
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft
File: z3nGX0tVAQ-yXObEW4yRnbCToy0.mft (raw, json)
Hash identifier: 7zS8XfrB+Ex64A5aZs5zuIUzaP9jLWo17V9bk1r3vdE=
Subject key identifier: 3D:E3:EB:0F:78:2D:E8:6B:DD:7A:D4:4E:FC:B1:1F:EB:96:3E:7B:14
Authority key identifier: CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D
Certificate issuer: /CN=A912E87E/serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D
Certificate serial: 012C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft
Manifest number: 011F
Signing time: Wed 13 May 2026 05:56:19 +0000
Manifest this update: Wed 13 May 2026 05:56:18 +0000
Manifest next update: Wed 20 May 2026 05:56:18 +0000
Files and hashes: 1: z3nGX0tVAQ-yXObEW4yRnbCToy0.crl (hash: F+yZXw6tJT1XPY46hBezL+XiFhhnu6HwdMdEkAtqQbw=)
2: A48892E4DE4A11EFACE66748C4F9AE02.roa (hash: 6I64utdnK0TaFg9y+W+RqybL90K1jeQS5liIOPne5so=)
3: F2DF64BAD28511F0A20E5C80C4F9AE02.roa (hash: XjB5jPSTt3eJTKS4dRa9T7cx4SalbQsD8ABjmrgjNZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl
rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:56:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300 (0x12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E87E, serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D
Validity
Not Before: May 13 05:56:18 2026 GMT
Not After : May 20 05:56:18 2026 GMT
Subject: CN=6a041283-adbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:48:14:47:e0:18:25:8f:0c:4f:98:a5:fc:
4c:f0:06:1e:80:a2:86:22:6b:d1:c0:c6:2c:7a:83:
92:bf:ae:6c:38:26:8e:0c:96:35:90:2f:05:d4:ae:
bb:0a:9b:80:20:57:f2:24:0b:c6:7e:48:61:e8:5d:
bf:74:cc:32:0a:c8:95:df:51:dc:4a:14:d3:46:c1:
13:12:de:3a:12:72:62:4f:61:43:a5:13:0b:b3:be:
b8:04:50:61:36:c6:47:e6:4d:56:bd:88:ef:e5:42:
9d:4b:50:e8:d6:60:7f:6f:c0:77:84:e6:04:f8:62:
e6:ec:bb:06:de:51:06:2f:d4:e2:8d:8b:7f:f5:f3:
3e:22:80:cf:2c:a1:4d:18:e5:52:d9:5d:f8:d4:12:
31:a6:28:c8:26:f6:8a:67:31:eb:08:59:13:71:95:
8a:76:1d:15:87:13:cf:2b:f7:f1:88:6b:3d:08:a3:
57:c6:6d:81:46:f0:a1:79:1c:28:42:e5:7a:5a:70:
b5:d8:5b:a0:91:ce:a9:7f:9e:4f:07:dd:7f:a2:e1:
a8:59:cf:77:fa:8e:6e:bb:32:fd:25:fd:38:6b:e6:
2a:26:29:69:40:15:e9:05:0b:11:69:50:c6:8b:5e:
82:56:4a:24:57:15:3c:89:ca:3f:f4:4a:ac:0e:8e:
d5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E3:EB:0F:78:2D:E8:6B:DD:7A:D4:4E:FC:B1:1F:EB:96:3E:7B:14
X509v3 Authority Key Identifier:
keyid:CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:91:27:84:98:05:f7:f4:89:61:57:2e:1b:d0:22:15:2b:a1:
ff:30:64:cf:eb:09:df:d8:a8:e7:1e:2c:66:d9:37:51:e8:35:
69:bb:23:f0:bc:df:9b:a2:7d:28:fe:09:63:1a:cb:81:97:3f:
18:bc:2c:63:b4:7f:a0:f2:1c:e0:17:22:5c:fd:0e:56:e2:ea:
b4:39:c7:3c:31:d7:87:02:89:40:e5:29:96:5f:f2:36:a5:ef:
f0:57:4f:16:ad:31:1e:06:78:ff:39:04:12:c3:25:78:2a:54:
00:9d:92:d1:10:89:67:49:8e:16:17:1f:9c:e4:89:46:f8:a5:
5d:b8:a0:52:2a:37:c3:ae:21:cf:8b:f2:c6:c7:0c:ec:8a:9c:
0f:48:e0:df:d2:b5:85:08:2e:7b:2d:c2:23:55:37:26:2c:f4:
ff:4f:e0:3d:ca:3e:d7:e9:a3:0a:da:dc:7e:66:e7:34:eb:38:
28:41:74:8f:59:7e:41:86:2a:cb:af:27:2c:3c:67:c2:e0:90:
a4:69:7f:c9:19:9c:56:ad:a5:fd:74:3d:c9:eb:a4:65:15:7d:
82:e4:f6:f4:96:c8:0d:9b:58:88:ba:00:a5:cc:03:75:3d:22:
9c:ba:d8:f2:a2:ef:a6:3c:6c:fa:cb:81:54:4f:89:81:35:86:
86:19:78:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:03:26 2026 by rpki-client