
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
File: CZJdtntKud9gBue9K8HY7cjMfhk.mft (raw, json)
Hash identifier: BN5X9WFD/ikIEic6GfyYKmDGGd3Y1KqfnZA+m368OqE=
Subject key identifier: F1:75:B7:56:0C:0A:08:5E:94:61:AB:C4:CB:05:FE:96:D8:AC:EC:02
Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
Certificate issuer: /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Certificate serial: 0BEF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
Manifest number: 0BCB
Signing time: Tue 12 May 2026 19:00:56 +0000
Manifest this update: Tue 12 May 2026 19:00:55 +0000
Manifest next update: Tue 19 May 2026 19:00:55 +0000
Files and hashes: 1: CZJdtntKud9gBue9K8HY7cjMfhk.crl (hash: ZZSfKLmUI4yi9hxdJ3H0sKxNfzvhOb1/mjaEVCHpk1k=)
2: 6932258C2F1C11EDA3E29B09C4F9AE02.roa (hash: 53LWwpRVZrDTw/6Ogh5Ek7qxm98TR8hKYo+nI3Iokbw=)
3: 4580DDDEEA0A11F09D7A92E76F6F56BC.roa (hash: dP56HqiOS0iPtAVucNZ2wR/KoNuwl+rRD4b0wwXFjDs=)
4: 44942606EA0A11F09D7A92E76F6F56BC.roa (hash: EeLJby/8EluYAUfNa1xVSHc8kon4tRGoZL1/tkyFn7k=)
5: CB926A64E58711F0B2CA0EBF446F56BC.roa (hash: 8Zv5MMAKEdi89aa0T4smQVaAo99bnl+ZMZOEdaQmF7Y=)
6: 450DDD84EA0A11F09D7A92E76F6F56BC.roa (hash: kJnM7EoAenCH3PCIlTPoGD0IpncArPRKG0ulKlcXT+o=)
7: C43C22501DEF11F1B60466D9163D8C67.roa (hash: xsIr4KFI9a9YHG0N66oMLWH8AurLcb1F9zQyd9fncF4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3055 (0xbef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Validity
Not Before: May 12 19:00:55 2026 GMT
Not After : May 19 19:00:55 2026 GMT
Subject: CN=6a0378e7-504b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8f:80:fb:3c:8f:20:ea:fc:a8:8b:c5:03:90:
69:65:0e:dd:77:07:f4:1c:04:68:59:f0:c9:7d:a7:
b1:51:14:a0:f1:9d:f4:ff:e9:22:4e:06:70:ec:c4:
7d:4f:e4:f2:ef:81:a5:ea:00:d6:4a:fe:d2:cb:68:
0f:97:21:61:7c:4b:ac:c3:70:8b:8f:43:be:dd:9f:
30:17:14:74:f8:cd:3d:7a:f7:b6:bd:c1:1a:d3:d2:
91:7a:e8:86:af:dc:37:d6:ab:aa:38:b3:7b:01:4e:
b6:2c:66:d3:8a:0f:9d:1e:18:d8:31:90:17:7f:73:
65:d4:20:8b:5a:55:a1:78:f4:60:3a:4e:df:33:45:
4c:6f:92:15:36:2b:4f:c2:fa:06:87:44:bc:98:14:
f6:1f:32:ca:ea:a7:28:69:22:b7:0a:65:63:47:a9:
24:ab:bf:10:c9:f3:72:1f:45:d1:a7:9e:83:d7:77:
1a:65:34:e6:c7:cb:b5:fc:05:87:f0:bc:a5:2d:27:
ae:92:f4:84:6d:d7:b3:d0:b7:b2:f3:cc:2c:b2:cf:
dc:84:60:f8:c1:a2:98:f6:60:29:4d:2b:8d:64:cf:
39:d3:2c:fd:b2:19:14:03:24:e6:2c:42:4d:15:9c:
55:88:aa:92:e0:d9:06:5b:94:e8:1a:44:ca:66:a6:
dc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:75:B7:56:0C:0A:08:5E:94:61:AB:C4:CB:05:FE:96:D8:AC:EC:02
X509v3 Authority Key Identifier:
keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f6:9f:72:da:25:4c:f0:29:10:91:cd:63:e0:87:1f:79:90:
c6:d9:56:cc:82:9e:78:ba:d2:ea:ff:b2:44:b0:94:a9:aa:17:
fb:31:42:3f:d5:99:15:46:9a:4e:04:6d:28:16:37:c4:f2:08:
c0:d3:dd:75:5a:0d:0b:6f:f8:00:1b:db:b8:be:df:04:53:4e:
c5:16:06:74:4a:a0:fa:ca:51:09:ed:2e:0c:53:09:ff:71:8e:
c4:64:0a:1f:cd:67:22:b0:9a:d9:7e:b6:fc:da:33:03:e4:dc:
0f:a5:e4:44:4a:ad:19:0a:48:e1:8c:03:2b:48:a1:e9:84:cb:
8f:42:48:1f:1f:5f:bf:29:a1:ab:54:53:b6:2c:08:5b:92:08:
a0:06:08:80:80:f9:dc:8f:68:d4:c6:05:1b:84:50:f5:1d:69:
db:ac:73:27:00:2e:cd:95:d6:e7:38:44:a4:32:82:18:63:b1:
b4:97:94:ff:71:92:9d:15:ed:88:93:d1:e4:d2:73:47:59:9b:
20:fc:5c:ee:cd:65:ac:03:d3:c3:d1:d3:f1:cb:bb:6b:21:7e:
6c:39:a7:9e:fa:93:a1:32:96:86:81:76:48:42:e5:f7:92:f2:
b8:dc:e2:2f:6e:0d:8e:d1:be:fa:96:3d:1d:89:37:04:45:db:
e0:3f:03:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:03:05 2026 by rpki-client