
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
File: PzsvWzuuUqa1aSyvkqJVSwbahj0.mft (raw, json)
Hash identifier: iFkBu6c0lsTJ0oQi3jD7MWNX2QFEv1Sx2kNQPneOpXY=
Subject key identifier: 6E:0D:86:BD:7C:69:F5:2F:F5:51:49:A7:A7:F5:84:86:0B:03:84:99
Authority key identifier: 3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D
Certificate issuer: /CN=A917C81C/serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
Certificate serial: 05EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
Manifest number: 05E3
Signing time: Wed 20 May 2026 23:03:20 +0000
Manifest this update: Wed 20 May 2026 23:03:20 +0000
Manifest next update: Wed 27 May 2026 23:03:20 +0000
Files and hashes: 1: PzsvWzuuUqa1aSyvkqJVSwbahj0.crl (hash: pmnUkMIBH708GurVawnEdICPfEiU60cLuXoZ6YvvkUE=)
2: EC7B7E82DFD811F08F00FF64536F56BC.roa (hash: GBcRPAk26rh6dyuaJcennk1M9baT+ZU2RXBW85It44s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl
rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1516 (0x5ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C81C, serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
Validity
Not Before: May 20 23:03:20 2026 GMT
Not After : May 27 23:03:20 2026 GMT
Subject: CN=6a0e3db8-9f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e5:09:7f:50:8e:2f:99:33:d4:ca:75:30:c6:
42:16:89:26:6e:4d:6b:84:95:76:18:ba:3b:91:ab:
fb:36:c0:51:c1:ac:ed:98:27:23:d1:12:d9:89:2a:
e4:bc:a3:a4:93:f0:eb:f0:be:24:ac:b3:23:aa:0e:
2c:ab:90:6b:05:a8:db:da:a1:5e:73:88:df:6a:a7:
bd:9f:00:07:20:b8:bf:c5:19:4e:93:89:ee:cc:46:
dc:78:34:3e:d4:de:c9:6b:0b:36:c8:52:dd:3b:b5:
3f:74:8c:9d:c1:0f:e8:7d:70:64:4a:83:97:bc:45:
66:16:22:d3:11:33:d1:fc:8e:bd:b1:95:37:b5:4e:
ad:32:9f:5d:3d:0e:fe:a9:a7:14:62:50:06:88:e4:
38:68:b0:b9:53:50:8c:c8:57:78:42:7a:c1:67:35:
7a:5e:6f:97:51:55:80:c0:63:04:e1:67:90:a7:2b:
0a:24:52:24:7f:61:f1:21:0d:50:92:ec:41:bc:de:
f5:79:e7:6f:90:9d:6b:9a:bf:df:81:33:2a:2a:40:
93:22:c6:a1:2b:d2:08:30:23:ad:1c:7d:c8:09:71:
13:c2:ff:81:cf:00:bc:be:a8:39:5d:54:db:53:9d:
7a:b4:8a:ce:c9:3f:d2:70:b7:9d:5f:19:26:fc:5e:
d4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0D:86:BD:7C:69:F5:2F:F5:51:49:A7:A7:F5:84:86:0B:03:84:99
X509v3 Authority Key Identifier:
keyid:3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:6a:7c:44:e5:df:00:0b:43:90:37:6c:87:c9:3f:c0:ef:21:
28:ba:49:10:04:7a:5d:51:ad:5e:0f:76:4e:99:68:20:8d:cb:
5e:41:d5:96:cf:18:f7:4e:1e:76:d5:b6:a5:22:08:2c:dd:58:
9b:7f:9f:23:b6:4a:84:06:2a:94:44:53:85:45:41:07:94:06:
02:24:a5:da:1d:ee:44:a7:76:6b:70:fc:f6:99:1a:cd:2f:6a:
e7:b1:17:43:18:f4:19:09:f3:83:30:82:9f:39:71:4d:75:f4:
79:34:c9:44:7f:cb:b4:05:1c:01:88:b1:32:45:d7:bd:31:ae:
c1:43:c0:b8:49:e4:4a:46:ae:45:73:3d:3c:43:6e:43:d3:aa:
1f:cd:69:a5:0f:42:f7:48:0a:a2:74:60:c0:f3:c7:98:dd:53:
78:86:72:c5:c2:a2:2f:27:85:31:f9:b4:9b:23:b5:99:bc:3e:
c4:b8:8c:7f:c0:d4:21:f9:9d:ab:59:63:5e:91:83:92:52:b2:
8f:e1:6f:bc:f5:76:88:a9:0e:57:4e:a3:23:a1:cc:e0:ab:93:
51:ff:b9:4f:7c:ef:49:32:d5:83:84:00:5a:f8:c0:08:27:df:
fe:d4:ae:44:be:e1:77:27:57:7b:29:2a:b5:44:1c:42:a6:af:
b2:4f:54:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:39 2026 by rpki-client