
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
File: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft (raw, json)
Hash identifier: TnchpnJKjy6pAmtNzMnGWOL6FfBYI1MajBuPRG1o6xA=
Subject key identifier: 75:64:9E:5D:87:4E:76:41:54:7D:AB:BE:CA:2C:5C:E2:6F:82:BA:66
Authority key identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A
Certificate issuer: /CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A
Certificate serial: 0621
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
Manifest number: 0611
Signing time: Sun 14 Jun 2026 22:52:27 +0000
Manifest this update: Sun 14 Jun 2026 22:52:26 +0000
Manifest next update: Sun 21 Jun 2026 22:52:26 +0000
Files and hashes: 1: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl (hash: s1h37jFvydwCMzc6USeFL+fMdUglzIDduXMO4yzNUcQ=)
2: 64720824EF6611EB9A7EFE0EC4F9AE02.roa (hash: LL0n4MdM8xP/nWYSFwrtL/Mk/fArB+tqMpKJaeazPNc=)
3: 63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa (hash: DwFRC5Q8naeDAzyAtmNxc5ykjCbZ/7NV7SU48cPZy64=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl
rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 22:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1569 (0x621)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E0B2, serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A
Validity
Not Before: Jun 14 22:52:26 2026 GMT
Not After : Jun 21 22:52:26 2026 GMT
Subject: CN=6a2f30aa-ec34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:45:7b:55:17:87:ba:67:9b:51:dc:fd:0c:a3:
db:41:a1:cf:a9:51:b4:b3:d6:e9:65:80:fb:d7:30:
7e:38:19:4b:99:1a:0c:01:41:9f:22:8e:07:05:ed:
95:80:fc:22:e7:18:8a:b1:69:39:72:12:f0:5e:f9:
89:7f:f5:83:4e:4c:59:0b:65:3a:d5:06:97:d2:f4:
78:ac:f5:37:e1:fd:49:6a:82:ea:6f:5b:fe:e1:7d:
5b:f0:72:9b:e6:8c:e2:85:29:84:1e:90:51:a0:c8:
91:8f:7d:3d:ad:53:0b:7a:9e:7f:7f:bf:71:29:ea:
90:14:68:da:e9:42:e7:68:b3:bf:d9:a8:06:11:c9:
a4:3b:c6:28:53:73:cd:6d:fb:4e:ba:8b:3d:fc:a0:
3c:3b:9e:ec:fe:49:8d:a7:c2:34:f5:6a:90:79:5a:
cf:2c:37:ad:e1:c5:48:78:91:83:98:0d:f0:db:80:
e9:91:e9:5c:74:fc:3d:4e:a7:fa:be:76:96:58:f6:
b9:db:5f:d6:fa:23:92:da:9f:a9:bb:6d:64:58:89:
6e:00:ae:f5:56:76:ed:0b:20:31:89:fc:71:ce:c7:
cf:d3:59:a1:04:91:10:fc:ce:dc:20:8f:9c:03:23:
2e:d0:2b:3d:29:ab:dd:65:54:03:e2:36:31:bc:41:
14:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:64:9E:5D:87:4E:76:41:54:7D:AB:BE:CA:2C:5C:E2:6F:82:BA:66
X509v3 Authority Key Identifier:
keyid:0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:9e:7a:02:c5:48:51:f2:9c:54:27:33:a8:a2:f9:5d:67:35:
ec:10:60:23:6f:f9:fe:42:71:03:5c:cd:cf:0e:02:a9:5f:ef:
47:20:ad:2e:1a:6f:0a:19:4d:4c:2b:32:a5:af:93:b5:60:ad:
6e:b6:00:78:1b:16:6d:73:93:00:f9:ff:8f:0c:34:a7:1c:60:
c1:cc:11:97:75:32:d9:da:37:55:28:bc:ac:9c:77:69:97:5e:
cf:c6:1b:b4:5a:98:9b:f0:77:36:c6:a9:04:3b:3e:c0:c0:10:
f9:9a:a6:13:5b:65:36:8e:e2:46:ab:d9:03:55:40:9b:da:b9:
53:f9:6e:67:03:45:de:5f:b1:f6:1b:87:09:08:29:09:9d:c1:
44:50:c6:93:1e:92:60:46:02:f5:40:45:43:e0:1c:ce:fc:68:
93:be:37:a2:bc:b5:88:fd:b3:23:f5:49:1e:52:d7:8e:85:3c:
2f:66:a1:a9:45:74:e7:77:db:63:ae:fe:03:bb:9b:2b:e7:17:
12:ed:cd:75:78:cc:bc:08:c5:3b:cd:01:1a:a6:39:70:63:fb:
c4:cf:ce:13:47:37:22:c7:95:a3:af:da:c4:13:af:52:30:fd:
46:de:02:19:50:42:a6:1e:68:78:76:cd:64:a7:88:9a:8d:33:
1f:bd:00:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 14:47:47 2026 by rpki-client