
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
File: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft (raw, json)
Hash identifier: 3XzeofQCFoIgQ8VEjp7hbV2D1zBEvFIx2AwgC+RnkUs=
Subject key identifier: A9:B9:13:D8:29:B5:B1:A1:3D:9C:B9:D7:34:E2:DD:0A:F9:E8:5B:CF
Authority key identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A
Certificate issuer: /CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A
Certificate serial: 063A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
Manifest number: 062A
Signing time: Sun 02 Aug 2026 23:17:43 +0000
Manifest this update: Sun 02 Aug 2026 23:17:42 +0000
Manifest next update: Sun 09 Aug 2026 23:17:42 +0000
Files and hashes: 1: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl (hash: qVdKeqrydwvO+jc/deoasajciNDUDOxS/JH94gDZgDs=)
2: 63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa (hash: DwFRC5Q8naeDAzyAtmNxc5ykjCbZ/7NV7SU48cPZy64=)
3: 64720824EF6611EB9A7EFE0EC4F9AE02.roa (hash: LL0n4MdM8xP/nWYSFwrtL/Mk/fArB+tqMpKJaeazPNc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl
rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Aug 2026 23:17:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1594 (0x63a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E0B2, serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A
Validity
Not Before: Aug 2 23:17:42 2026 GMT
Not After : Aug 9 23:17:42 2026 GMT
Subject: CN=6a6fd016-98eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:99:89:ff:63:38:a9:24:ed:64:fe:2e:90:
f5:ec:3b:d3:25:f5:e6:bb:39:ac:01:a2:65:07:27:
f9:bb:82:e6:92:af:40:36:10:16:49:e4:33:9e:8f:
72:6c:d1:5f:2d:1d:30:32:f5:3e:b7:74:95:43:a3:
ad:5f:07:a4:9a:8b:50:32:b4:f9:fd:88:35:92:8e:
53:76:d3:81:f7:e4:86:0d:dc:57:08:cd:60:20:0d:
68:04:f9:63:d6:d9:0e:7a:24:59:79:41:78:56:3a:
d1:5f:f8:f5:de:3a:04:44:10:2d:1e:66:87:64:a1:
fc:d3:93:cf:80:9f:dc:a4:43:7e:54:44:2d:f7:87:
c1:4c:a9:49:74:f6:9f:c6:8f:f9:2a:72:0a:d2:e4:
07:88:41:ea:08:4d:a2:7f:fe:3f:a4:02:e3:ae:ae:
51:b4:35:2c:d4:2d:37:ca:cd:5f:b6:09:5d:ca:26:
bf:a8:a9:fb:20:71:a4:4d:b5:68:ce:e0:fb:81:1e:
2e:65:6b:f1:e6:6b:dd:eb:77:93:6c:a8:66:e2:a1:
9c:6f:e4:42:a8:00:5b:b4:5e:06:b3:7c:3e:f3:de:
84:fa:98:8d:5b:da:9f:e2:b1:2c:49:dc:30:5d:08:
d5:d8:62:2a:ee:d8:e2:71:54:55:66:e0:ad:d4:1a:
65:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B9:13:D8:29:B5:B1:A1:3D:9C:B9:D7:34:E2:DD:0A:F9:E8:5B:CF
X509v3 Authority Key Identifier:
keyid:0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:0c:2b:5a:1a:97:2d:85:38:7b:1b:e0:6f:b5:2e:ef:ea:1c:
c3:e1:19:b0:93:9f:27:81:1b:fe:61:34:b9:90:f2:5b:d5:f5:
b4:55:6e:3e:53:d7:c0:09:95:6d:31:99:78:a7:62:a3:e9:69:
11:b6:2e:2b:7f:64:2d:9c:b3:f1:d3:b8:6d:e3:25:6d:9d:37:
77:e0:37:d7:86:cb:1b:10:11:1b:3f:8b:d1:bb:e7:46:95:76:
4b:88:c1:23:79:9f:7c:f7:5b:fd:cf:72:69:2d:d0:c1:8c:09:
70:dd:29:6b:4e:74:a5:e7:78:ab:d6:da:2b:90:f3:cf:c7:a7:
0c:03:c1:18:da:54:ab:44:1b:66:30:c6:b4:93:53:4f:be:9e:
75:b5:7d:2f:c1:39:6b:52:a1:0d:45:d2:80:03:8f:8f:82:68:
28:f9:df:ed:54:d3:40:f9:c6:07:20:2c:9c:52:4c:1d:68:43:
5b:d7:15:e4:74:19:cf:54:14:3d:2d:65:f0:a2:41:e9:8c:10:
22:c5:b2:63:87:d3:2b:16:f2:f7:6f:5b:a6:c7:0d:6d:f4:24:
86:d4:56:47:0c:9f:91:cf:8d:f6:30:a7:cc:90:f5:85:98:fd:
6d:51:66:8e:32:22:df:8f:6e:c0:7c:bf:3e:ae:9e:16:74:a7:
d1:ed:f8:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEUwQjIxMTAvBgNVBAUTKDBCM0VCQTg4RjFBREExQTFCNTA4OTFCMjY1MzFBM0U3
MDlCRjY1OUEwHhcNMjYwODAyMjMxNzQyWhcNMjYwODA5MjMxNzQyWjAYMRYwFAYD
VQQDEw02YTZmZDAxNi05OGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuBGZif9jOKkk7WT+LpD17DvTJfXmuzmsAaJlByf5u4Lmkq9ANhAWSeQzno9y
bNFfLR0wMvU+t3SVQ6OtXwekmotQMrT5/Yg1ko5TdtOB9+SGDdxXCM1gIA1oBPlj
1tkOeiRZeUF4VjrRX/j13joERBAtHmaHZKH805PPgJ/cpEN+VEQt94fBTKlJdPaf
xo/5KnIK0uQHiEHqCE2if/4/pALjrq5RtDUs1C03ys1ftgldyia/qKn7IHGkTbVo
zuD7gR4uZWvx5mvd63eTbKhm4qGcb+RCqABbtF4Gs3w+896E+piNW9qf4rEsSdww
XQjV2GIq7tjicVRVZuCt1BplawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKm5E9gp
tbGhPZy51zTi3Qr56FvPMB8GA1UdIwQYMBaAFAs+uojxraGhtQiRsmUxo+cJv2Wa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTBCMi82NzA0MkMxOEVG
NjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9hRzFDSkd5WlRHajV3bV9a
Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0N6NjZpUEd0b2FHMUNKR3laVEdqNXdtX1paby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTBCMi82NzA0MkMxOEVGNjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9h
RzFDSkd5WlRHajV3bV9aWm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIgwrWhqXLYU4exvgb7Uu7+ocw+EZsJOfJ4Eb/mE0uZDyW9X1tFVuPlPXwAmV
bTGZeKdio+lpEbYuK39kLZyz8dO4beMlbZ03d+A314bLGxARGz+L0bvnRpV2S4jB
I3mffPdb/c9yaS3QwYwJcN0pa050ped4q9baK5Dzz8enDAPBGNpUq0QbZjDGtJNT
T76edbV9L8E5a1KhDUXSgAOPj4JoKPnf7VTTQPnGByAsnFJMHWhDW9cV5HQZz1QU
PS1l8KJB6YwQIsWyY4fTKxby929bpscNbfQkhtRWRwyfkc+N9jCnzJD1hZj9bVFm
jjIi349uwHy/Pq6eFnSn0e34qg==
-----END CERTIFICATE-----
Generated at Tue Aug 4 22:56:50 2026 by rpki-client