
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167352/8EB0C1EC704A11F1B350ABC268A30FBC/Z3baH1fz652mWcNicdGV5tPOXEU.mft
File: Z3baH1fz652mWcNicdGV5tPOXEU.mft (raw, json)
Hash identifier: iDUfj/Fhc46UThEn2GpY270hgZa/o+WPRNGNJkCxFQ8=
Subject key identifier: 3C:B3:A8:A4:CA:54:DA:63:E0:BD:86:2B:B1:21:B1:E4:2F:CC:DE:F2
Authority key identifier: 67:76:DA:1F:57:F3:EB:9D:A6:59:C3:62:71:D1:95:E6:D3:CE:5C:45
Certificate issuer: /CN=A9167352/serialNumber=6776DA1F57F3EB9DA659C36271D195E6D3CE5C45
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z3baH1fz652mWcNicdGV5tPOXEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167352/8EB0C1EC704A11F1B350ABC268A30FBC/Z3baH1fz652mWcNicdGV5tPOXEU.mft
Manifest number: 0F
Signing time: Thu 23 Jul 2026 11:10:03 +0000
Manifest this update: Thu 23 Jul 2026 11:10:02 +0000
Manifest next update: Thu 30 Jul 2026 11:10:02 +0000
Files and hashes: 1: Z3baH1fz652mWcNicdGV5tPOXEU.crl (hash: jGvNk2tqVLsY8Lu2odjPALaIGiKLgfHxMQCf+xhGIqg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167352/8EB0C1EC704A11F1B350ABC268A30FBC/Z3baH1fz652mWcNicdGV5tPOXEU.crl
rsync://rpki.apnic.net/member_repository/A9167352/8EB0C1EC704A11F1B350ABC268A30FBC/Z3baH1fz652mWcNicdGV5tPOXEU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z3baH1fz652mWcNicdGV5tPOXEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167352, serialNumber=6776DA1F57F3EB9DA659C36271D195E6D3CE5C45
Validity
Not Before: Jul 23 11:10:02 2026 GMT
Not After : Jul 30 11:10:02 2026 GMT
Subject: CN=6a61f68b-e8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f5:95:a9:b0:81:b2:b9:e7:c2:a2:d5:f9:9f:
e0:56:6e:c5:5b:c0:7f:99:66:a7:88:07:06:68:c8:
ff:e2:8b:20:28:fa:50:41:29:5f:ed:0e:cb:ff:45:
29:64:82:f1:2c:d2:6b:44:9f:e6:18:80:08:1b:61:
05:82:37:c2:fe:e3:73:f0:0b:f3:4d:7d:38:80:7b:
f4:71:b3:68:2f:f3:ca:19:a2:99:b4:4b:77:61:e0:
94:e0:c4:e5:b4:30:7d:d8:a8:1e:c3:b7:55:0f:7d:
e7:a0:cb:00:b6:0f:a2:99:ae:ad:e9:4d:1f:88:9f:
d0:03:f6:dc:96:05:1e:a1:c3:d3:5d:f6:ee:6c:c5:
19:cc:59:c4:4f:14:4f:4e:88:9d:5c:5e:1a:f1:6a:
9b:a8:9a:5e:52:88:cc:88:73:f8:73:3b:c4:1d:33:
3c:44:a0:b5:48:d6:4a:af:67:53:1c:43:6e:52:85:
cc:18:ad:93:26:5f:84:f9:4e:94:17:a1:b9:14:48:
4d:44:a2:11:13:0c:24:05:90:08:5a:4a:67:c4:a6:
ba:a2:9b:a6:20:b9:3a:c3:44:19:23:f5:ff:ae:b0:
c4:89:9f:df:b0:8f:cf:21:e7:8f:7d:90:72:36:18:
89:f7:23:7f:54:a8:1a:c9:bb:6a:8f:5c:df:c9:d7:
35:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B3:A8:A4:CA:54:DA:63:E0:BD:86:2B:B1:21:B1:E4:2F:CC:DE:F2
X509v3 Authority Key Identifier:
keyid:67:76:DA:1F:57:F3:EB:9D:A6:59:C3:62:71:D1:95:E6:D3:CE:5C:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167352/8EB0C1EC704A11F1B350ABC268A30FBC/Z3baH1fz652mWcNicdGV5tPOXEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z3baH1fz652mWcNicdGV5tPOXEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167352/8EB0C1EC704A11F1B350ABC268A30FBC/Z3baH1fz652mWcNicdGV5tPOXEU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:45:7a:b9:30:ca:2a:c5:18:38:ad:95:10:41:cc:68:9d:3e:
e8:6b:6c:91:5c:d8:97:a8:cb:e2:65:2f:24:c3:16:e3:d7:85:
9b:95:70:40:ca:9a:aa:4c:89:fc:86:fd:44:d8:3a:fb:79:fc:
c4:22:d8:5c:44:81:b3:6b:9e:1f:14:74:50:97:fd:0a:ac:69:
f5:ec:47:77:86:08:1e:e0:5f:ab:76:55:73:7f:ca:7a:94:87:
07:a5:2e:e0:b3:d5:16:0c:45:b9:8d:3c:fb:e0:e7:d9:0a:ea:
f1:d6:66:a0:b1:d9:be:62:50:8e:0f:58:7e:de:f3:da:ed:d8:
5f:33:fa:89:04:dc:8b:3f:57:b2:fc:fe:a7:ed:12:a4:92:8b:
d6:6f:a1:03:bd:63:fe:af:8e:2f:d3:75:ff:89:a7:8e:61:1f:
d0:ac:2b:1e:4d:ac:b8:f1:07:ee:1e:f0:4c:f7:bf:f9:8c:19:
22:33:73:6c:6b:ea:51:13:b3:75:86:98:a0:d0:75:46:29:66:
84:48:cc:33:8d:98:6e:35:e4:90:f4:73:86:bd:06:94:8f:6a:
68:d3:6c:92:6c:ee:c7:c0:98:ca:d2:90:d4:f5:68:18:c7:0f:
aa:51:dd:71:ec:bf:d8:08:e4:64:76:6d:f2:c7:96:fc:85:84:
50:24:08:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:23 2026 by rpki-client