
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
File: zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft (raw, json)
Hash identifier: xorsaTjyjI1qzk35YXa7DgP6H1wgooItfCs7LqU5cWs=
Subject key identifier: 8C:D0:66:9C:E9:02:E1:7D:8C:35:B8:8F:14:4B:EF:81:A6:C8:00:28
Authority key identifier: CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4
Certificate issuer: /CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
Certificate serial: 0CBF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
Manifest number: 0CB4
Signing time: Wed 22 Jul 2026 18:47:47 +0000
Manifest this update: Wed 22 Jul 2026 18:47:47 +0000
Manifest next update: Wed 29 Jul 2026 18:47:47 +0000
Files and hashes: 1: zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl (hash: dLK+Yg5Ccs9NPPOFckQXE0R1VrtDb/9PUmifOovSW9w=)
2: 81C5BFF8192811EA9B88D87DC4F9AE02.roa (hash: MlGQE6i/naYke0ZwsPc47N+NQobrGaPsNs00jN9E6oo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl
rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3263 (0xcbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EBCB, serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
Validity
Not Before: Jul 22 18:47:47 2026 GMT
Not After : Jul 29 18:47:47 2026 GMT
Subject: CN=6a611053-bb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:da:b1:48:47:bb:47:53:ab:4e:f8:50:e2:83:
92:e7:3b:1a:f8:d6:18:99:ee:be:24:22:8e:5d:bb:
b6:33:62:38:07:57:cb:32:81:34:85:f9:19:56:ea:
af:19:6b:22:50:35:23:e6:fe:07:08:e1:ec:28:4d:
9a:20:ff:7a:ff:44:b3:dc:f0:57:e0:9d:c8:c9:c0:
4c:6c:fd:d3:9f:f2:89:94:8b:77:1f:fc:a0:26:5b:
a3:9f:9b:1d:51:17:57:10:32:1d:8e:10:0f:fd:f7:
00:93:8b:3b:85:04:99:7d:91:84:6d:39:0f:c0:e6:
47:4c:01:2f:06:06:99:4a:80:81:7b:d2:40:12:93:
ce:a1:1b:a0:9b:a3:ad:74:ed:5a:67:7e:45:7e:af:
ae:4c:14:67:32:73:9f:05:ee:f0:30:d8:ed:e8:a6:
89:fa:11:9f:59:30:fa:29:45:3f:55:f8:e9:2b:89:
04:1a:b5:53:1f:52:38:3c:9f:31:bb:3f:d6:4f:cd:
28:8e:d5:54:6b:ca:1e:45:4e:9c:e2:2a:21:6c:e2:
ee:6d:8c:4d:3c:f2:f7:4b:94:09:00:3f:6a:12:2c:
70:a8:28:bd:37:3e:5c:29:e4:14:e6:20:34:88:39:
23:a9:ca:46:ad:67:6f:2d:92:e2:e8:7f:35:44:8c:
00:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D0:66:9C:E9:02:E1:7D:8C:35:B8:8F:14:4B:EF:81:A6:C8:00:28
X509v3 Authority Key Identifier:
keyid:CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7c:e8:25:d4:33:38:55:cd:39:e2:b5:e3:8a:9d:31:5b:af:
61:04:ac:90:e0:d0:07:33:25:16:56:0f:90:e0:47:af:b1:5e:
f3:b0:dc:11:ab:4b:2f:49:fa:a7:5c:2f:f0:8f:74:49:ff:b2:
94:f2:4b:4d:2f:20:c0:ce:af:b0:3a:9a:ba:30:57:1c:63:f2:
43:fd:38:6b:c0:09:0b:02:27:31:ea:51:ca:d0:2b:7e:74:25:
0d:d8:5c:19:00:b8:bd:41:43:e2:92:ad:cc:0b:71:88:5c:a5:
a4:14:41:5a:61:aa:9d:da:c0:9c:99:06:6b:58:9e:ad:50:e4:
6f:3f:2e:8a:d9:a6:b3:2a:1e:ea:e7:e6:fb:d8:8b:62:ff:f6:
80:89:d4:fc:fa:ab:8d:ec:c0:c2:d4:26:81:79:f5:2a:29:51:
2e:38:b8:ba:92:45:8b:04:25:66:06:db:1b:f9:14:eb:d7:7a:
d6:fe:03:e6:24:bd:c9:84:8f:0f:59:2a:b4:22:5c:81:33:8f:
3f:42:45:d7:b3:dc:b1:76:1e:84:64:ca:52:c0:6e:a7:2e:e4:
aa:be:b3:f8:71:ec:ba:6b:6f:ea:41:14:fc:a7:7b:e5:30:b8:
e7:96:a5:9a:03:0d:92:77:e1:cf:37:76:27:5a:85:0d:9a:56:
4c:1c:2d:bf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkVCQ0IxMTAvBgNVBAUTKENDMzY5MEY4OTZFRjU2NzMxMTUzNUJDNDQ0REYxRUI3
NDFGRDhCQjQwHhcNMjYwNzIyMTg0NzQ3WhcNMjYwNzI5MTg0NzQ3WjAYMRYwFAYD
VQQDEw02YTYxMTA1My1iYjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA19qxSEe7R1OrTvhQ4oOS5zsa+NYYme6+JCKOXbu2M2I4B1fLMoE0hfkZVuqv
GWsiUDUj5v4HCOHsKE2aIP96/0Sz3PBX4J3IycBMbP3Tn/KJlIt3H/ygJlujn5sd
URdXEDIdjhAP/fcAk4s7hQSZfZGEbTkPwOZHTAEvBgaZSoCBe9JAEpPOoRugm6Ot
dO1aZ35Ffq+uTBRnMnOfBe7wMNjt6KaJ+hGfWTD6KUU/VfjpK4kEGrVTH1I4PJ8x
uz/WT80ojtVUa8oeRU6c4iohbOLubYxNPPL3S5QJAD9qEixwqCi9Nz5cKeQU5iA0
iDkjqcpGrWdvLZLi6H81RIwAuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIzQZpzp
AuF9jDW4jxRL74GmyAAoMB8GA1UdIwQYMBaAFMw2kPiW71ZzEVNbxETfHrdB/Yu0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUJDQi9FOEQ2OTVBQzE5
MjYxMUVBQTMzNjFDN0JDNEY5QUUwMi96RGFRLUpidlZuTVJVMXZFUk44ZXQwSDlp
N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pEYVEtSmJ2Vm5NUlUxdkVSTjhldDBIOWk3US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RUJDQi9FOEQ2OTVBQzE5MjYxMUVBQTMzNjFDN0JDNEY5QUUwMi96RGFRLUpidlZu
TVJVMXZFUk44ZXQwSDlpN1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfnzoJdQzOFXNOeK144qdMVuvYQSskODQBzMlFlYPkOBHr7Fe87DcEatLL0n6
p1wv8I90Sf+ylPJLTS8gwM6vsDqaujBXHGPyQ/04a8AJCwInMepRytArfnQlDdhc
GQC4vUFD4pKtzAtxiFylpBRBWmGqndrAnJkGa1ierVDkbz8uitmmsyoe6ufm+9iL
Yv/2gInU/PqrjezAwtQmgXn1KilRLji4upJFiwQlZgbbG/kU69d61v4D5iS9yYSP
D1kqtCJcgTOPP0JF17PcsXYehGTKUsBupy7kqr6z+HHsumtv6kEU/Kd75TC455al
mgMNknfhzzd2J1qFDZpWTBwtvw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:58:25 2026 by rpki-client