
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft
File: z-BxqXL9eKZ_bT7VamGENAqz46Y.mft (raw, json)
Hash identifier: KYbZeI8Ai+63G+eztPwbkhx2blJxM+krADV/ctoNaBM=
Subject key identifier: 5E:CF:55:AA:67:7D:23:42:40:FF:70:8E:89:26:E0:AA:1B:C7:6A:99
Authority key identifier: CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6
Certificate issuer: /CN=A916C4A5/serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6
Certificate serial: 0146
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft
Manifest number: 013E
Signing time: Thu 23 Jul 2026 07:03:14 +0000
Manifest this update: Thu 23 Jul 2026 07:03:14 +0000
Manifest next update: Thu 30 Jul 2026 07:03:14 +0000
Files and hashes: 1: z-BxqXL9eKZ_bT7VamGENAqz46Y.crl (hash: hDOYVC5H6CCnzlsG3Om8xQ1IXr2pFAudiy/+FnmYwNM=)
2: FB01C0A4A24B11EFA8802F31C4F9AE02.roa (hash: HouHZa5vGgcIa83LrMGT7+XMplAnXagri+kcUGhALfQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl
rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326 (0x146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C4A5, serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6
Validity
Not Before: Jul 23 07:03:14 2026 GMT
Not After : Jul 30 07:03:14 2026 GMT
Subject: CN=6a61bcb2-90f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:24:21:ed:09:b6:41:20:49:bb:e1:8b:d4:68:
8f:60:8a:8f:9b:b0:8e:2e:fb:48:7b:e8:3c:3b:da:
c1:13:40:53:83:29:ff:6c:26:09:d8:42:7e:c3:c6:
b9:af:99:74:db:0a:b7:3c:5c:29:86:4e:24:f7:76:
10:28:ad:bd:2b:94:15:62:82:76:fc:06:40:c5:ff:
d5:e6:46:f9:5c:8d:c6:73:42:bb:07:58:10:e7:60:
8e:f7:cc:05:9c:48:c8:db:05:9b:f9:19:3d:c6:80:
17:e3:13:2c:da:ae:a8:57:01:53:d5:92:98:f3:45:
6c:ee:1f:2f:7e:c0:ec:25:9e:82:31:8a:fd:0d:2e:
b3:0c:e0:d2:8b:ed:ba:a3:eb:25:0e:79:58:01:fe:
35:da:93:08:7d:a7:fe:df:8c:f6:4e:00:53:6f:9b:
cc:b3:73:d6:e9:28:91:a9:7a:da:74:82:01:82:d9:
91:19:83:cb:f6:22:af:f2:d6:9f:96:22:b7:a0:cd:
29:11:d7:d3:e2:1e:92:58:94:07:61:2f:db:89:46:
0b:02:0a:d2:f8:3f:db:ca:35:35:78:f2:4d:0b:f7:
77:60:57:74:96:71:ac:ba:7f:88:38:c5:67:21:b3:
38:d7:de:92:44:ec:17:0b:d1:67:fa:37:47:9a:d6:
45:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CF:55:AA:67:7D:23:42:40:FF:70:8E:89:26:E0:AA:1B:C7:6A:99
X509v3 Authority Key Identifier:
keyid:CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:57:2d:ad:91:93:95:e5:5d:15:e0:01:74:8f:ec:43:dd:2e:
3c:91:28:e6:bc:d9:45:9a:ae:9d:d0:24:c9:b1:a3:56:65:21:
4e:93:6b:0d:35:a0:cc:40:36:5d:6a:4d:e5:cf:ea:f5:f2:45:
76:52:c6:a9:4a:70:0e:90:4b:d5:8c:2f:52:74:c1:81:23:e3:
74:3c:d4:e5:65:a0:f5:53:93:88:a6:dd:37:9f:f1:4f:01:77:
da:d2:72:ea:93:f5:e5:7b:f6:c5:76:ff:80:6e:c3:c2:bc:bf:
9c:d1:66:61:95:54:76:86:12:fe:4b:48:a7:62:31:d3:04:10:
2a:c3:f0:3d:fc:0e:6d:a1:c5:88:fb:dd:31:d5:29:e0:f7:57:
ba:3a:f6:9a:0b:cb:a8:8a:8c:93:fc:05:5f:a5:de:e5:97:b9:
a7:46:58:a5:25:ac:f9:06:4f:69:f0:b1:20:fb:16:29:08:0c:
a1:71:a7:36:aa:8a:d0:7f:cc:70:d9:80:17:3b:a9:e3:7f:3d:
bd:c6:2b:79:b9:c2:44:77:80:70:aa:d5:cf:5c:89:23:86:61:
c9:20:3d:ba:8e:5f:95:c6:6e:af:04:4a:53:02:37:64:46:f7:
af:8b:ef:5b:ce:34:a1:ff:45:1b:53:a8:d8:2b:13:00:6b:30:
e3:2c:06:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:30:02 2026 by rpki-client