
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
File: _zNBly3YofaHHt6Gmjod2SUorrY.mft (raw, json)
Hash identifier: OATLZkphUbhiMpkG0L4dvnWJSpRQ/GVsVq5+miMadtI=
Subject key identifier: 36:1D:D4:95:05:FF:64:12:BD:93:98:48:82:4C:56:B6:5C:22:87:64
Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
Certificate issuer: /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
Certificate serial: 0E3C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
Manifest number: 0D94
Signing time: Wed 10 Jun 2026 16:48:22 +0000
Manifest this update: Wed 10 Jun 2026 16:48:22 +0000
Manifest next update: Wed 17 Jun 2026 16:48:22 +0000
Files and hashes: 1: _zNBly3YofaHHt6Gmjod2SUorrY.crl (hash: e/8JFGXI76XFqbbf9Mi2APngqqrrxzhzKnOtvuo3fc0=)
2: CCFA7454F04611F087BCEF76546F56BC.roa (hash: HCXtiXKgHVhMpaTnQurvVC//OqVn5AKyKkMTKhQsmjM=)
3: F4A77A06CED911ED9BC69385C4F9AE02.roa (hash: /3UCOZyy7IRWOhuU35PtgiVAbTlyg5NR99z+gedGo9I=)
4: 69FDEAC6645511EFB98C143DC4F9AE02.roa (hash: 8GqLPEK+8+LiDMs6TXQYM/u72383yuqkd4BLQepKcQg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl
rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 16:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3644 (0xe3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
Validity
Not Before: Jun 10 16:48:22 2026 GMT
Not After : Jun 17 16:48:22 2026 GMT
Subject: CN=6a299556-a413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d1:34:00:33:d6:d2:ac:5b:d3:fd:26:5c:fb:
5f:d4:b6:86:81:e9:d8:bc:ea:8f:67:1a:80:0b:2a:
df:45:05:05:97:25:d1:62:93:85:78:bf:af:1d:39:
d2:e2:df:95:e4:61:46:46:77:ec:2c:6c:59:a0:ec:
af:6d:31:6a:ed:48:13:ff:c8:da:95:c6:3d:6d:0c:
89:15:da:47:1d:22:7d:fe:cb:9f:66:2c:84:0e:97:
db:2d:ae:e6:2e:2c:96:38:49:7f:f4:65:89:96:eb:
8e:d4:0e:52:0c:58:2f:8b:3a:6d:3b:b2:78:b8:0a:
5b:a0:05:d9:78:b7:90:d8:ab:68:19:5f:fc:65:44:
dc:79:c7:f4:fc:c9:eb:c8:0b:f4:7e:21:70:b1:5d:
c6:0f:d2:19:fc:9e:a4:a1:2c:96:1a:21:ff:19:d9:
21:50:0b:29:19:6d:37:c1:bc:74:67:f0:d4:e5:2c:
ff:19:18:94:e8:20:c5:89:be:9e:fa:70:d0:cc:00:
61:e5:93:3c:b1:6e:96:d1:22:dd:af:44:fa:23:9c:
99:96:85:fc:21:30:df:fa:f0:33:c4:49:d9:b0:a7:
14:bf:d2:c7:65:fb:b7:d4:3b:37:2d:48:fd:97:9d:
96:e1:b2:7c:71:cc:51:f2:28:1a:d7:93:b6:28:f0:
91:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1D:D4:95:05:FF:64:12:BD:93:98:48:82:4C:56:B6:5C:22:87:64
X509v3 Authority Key Identifier:
keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:73:ff:ca:db:e9:ad:ac:ed:59:4e:41:c0:8b:6d:fe:69:bf:
4a:0b:f4:f3:49:e7:db:fa:2c:87:06:87:61:3a:6f:b1:57:db:
80:ab:86:ed:70:49:10:d6:9d:7c:5e:33:f0:64:b3:81:f6:e7:
e0:c3:c7:9c:b7:95:ea:15:e3:54:74:cb:6c:8b:6e:bb:04:fe:
9f:10:fc:a3:03:23:f9:26:69:05:01:51:b4:38:71:1f:fa:57:
69:68:9b:e1:00:e9:ec:82:3c:0f:c3:da:44:e5:94:e3:73:ae:
da:76:2d:bb:d6:71:c7:49:fe:38:60:0b:49:21:03:83:5b:00:
7c:fd:5e:ab:f0:a3:8c:80:15:25:7e:a7:56:a6:00:d0:6e:c7:
38:f7:85:69:14:18:72:c3:16:7d:22:bc:f7:96:0a:28:91:8a:
1d:61:24:3f:4b:b4:f7:0c:7f:73:75:8c:e4:bd:5a:68:38:93:
ec:57:4f:d4:2c:6f:be:e1:de:ce:3d:e2:f1:5b:e1:d0:2e:6e:
3a:98:a3:cc:ea:c1:16:a1:09:a1:ef:f1:80:5f:31:4a:a0:20:
e9:91:f6:2a:8f:33:e4:ab:66:41:44:03:fc:1f:a6:ca:ac:7c:
da:95:86:55:1b:8f:6b:f2:fb:fa:1b:64:9a:ca:72:0c:e1:fb:
b1:e6:44:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:13:46 2026 by rpki-client