
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
File: CZJdtntKud9gBue9K8HY7cjMfhk.mft (raw, json)
Hash identifier: y4T0dBgpQcyRNG1QvWq0PSVcy8ou1xzHEoyz1mrqmUY=
Subject key identifier: CD:D6:5C:21:A0:29:11:B9:44:AC:FE:28:B3:EE:E3:50:60:C2:D3:B3
Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
Certificate issuer: /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Certificate serial: 0C22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
Manifest number: 0BF4
Signing time: Wed 22 Jul 2026 19:13:58 +0000
Manifest this update: Wed 22 Jul 2026 19:13:57 +0000
Manifest next update: Wed 29 Jul 2026 19:13:57 +0000
Files and hashes: 1: CZJdtntKud9gBue9K8HY7cjMfhk.crl (hash: 08ngsqPaBeRW0mAhR0BLMbOlbriyjgtjUrZ5ChxO0is=)
2: 6932258C2F1C11EDA3E29B09C4F9AE02.roa (hash: 53LWwpRVZrDTw/6Ogh5Ek7qxm98TR8hKYo+nI3Iokbw=)
3: B23294C079DB11F191EADDAD63A30FBC.roa (hash: SFZvdt6UQ0ZxOBmTem6qPhZ0NzjnAbq88lfVuRLHYkM=)
4: CB926A64E58711F0B2CA0EBF446F56BC.roa (hash: 8Zv5MMAKEdi89aa0T4smQVaAo99bnl+ZMZOEdaQmF7Y=)
5: C43C22501DEF11F1B60466D9163D8C67.roa (hash: xsIr4KFI9a9YHG0N66oMLWH8AurLcb1F9zQyd9fncF4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:13:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3106 (0xc22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Validity
Not Before: Jul 22 19:13:57 2026 GMT
Not After : Jul 29 19:13:57 2026 GMT
Subject: CN=6a611676-d24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:39:23:3b:0a:b6:ce:f1:1c:00:e6:74:a2:b8:
fd:08:ba:59:06:11:d5:3f:31:ad:c1:c4:bc:10:28:
7d:bf:d5:12:47:33:43:00:6f:7c:15:a5:03:19:f0:
f7:d3:08:f1:6a:7c:46:d3:df:c9:36:3b:6e:5d:87:
87:8a:fe:c1:a9:f6:d6:5e:cd:f7:8f:56:d5:6a:ba:
87:68:fc:c5:e8:97:bb:75:0d:55:2f:43:b5:83:2a:
62:50:67:f5:bb:57:82:74:02:ba:50:e8:80:39:e7:
de:e6:cd:41:64:50:db:9f:e4:04:df:a8:7e:5c:6e:
4c:63:e7:1a:8e:fd:1d:69:c0:5a:41:ad:88:37:55:
a2:2e:65:8f:7d:b7:15:75:ea:91:d6:78:01:26:1c:
bc:2d:5c:8b:0c:ec:db:4f:0b:2d:d0:3b:55:15:63:
b2:41:47:91:42:17:33:50:33:3f:9e:41:58:6e:a9:
3d:88:68:9c:ce:c2:ff:38:80:4d:46:ca:73:d0:1d:
cc:12:41:31:2b:b9:76:28:3a:cb:db:5a:d2:a0:58:
bd:f0:5e:92:e7:58:f4:d8:1b:51:8d:fc:57:c6:2c:
29:14:c5:aa:6a:d1:ac:ba:af:4e:3e:a8:54:fc:6b:
bb:78:2c:28:b9:2e:f2:ef:75:02:6c:34:92:0e:ee:
27:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D6:5C:21:A0:29:11:B9:44:AC:FE:28:B3:EE:E3:50:60:C2:D3:B3
X509v3 Authority Key Identifier:
keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:f5:11:1d:11:82:ba:68:b7:21:03:50:87:0d:a4:27:ff:2a:
f0:46:d4:42:39:c8:80:c7:c5:06:45:36:25:b2:3b:e3:98:28:
61:30:95:a9:a3:a9:87:5b:1c:98:4a:e7:4a:00:6a:9b:48:a9:
51:69:99:f4:be:54:4f:f2:5f:f1:58:d1:37:0e:76:e9:47:1c:
f2:3c:f3:53:44:32:f2:f6:32:5a:25:30:6f:32:76:26:ae:19:
39:7e:8c:a6:83:0c:15:7f:8f:a1:2d:fb:7b:a8:20:46:16:db:
8a:1a:67:ef:23:f0:b9:67:ea:ab:27:b2:ac:07:8e:df:02:a0:
14:80:e0:d5:e4:4c:74:d1:f1:aa:c6:ef:5f:63:08:76:b6:49:
4b:54:8f:b9:45:b6:b4:6a:80:ad:e6:9e:2a:d6:dd:f7:ca:b8:
f7:0b:73:c3:13:2a:94:c0:70:96:2b:24:e8:79:2e:31:b3:67:
1e:a5:16:d0:1d:c4:a3:ee:20:9b:e4:47:00:07:57:99:07:df:
2c:d6:5a:21:de:86:41:20:f8:b9:be:6c:9b:b0:07:56:f7:ed:
4c:c8:a0:35:94:36:32:1f:79:da:89:38:7f:76:59:a4:36:89:
a6:de:4e:a1:8c:d3:23:1c:37:be:62:5a:20:5a:52:52:a9:f4:
aa:6c:6c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:50:08 2026 by rpki-client