
$ rpki-client -vvf rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
File: Z0fEVgFDfWEgWyv7QGfO0i6358E.mft (raw, json)
Hash identifier: s0a6UEFr1YU+FEx12NYudAs1sVHqWe8TMubpxjgUVJE=
Subject key identifier: 78:12:43:09:D5:E7:13:10:0A:1C:37:4F:40:EC:E8:43:65:31:F1:38
Authority key identifier: 67:47:C4:56:01:43:7D:61:20:5B:2B:FB:40:67:CE:D2:2E:B7:E7:C1
Certificate issuer: /CN=A914AA99/serialNumber=6747C45601437D61205B2BFB4067CED22EB7E7C1
Certificate serial: 62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0fEVgFDfWEgWyv7QGfO0i6358E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
Manifest number: 5F
Signing time: Mon 11 May 2026 08:12:13 +0000
Manifest this update: Mon 11 May 2026 08:12:13 +0000
Manifest next update: Mon 18 May 2026 08:12:13 +0000
Files and hashes: 1: Z0fEVgFDfWEgWyv7QGfO0i6358E.crl (hash: F22aGK0gsy6vIkdqe8UeufO9Y6Kcs0vbqkwE4jdTtf8=)
2: 734D9ACCC2D711F09CE49A22C4F9AE02.roa (hash: oYZWWWudX6hmiWeAE8vtLuoPPfGME7k5YKBNL4ygl9s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.crl
rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0fEVgFDfWEgWyv7QGfO0i6358E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:12:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914AA99, serialNumber=6747C45601437D61205B2BFB4067CED22EB7E7C1
Validity
Not Before: May 11 08:12:13 2026 GMT
Not After : May 18 08:12:13 2026 GMT
Subject: CN=6a018f5d-0da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e9:dc:c9:e8:be:da:22:8c:24:88:57:5f:cb:
42:96:7f:15:70:cf:5a:54:0a:af:18:87:da:e0:8d:
89:7c:ed:3d:4f:33:c8:43:2b:48:8d:2e:e4:fd:da:
6f:ad:e3:a2:cc:b2:1d:11:78:4b:8b:8e:88:f8:22:
3c:b5:31:b3:00:5a:53:96:b6:c7:f3:fe:c5:7e:53:
a6:50:52:7d:67:fc:5f:2a:55:7a:c4:52:05:ee:bd:
5b:97:e3:91:f3:c3:51:42:84:71:5e:67:6d:d8:ac:
d9:34:fd:a5:32:f4:70:95:6f:37:b3:52:fb:9f:f8:
b8:44:51:c4:bd:da:55:35:d2:39:d9:a5:23:81:36:
eb:66:f0:78:a9:0e:8a:41:a1:8e:15:8d:ed:46:86:
5c:10:76:75:93:db:70:15:5b:92:33:f6:f6:d8:b4:
5c:b3:39:f8:81:a2:f2:a8:ba:29:7f:cd:ae:9b:d2:
51:94:1f:a9:4e:82:04:7c:84:71:4c:69:4d:0b:ec:
c4:c3:f2:7b:9a:bb:39:fc:fe:c5:88:b2:72:44:c6:
c5:2c:1f:67:e7:63:7b:54:47:7e:dc:ac:51:c7:a2:
b2:bb:2e:12:d8:63:58:c2:22:69:6a:e3:b1:78:51:
de:94:38:dc:04:5f:85:9e:38:00:08:ee:cd:61:64:
a6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:12:43:09:D5:E7:13:10:0A:1C:37:4F:40:EC:E8:43:65:31:F1:38
X509v3 Authority Key Identifier:
keyid:67:47:C4:56:01:43:7D:61:20:5B:2B:FB:40:67:CE:D2:2E:B7:E7:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0fEVgFDfWEgWyv7QGfO0i6358E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:31:0c:47:47:d8:78:32:13:3e:a0:30:d4:76:65:6e:66:05:
40:78:38:70:e2:b0:ba:33:6c:42:19:cd:1b:04:e9:b6:fb:30:
96:3f:36:cd:6b:68:99:d3:6b:ca:20:3e:7e:bc:f3:da:56:46:
8b:7d:12:ae:9d:fe:f4:2a:98:1c:58:32:aa:0a:83:dd:4c:9c:
4a:69:9b:60:26:bf:74:04:1f:48:14:7b:eb:c7:4d:0d:a1:47:
32:73:7d:7f:61:42:a2:db:5b:94:ef:ac:88:10:d7:75:61:2e:
9c:26:ef:ce:cf:23:b5:16:a0:c9:f1:a5:36:86:c0:c9:f9:b9:
e5:ef:2d:6b:24:0e:56:f2:2b:7a:7f:ca:65:76:14:a5:bf:d7:
2d:84:5c:f5:3f:42:82:78:b6:c1:c1:2d:fb:a4:cb:65:2d:26:
9a:fd:28:af:05:90:e6:ac:73:39:7f:70:bc:ee:ef:ce:0c:b1:
63:71:fd:8c:1b:00:90:c3:26:c4:d1:c5:93:4f:62:36:ea:29:
d3:9c:36:be:d4:27:9f:01:92:72:51:43:3c:d1:db:7d:5a:67:
57:a8:4d:ea:7a:1b:41:23:44:de:c6:d4:9c:a7:b8:df:f8:68:
08:29:15:13:c0:fd:44:3f:61:76:c9:20:a0:d8:3f:ce:1f:02:
e5:34:70:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:41:41 2026 by rpki-client