
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
File: zT31OqDpo5hZXpVwFRVbzKxWjRU.mft (raw, json)
Hash identifier: IyZIYm4sCNl8TcCxauus6aqLPahRxM/Q67tjJl1wstw=
Subject key identifier: D5:A8:A5:96:86:A2:B5:0B:BB:10:C8:D3:06:4E:B6:71:33:10:2B:3A
Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15
Certificate issuer: /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15
Certificate serial: 01BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
Manifest number: 01A6
Signing time: Thu 23 Jul 2026 05:55:45 +0000
Manifest this update: Thu 23 Jul 2026 05:55:45 +0000
Manifest next update: Thu 30 Jul 2026 05:55:45 +0000
Files and hashes: 1: zT31OqDpo5hZXpVwFRVbzKxWjRU.crl (hash: TUWdz2tO0SsEwm/7utfROhCMwQkGeAG14AgPVJJXoqk=)
2: 9292865625AA11F0A63D1D85C4F9AE02.roa (hash: UeaRLdDzY1ShESbWYDfFd7UbKiVJI/tCLkGrM3fnfPc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl
rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:55:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443 (0x1bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EBB2, serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15
Validity
Not Before: Jul 23 05:55:45 2026 GMT
Not After : Jul 30 05:55:45 2026 GMT
Subject: CN=6a61ace1-397a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:78:38:fa:6f:2b:38:b2:fa:8a:a6:2b:a5:
0e:ba:44:b0:0d:0c:e5:ed:27:a0:50:44:29:d3:ff:
83:aa:2d:70:4d:db:a0:13:9d:f1:b3:fa:3d:ad:87:
b1:da:d6:b2:1d:b4:21:ee:af:0f:01:29:60:e7:ba:
9c:ef:14:a2:cb:d5:cd:c2:79:2e:c1:cc:30:df:ec:
01:49:4e:81:54:dd:79:1f:7f:b6:bb:52:ff:ac:a6:
89:04:2b:bc:97:fc:be:e5:0f:af:73:a6:9d:95:ad:
93:84:4e:78:89:33:9a:c3:a3:07:3b:e5:65:12:c8:
cc:7b:89:41:2d:88:b7:82:77:5f:a6:c3:91:63:1d:
fa:ec:16:a0:54:56:f0:2a:b0:c3:ab:33:7c:3d:dd:
36:4f:47:ff:67:24:5e:ab:e2:57:b7:de:04:c6:8b:
f2:ae:a8:d2:cc:cf:20:de:e4:bf:a0:f7:60:4b:eb:
e7:86:97:cd:14:77:17:f6:8b:b2:cd:25:0c:d0:28:
8b:36:8e:de:1f:83:19:b8:ca:17:46:b7:e5:48:5a:
13:fa:51:ab:c2:85:86:5e:07:c5:4c:f5:8c:20:1b:
73:a5:fe:b1:1a:bd:95:ff:14:24:85:8f:33:8f:e4:
3e:51:e7:53:8e:e4:98:e5:73:f1:c4:4c:5e:a0:3b:
b2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A8:A5:96:86:A2:B5:0B:BB:10:C8:D3:06:4E:B6:71:33:10:2B:3A
X509v3 Authority Key Identifier:
keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1d:36:20:60:fa:f3:df:62:72:28:c2:84:cc:ad:78:4c:df:
1e:18:89:dd:4e:45:6c:f5:b0:5b:3c:e5:ee:5d:3b:f3:93:ef:
ea:b7:49:67:d5:cb:b9:ce:6c:3a:1f:ff:5c:02:b4:56:36:d6:
7b:72:3f:37:28:8f:70:58:85:31:27:8f:1c:22:6c:cf:80:a2:
30:8f:42:e3:d4:e7:5c:b1:ed:cf:e3:8a:a3:4b:14:1d:31:e2:
67:31:32:57:9d:3d:c5:22:57:ad:b8:de:87:c3:8b:a8:b3:97:
c4:13:b1:a1:66:a2:d1:22:43:4e:17:d5:27:cf:b8:cc:38:91:
50:88:14:45:3c:18:67:43:7a:d4:53:8d:76:1c:a9:66:8a:b5:
2b:a1:b3:2e:09:73:00:65:a9:3b:b9:29:5f:10:54:3e:9a:6e:
0c:50:5f:5c:3f:3d:1a:28:39:0d:4b:53:5f:f2:53:88:04:57:
77:64:d4:5a:6a:a3:79:58:f8:f3:b8:d3:90:af:3f:ad:a5:e3:
4b:1b:1d:a2:29:3c:f0:34:a2:df:45:32:42:48:ad:4f:8f:0e:
15:3e:da:f9:0d:d1:cd:57:ea:09:e2:83:81:2c:dc:1b:e0:e0:
03:45:ca:38:2f:46:9d:a9:3f:c8:1c:04:95:fb:61:3b:a1:90:
5c:71:60:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:42:29 2026 by rpki-client