:5c:f1:0c:7a:f1:1d:35:e3:e4:89:a9:1d:68:82:
2f:7a:d5:b5:18:36:fd:c5:54:38:d6:f7:d0:11:9e:
34:16:17:07:04:ae:bd:e9:4d:de:30:7c:04:45:d1:
5a:e4:ac:f0:ab:96:39:e4:2c:6d:41:4c:e4:d1:a3:
5c:aa:7f:22:98:63:df:c2:9b:21:30:d2:db:e3:ac:
37:36:68:ee:13:9f:9f:79:b0:2e:99:95:a5:59:a4:
51:4e:0f:82:44:98:86:b3:d5:49:48:c1:e3:46:00:
66:ef:43:81:e8:42:37:14:c2:f5:1a:ee:6f:58:c3:
8a:37:b6:0b:8c:01:fb:71:05:3f:79:96:be:32:b1:
fc:6b:2a:47:9c:fc:3d:c2:bd:f6:31:b8:0f:18:67:
23:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:96:3D:4E:6E:57:80:32:6A:63:C1:17:5C:FE:DA:CF:7B:E2:D8:EE
X509v3 Authority Key Identifier:
keyid:CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:29:7f:fa:d6:d2:63:8e:2a:60:4d:49:24:6d:de:16:f7:84:
e0:94:9c:ea:3c:c1:6a:1d:52:62:0b:95:89:b2:17:ed:bd:6d:
f7:ed:0c:52:52:9a:5a:23:ea:2f:bc:c8:78:7e:03:50:71:f0:
a9:bf:ab:dc:f9:f3:ef:77:5a:b6:e2:37:87:39:90:bf:01:13:
36:a8:41:34:5f:c6:cd:f3:18:02:80:dc:a3:1f:61:56:cf:ee:
08:63:81:ac:f4:92:a6:b4:c8:49:5e:bd:99:5d:6a:81:e6:b0:
80:d5:d2:f0:c5:bd:f9:c3:4d:2b:33:5e:65:c1:b3:48:1f:79:
84:dd:ef:26:73:32:7e:fd:d4:67:32:e2:88:e5:d5:03:9f:6b:
c9:13:d7:a3:94:63:6d:4d:9a:31:10:f8:5a:c9:d0:53:ac:3d:
7e:8f:1f:c9:d5:f7:47:c9:89:07:0b:aa:68:ac:e2:b5:67:91:
77:fe:e7:80:91:06:ad:22:21:e1:12:88:17:ef:7a:10:82:12:
74:8e:85:34:33:f0:13:2d:00:4b:b3:00:dd:15:5e:ab:e9:b6:
67:3e:45:87:9b:a8:0b:a0:30:d6:32:cc:50:32:06:6c:bb:cc:
0a:0e:0c:7e:a9:28:13:d4:9f:c5:14:da:0f:73:45:fc:33:0f:
03:97:60:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:35:36 2026 by rpki-client