
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
File: zuSHZKosFvdaBnJE66WGaXThztY.mft (raw, json)
Hash identifier: uzxUSQDxe8WWJRH72D0qvz86v+yZuxXkcmfvxaXBmFA=
Subject key identifier: B1:B3:AC:1D:9C:FB:0B:93:3E:55:27:BF:90:D0:A0:C4:81:90:DC:92
Authority key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6
Certificate issuer: /CN=A915A4AF/serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6
Certificate serial: 0175
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
Manifest number: 0164
Signing time: Thu 23 Jul 2026 06:30:27 +0000
Manifest this update: Thu 23 Jul 2026 06:30:26 +0000
Manifest next update: Thu 30 Jul 2026 06:30:26 +0000
Files and hashes: 1: zuSHZKosFvdaBnJE66WGaXThztY.crl (hash: DCVbzzAA27kf+KLKCSwn3o6BFlFwPBaMcxOMrMH9kYA=)
2: D4BAE68E853311F0AC0D4852C4F9AE02.roa (hash: dguyqJJlfQdrZxS7gBVnP+fhLGVgFc3v59CnlE7InbE=)
3: 9B22AC1269F611EFA7665A51C4F9AE02.roa (hash: VacfDcobXZwt2pK6XAvRhxuJBdzslSZAkq50qpH5PGU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl
rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A4AF, serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6
Validity
Not Before: Jul 23 06:30:26 2026 GMT
Not After : Jul 30 06:30:26 2026 GMT
Subject: CN=6a61b503-b681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:7f:a6:ec:03:87:57:f6:d1:59:b5:07:2b:
1c:4d:27:28:46:ab:d2:df:4c:9b:ac:8b:0b:a0:1b:
26:03:09:e7:53:bc:2e:16:20:48:13:87:4e:99:c8:
ad:76:9f:ba:9a:bf:79:af:fe:12:86:0f:eb:ff:ae:
8c:0d:23:9a:24:1d:7c:e9:d2:c5:d9:01:f8:e4:68:
49:89:14:f8:1f:c2:0e:2e:29:fe:14:52:e4:88:60:
9e:60:fe:c2:76:cf:a3:88:c0:f3:56:a1:e6:19:68:
1e:67:bc:85:99:94:f3:f6:df:30:7c:e0:55:93:b0:
64:da:38:6c:76:2a:18:54:d6:52:f1:29:60:dc:fb:
ea:b2:92:4c:a2:87:a5:af:1c:18:7e:ba:61:c5:23:
cc:ff:32:5f:99:f3:bb:6d:29:71:a3:e2:91:66:d4:
ae:1d:27:52:06:3f:35:43:da:bb:56:ee:de:70:bd:
dc:0a:39:7d:74:b6:6b:d1:df:b0:c5:33:63:72:5a:
31:54:88:66:d5:6b:3d:a8:a9:c6:bc:d0:73:72:24:
2c:af:69:f0:60:55:54:4f:d6:f5:44:a0:79:f6:8a:
8d:da:f0:5a:63:9b:2a:d8:52:53:89:76:83:5b:a0:
b1:1c:c5:2c:b4:07:a3:4b:22:09:93:60:65:c4:9d:
5f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B3:AC:1D:9C:FB:0B:93:3E:55:27:BF:90:D0:A0:C4:81:90:DC:92
X509v3 Authority Key Identifier:
keyid:CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:a8:37:9e:e4:a4:ae:92:be:c6:83:80:bb:f4:52:08:9f:6c:
c6:0b:25:e4:f5:5b:73:a5:56:7d:2a:d9:4e:a5:92:94:4e:9c:
b6:12:27:f7:22:ab:23:cc:ec:c1:79:30:2b:26:0c:b5:e7:5b:
42:1e:bc:e6:b3:71:56:3a:d6:28:b0:2f:1b:2e:f5:72:1a:a6:
a8:cc:5a:fc:87:4b:28:9d:f8:5a:12:df:65:b9:1f:3d:1b:19:
d7:59:7a:88:db:42:db:85:45:94:b3:40:1d:2e:43:49:b5:e9:
64:b1:9c:81:4d:96:c9:10:d7:21:78:26:86:ee:c0:17:09:7c:
87:94:25:00:15:fc:95:fc:6f:14:51:a6:45:4a:97:da:fd:ab:
f8:84:88:98:41:a5:12:e1:4c:0a:0c:90:5b:1d:44:e5:c2:86:
02:c1:17:86:0c:1a:b0:88:ce:3b:43:14:80:64:57:08:79:79:
63:2a:e9:4d:ea:fa:2d:f2:e3:42:a3:fe:7b:54:4f:38:72:90:
3d:5b:c4:8f:a8:1f:32:8b:55:90:61:18:56:6a:01:41:e2:c0:
c0:55:ad:22:f3:17:87:23:84:c2:72:69:42:74:a4:d2:e9:dc:
a7:65:7a:12:5e:e4:af:49:3a:d3:4a:52:fc:6e:8b:95:08:58:
9c:90:76:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:26:16 2026 by rpki-client