
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
File: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft (raw, json)
Hash identifier: MsYmRxIw3qBLFWrWQSDKTX2IS4c6j4ZaMaBFDkjL9z8=
Subject key identifier: 66:82:A2:84:56:A5:7D:1E:08:5D:2E:87:02:45:57:E9:F6:D6:67:8D
Authority key identifier: FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8
Certificate issuer: /CN=A914A8CB/serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8
Certificate serial: 1BDD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
Manifest number: 1BC3
Signing time: Tue 12 May 2026 16:15:14 +0000
Manifest this update: Tue 12 May 2026 16:15:13 +0000
Manifest next update: Tue 19 May 2026 16:15:13 +0000
Files and hashes: 1: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl (hash: 9wGj0aRyku6NlZ9AkTbIxvG8CaUz4VGphhPuzoptz5w=)
2: 90C8D27021C211E786829418C4F9AE02.roa (hash: 6tLlav7T5aehzWc+XnkNI6MiVWdGYAaMzT2i5SR388w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl
rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7133 (0x1bdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A8CB, serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8
Validity
Not Before: May 12 16:15:13 2026 GMT
Not After : May 19 16:15:13 2026 GMT
Subject: CN=6a035212-7b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:f5:21:48:0a:11:ae:37:55:fe:22:95:77:
dc:1e:d1:3a:cd:41:d0:47:25:0a:2c:04:0f:b3:a3:
47:9c:be:e7:43:cb:89:9c:eb:16:ab:e6:42:9d:3d:
b2:c3:a0:a5:ad:d2:40:b4:be:18:7a:10:63:35:f3:
ab:16:0f:00:22:13:52:d8:a4:46:a2:0e:d5:65:ed:
a9:eb:f5:a2:b0:aa:42:dc:ed:cd:a2:53:fb:25:32:
ab:99:da:bb:eb:ec:86:73:20:0b:10:39:95:40:59:
80:1e:41:a7:c1:5f:e7:ab:a3:cb:bc:55:5f:25:2b:
b6:14:44:1a:2f:13:09:5a:71:33:6f:c6:d1:19:88:
21:84:6a:e1:4b:bc:1a:34:04:0a:61:de:e6:ce:16:
36:8b:b4:88:a8:a4:27:d3:e8:28:c8:f5:6b:1f:47:
ae:91:cd:5a:29:8c:e7:43:4c:20:35:4e:82:e2:ad:
81:f0:df:a0:7e:32:ca:ad:4e:e2:43:45:92:04:1e:
81:78:ea:34:70:98:10:0a:60:33:e4:f8:00:39:d8:
1f:6f:53:09:a2:bc:59:f9:25:fb:3f:a7:b9:f3:91:
38:0c:bf:40:84:24:21:6a:6b:45:02:24:fd:9d:a3:
6b:48:3c:b9:da:08:39:62:82:4a:51:94:90:f5:d7:
26:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:82:A2:84:56:A5:7D:1E:08:5D:2E:87:02:45:57:E9:F6:D6:67:8D
X509v3 Authority Key Identifier:
keyid:FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c0:d7:0e:a9:86:ad:42:54:78:83:d3:6b:2d:bf:4a:1e:fb:
6d:65:04:b4:fb:83:08:79:01:1b:ba:d0:b8:4d:d9:ab:35:cb:
b1:d0:0a:57:f5:c2:91:1d:37:3b:f3:fb:8c:20:3a:b7:46:53:
36:52:f5:e1:f2:04:33:81:5a:b8:48:52:ba:05:49:56:e8:41:
0e:31:88:8c:d0:48:69:7d:14:8f:e3:b7:91:46:e5:95:79:2c:
45:8c:ca:ee:ee:8c:b5:34:00:54:a9:b7:99:c8:e2:83:c1:58:
36:21:5e:89:1c:02:a7:a3:c8:eb:2e:75:72:cd:5b:30:ef:10:
6b:2e:ce:64:6f:0b:bf:2b:71:a0:df:95:0c:b7:ed:de:a0:fa:
60:25:d9:d0:f2:b3:fd:98:5b:af:c7:4c:13:17:82:fd:d7:2d:
c9:26:55:26:33:a1:3f:80:3d:5f:af:9a:d3:41:18:7b:d0:4e:
4e:35:8a:57:8d:2b:32:7f:f7:95:e5:23:3d:c3:d5:29:05:73:
32:c1:4a:98:3d:f0:c8:59:f6:29:d4:a6:da:df:46:58:85:b1:
57:a1:cf:24:ab:25:a7:28:d3:6b:76:71:de:83:d8:de:46:b3:
4d:e9:b5:fd:60:71:a3:66:22:cf:f7:83:e5:27:40:5a:2d:8f:
c8:49:19:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:30:10 2026 by rpki-client