
$ rpki-client -vvf rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
File: czPiYYsz1lD-GNg_eCVFwj1PWp4.mft (raw, json)
Hash identifier: 9byveESCblUytg3PMfw7y0GAWxQzxO9wCmQJIt2JhIA=
Subject key identifier: B3:21:05:47:E7:F9:BD:66:6B:09:5C:E3:C3:C1:29:E6:82:D7:1F:B2
Authority key identifier: 73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E
Certificate issuer: /CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E
Certificate serial: 0D14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
Manifest number: 0D09
Signing time: Wed 20 May 2026 18:11:18 +0000
Manifest this update: Wed 20 May 2026 18:11:17 +0000
Manifest next update: Wed 27 May 2026 18:11:17 +0000
Files and hashes: 1: czPiYYsz1lD-GNg_eCVFwj1PWp4.crl (hash: KSkX9zznGnQua8g6geI5WdgC7zaQ1HS606MANxcv4ps=)
2: 0C1D4BF8038F11EA82150D4AC4F9AE02.roa (hash: P1ioyOhHYSe5vrV+nsOcBMRyefJ8DwpbFXIw1wGtzrQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl
rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 18:11:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3348 (0xd14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918098B, serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E
Validity
Not Before: May 20 18:11:17 2026 GMT
Not After : May 27 18:11:17 2026 GMT
Subject: CN=6a0df946-4741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:72:46:fe:76:c3:ff:1a:64:1d:29:bd:fa:fc:
96:ac:34:75:79:cb:ae:d5:23:62:33:8f:e7:e4:ae:
2f:7e:57:bd:c5:17:fe:1d:00:29:e9:1f:17:35:8e:
8c:3a:30:d1:c4:c5:75:01:a0:a6:f8:2d:08:e4:a5:
71:00:d8:50:75:b1:80:15:5b:5c:a0:50:f0:f4:c6:
51:47:52:f6:cd:ed:af:12:5b:67:57:4f:cd:43:da:
6d:9b:76:b1:8e:02:95:12:ab:06:08:82:f5:f4:5d:
3a:ea:83:d9:08:32:cb:dc:d4:e6:ee:7a:40:3e:2e:
44:74:c1:ff:f4:b6:0a:4b:d2:ed:e6:80:f6:2f:42:
c1:d8:2b:35:8f:6b:5f:8f:41:b8:08:00:5b:ec:80:
45:e6:22:45:0b:a8:2d:e5:77:3a:f1:13:ab:39:46:
f5:45:b2:c8:fd:b6:35:21:80:3e:8a:14:e4:16:40:
16:48:85:25:6b:73:52:fa:f0:9d:c8:4f:07:ab:ad:
b4:3d:31:e8:f0:15:34:c7:4e:4d:5e:d6:54:8d:3c:
21:dd:b4:4d:7e:52:e0:63:8c:cd:19:5c:41:19:03:
8f:90:8d:33:1b:6a:47:00:e7:4a:37:88:65:ee:dd:
4b:fa:05:07:4a:e3:8d:8f:a7:88:18:a2:4f:9a:92:
c3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:21:05:47:E7:F9:BD:66:6B:09:5C:E3:C3:C1:29:E6:82:D7:1F:B2
X509v3 Authority Key Identifier:
keyid:73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:00:14:3b:11:c3:31:61:72:84:d8:5e:96:68:63:f1:12:16:
83:6a:ec:57:45:2e:3b:3d:d5:ab:c2:d3:14:8b:7c:17:7e:ac:
b0:c1:bd:3d:4d:65:5a:b3:62:55:f9:b7:d9:67:cd:54:cf:16:
e4:eb:5a:c3:fe:13:11:47:0d:f9:4c:b5:ce:d7:15:e5:b0:fe:
48:10:de:06:c6:c4:12:06:e9:3b:4e:3d:f6:c5:86:e8:c9:b9:
ea:86:28:43:f8:59:1e:7e:43:0f:bb:a2:7a:b8:de:fe:aa:82:
b6:45:9b:ea:66:ea:73:2b:16:22:69:a2:6f:4b:12:86:d1:d7:
f7:40:c8:1b:55:2b:0a:0d:ea:b5:3d:86:e5:aa:e1:03:f3:4b:
8e:58:d8:7d:65:ce:da:fd:e1:86:1e:7d:8c:3c:14:3a:bc:49:
af:72:37:ee:24:e0:0d:84:1b:f4:95:d6:de:3c:81:9a:b5:c6:
0f:6a:67:56:c6:ee:14:ad:00:33:3f:33:53:80:2d:41:fb:b0:
23:47:f1:9b:eb:23:76:23:02:94:13:12:69:f6:73:ac:ac:20:
f8:05:91:41:d8:32:fb:1a:e6:d6:18:60:34:bd:6f:3f:1c:75:
c6:4a:a0:72:52:04:69:72:04:ca:98:d9:8c:5f:47:07:ba:1f:
d0:d0:23:18
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA5OEIxMTAvBgNVBAUTKDczMzNFMjYxOEIzM0Q2NTBGRTE4RDgzRjc4MjU0NUMy
M0Q0RjVBOUUwHhcNMjYwNTIwMTgxMTE3WhcNMjYwNTI3MTgxMTE3WjAYMRYwFAYD
VQQDEw02YTBkZjk0Ni00NzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi3JG/nbD/xpkHSm9+vyWrDR1ecuu1SNiM4/n5K4vfle9xRf+HQAp6R8XNY6M
OjDRxMV1AaCm+C0I5KVxANhQdbGAFVtcoFDw9MZRR1L2ze2vEltnV0/NQ9ptm3ax
jgKVEqsGCIL19F066oPZCDLL3NTm7npAPi5EdMH/9LYKS9Lt5oD2L0LB2Cs1j2tf
j0G4CABb7IBF5iJFC6gt5Xc68ROrOUb1RbLI/bY1IYA+ihTkFkAWSIUla3NS+vCd
yE8Hq620PTHo8BU0x05NXtZUjTwh3bRNflLgY4zNGVxBGQOPkI0zG2pHAOdKN4hl
7t1L+gUHSuONj6eIGKJPmpLDrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLMhBUfn
+b1mawlc48PBKeaC1x+yMB8GA1UdIwQYMBaAFHMz4mGLM9ZQ/hjYP3glRcI9T1qe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDk4Qi9BQ0RENDI1NDAz
OEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFsRC1HTmdfZUNWRndqMVBX
cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2N6UGlZWXN6MWxELUdOZ19lQ1ZGd2oxUFdwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDk4Qi9BQ0RENDI1NDAzOEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFs
RC1HTmdfZUNWRndqMVBXcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADgAUOxHDMWFyhNhelmhj8RIWg2rsV0UuOz3Vq8LTFIt8F36ssMG9PU1lWrNi
Vfm32WfNVM8W5Otaw/4TEUcN+Uy1ztcV5bD+SBDeBsbEEgbpO0499sWG6Mm56oYo
Q/hZHn5DD7uierje/qqCtkWb6mbqcysWImmib0sShtHX90DIG1UrCg3qtT2G5arh
A/NLjljYfWXO2v3hhh59jDwUOrxJr3I37iTgDYQb9JXW3jyBmrXGD2pnVsbuFK0A
Mz8zU4AtQfuwI0fxm+sjdiMClBMSafZzrKwg+AWRQdgy+xrm1hhgNL1vPxx1xkqg
clIEaXIEypjZjF9HB7of0NAjGA==
-----END CERTIFICATE-----
Generated at Thu May 21 10:54:40 2026 by rpki-client