
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
File: r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft (raw, json)
Hash identifier: 9yJJSG6i1SRFrnC5iFAUFLzyg9iU5dGteSbCHRQ3OXw=
Subject key identifier: 15:DB:CD:15:4E:19:F4:F0:47:13:BC:12:D8:87:BD:08:4A:6C:15:2E
Authority key identifier: AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6
Certificate issuer: /CN=A912F1CA/serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
Certificate serial: A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
Manifest number: 9B
Signing time: Thu 23 Jul 2026 09:19:29 +0000
Manifest this update: Thu 23 Jul 2026 09:19:28 +0000
Manifest next update: Thu 30 Jul 2026 09:19:28 +0000
Files and hashes: 1: r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl (hash: qDwz42QrpS0ys3vk+mxmmch6MzK++nT8Fzw185oJyK4=)
2: 2E4F17E2AB5E11F087B3A63DC4F9AE02.roa (hash: Cn7vfzmjy06xdvrZ5nmmboVajIyo3gJm1O3bt7lM1ik=)
3: 3DA866FACE8E11F0B0195B54C4F9AE02.roa (hash: sHZWg+rU11rfUXJ4Q8l6qWY6glFT+3CM23A66tmDljo=)
4: 2DC89280AB5E11F087B3A63DC4F9AE02.roa (hash: OWRTx8KpVw3aAexIAQhAzl19KW5AxihgsszlMUbzCIw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl
rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F1CA, serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
Validity
Not Before: Jul 23 09:19:28 2026 GMT
Not After : Jul 30 09:19:28 2026 GMT
Subject: CN=6a61dca0-0094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c3:c3:a2:18:93:bf:16:e5:6a:7e:0f:57:83:
33:bd:ca:a5:09:5f:da:69:1d:ef:4f:93:0b:d6:14:
4a:ec:a4:63:af:10:79:51:c6:f6:b3:8a:b4:35:b5:
21:11:83:a4:0b:28:e6:a7:e7:7b:47:a3:e3:82:52:
b9:79:18:8a:ed:18:50:ab:d0:8c:15:a7:21:3e:9d:
c5:75:37:20:7c:c7:21:6a:05:f0:a8:8d:55:25:00:
51:0d:a3:69:43:61:80:5e:ab:56:09:e3:75:0d:26:
ab:65:be:03:00:b6:32:ab:fd:02:be:76:79:9b:37:
0f:63:54:93:ff:f1:53:45:2c:16:68:5b:4c:63:36:
0e:31:51:26:82:c2:6e:e5:be:9c:99:e3:e1:4b:74:
3e:98:b7:8e:c7:e5:f0:18:5b:ec:d2:a3:7d:d7:96:
c7:22:9c:83:35:76:68:b3:87:ad:20:78:68:90:94:
1e:a8:52:13:97:0b:e9:35:5a:52:68:c7:11:c8:9f:
a1:71:94:cd:c0:a7:04:5f:cd:47:1f:bc:ea:9f:ab:
83:48:b2:c4:35:74:d8:4d:c7:26:5f:73:cf:87:81:
55:f3:fd:ca:b3:9f:94:bc:9c:4c:1d:9d:49:18:d6:
7b:e2:e9:b1:cb:86:c2:0c:59:0d:aa:6e:56:69:dd:
2e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DB:CD:15:4E:19:F4:F0:47:13:BC:12:D8:87:BD:08:4A:6C:15:2E
X509v3 Authority Key Identifier:
keyid:AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:b6:6b:fa:ea:77:3e:93:6e:49:1a:4c:11:0b:48:77:1d:c8:
99:a9:c2:85:e9:b5:db:dd:c9:83:3c:13:1a:b3:cf:74:80:25:
e5:23:49:31:36:cf:f1:50:4a:b3:70:16:31:25:17:a4:cf:57:
28:02:84:6e:cf:7e:18:7b:70:f2:5e:ed:82:19:4b:5e:04:8f:
33:df:44:43:74:31:7e:0e:23:9f:b5:16:6d:8a:f1:d5:fb:b9:
25:2d:db:55:e8:38:7f:fe:05:21:fc:f6:6b:9c:4d:ae:d1:83:
7e:03:c7:58:af:45:55:50:51:e6:3a:60:f1:3f:08:21:62:04:
da:ac:2d:cf:3c:c6:85:dc:c6:b9:4e:e9:22:94:11:07:ec:63:
6b:cf:6c:39:14:03:68:77:7f:c1:0a:8a:49:85:fe:a0:43:fb:
d9:bb:d0:14:40:77:b4:62:5e:5b:2b:69:dd:e9:4c:1c:05:86:
77:67:f4:23:79:12:bf:90:e1:76:5f:af:cb:32:bc:e9:12:87:
78:26:bf:e2:09:55:c7:b1:b0:2d:1f:99:62:f4:d2:fc:45:e5:
94:4b:3c:26:f7:53:58:cf:ce:81:69:af:f8:bd:5a:cb:6e:82:
04:32:47:51:19:49:70:60:1a:7d:c0:40:d7:2d:81:8f:63:a7:
f2:1e:ef:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkYxQ0ExMTAvBgNVBAUTKEFGOENEQ0U2RUQ0Mjc3RUNGQjBGREE4ODJBRDQ3NDky
REU4NThGQjYwHhcNMjYwNzIzMDkxOTI4WhcNMjYwNzMwMDkxOTI4WjAYMRYwFAYD
VQQDEw02YTYxZGNhMC0wMDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzcPDohiTvxblan4PV4MzvcqlCV/aaR3vT5ML1hRK7KRjrxB5Ucb2s4q0NbUh
EYOkCyjmp+d7R6PjglK5eRiK7RhQq9CMFachPp3FdTcgfMchagXwqI1VJQBRDaNp
Q2GAXqtWCeN1DSarZb4DALYyq/0CvnZ5mzcPY1ST//FTRSwWaFtMYzYOMVEmgsJu
5b6cmePhS3Q+mLeOx+XwGFvs0qN915bHIpyDNXZos4etIHhokJQeqFITlwvpNVpS
aMcRyJ+hcZTNwKcEX81HH7zqn6uDSLLENXTYTccmX3PPh4FV8/3Ks5+UvJxMHZ1J
GNZ74umxy4bCDFkNqm5Wad0uKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBXbzRVO
GfTwRxO8EtiHvQhKbBUuMB8GA1UdIwQYMBaAFK+M3ObtQnfs+w/aiCrUdJLehY+2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjFDQS8yREY1QkI4MEFC
MzAxMUYwOEZDMEM5NDhDNEY5QUUwMi9yNHpjNXUxQ2QtejdEOXFJS3RSMGt0NkZq
N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3I0emM1dTFDZC16N0Q5cUlLdFIwa3Q2Rmo3WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RjFDQS8yREY1QkI4MEFCMzAxMUYwOEZDMEM5NDhDNEY5QUUwMi9yNHpjNXUxQ2Qt
ejdEOXFJS3RSMGt0NkZqN1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmbZr+up3PpNuSRpMEQtIdx3ImanChem1293JgzwTGrPPdIAl5SNJMTbP8VBK
s3AWMSUXpM9XKAKEbs9+GHtw8l7tghlLXgSPM99EQ3Qxfg4jn7UWbYrx1fu5JS3b
Veg4f/4FIfz2a5xNrtGDfgPHWK9FVVBR5jpg8T8IIWIE2qwtzzzGhdzGuU7pIpQR
B+xja89sORQDaHd/wQqKSYX+oEP72bvQFEB3tGJeWytp3elMHAWGd2f0I3kSv5Dh
dl+vyzK86RKHeCa/4glVx7GwLR+ZYvTS/EXllEs8JvdTWM/OgWmv+L1ay26CBDJH
URlJcGAafcBA1y2Bj2On8h7vaQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:04:53 2026 by rpki-client