
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
File: zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft (raw, json)
Hash identifier: JgWas2jF3ljepwYTdo3RXv36WerIPgvXu1EFuenK+Ks=
Subject key identifier: 22:C8:8E:33:4F:3C:81:E8:1F:9E:1A:A3:0D:A6:F4:6C:9E:FD:EB:D0
Authority key identifier: CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4
Certificate issuer: /CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
Certificate serial: 0C9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
Manifest number: 0C90
Signing time: Tue 12 May 2026 18:36:51 +0000
Manifest this update: Tue 12 May 2026 18:36:51 +0000
Manifest next update: Tue 19 May 2026 18:36:51 +0000
Files and hashes: 1: zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl (hash: Da7PRV/mUacQ4wX7w+PUvJt7xAaKmdkgp2O06AbuKnc=)
2: 81C5BFF8192811EA9B88D87DC4F9AE02.roa (hash: MlGQE6i/naYke0ZwsPc47N+NQobrGaPsNs00jN9E6oo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl
rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:36:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3227 (0xc9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EBCB, serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
Validity
Not Before: May 12 18:36:51 2026 GMT
Not After : May 19 18:36:51 2026 GMT
Subject: CN=6a037343-cd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ef:5d:82:f7:77:bf:db:fd:48:c8:6d:51:2c:
15:b6:b1:83:f9:e2:a4:86:fe:bf:9e:f4:76:b5:a3:
12:7f:9c:1f:dc:e6:4a:5f:08:e8:7b:b9:87:ad:8f:
75:f1:14:be:f9:14:38:80:e4:04:4f:49:5a:b5:39:
24:18:44:0f:83:60:02:57:56:c0:12:d4:fb:c8:ff:
13:e2:5f:df:8e:81:5c:03:a1:62:c8:30:e6:dc:b9:
6f:71:ce:da:a4:95:60:a4:35:4f:65:c6:93:d9:9b:
20:7f:7e:8a:a9:eb:de:d6:62:76:68:11:0d:19:93:
f4:df:3d:07:c5:ea:0b:cc:23:c0:40:ee:33:e3:5f:
aa:15:65:88:b3:85:66:7e:29:47:09:34:13:9a:d6:
e2:d0:b1:81:7a:f0:4e:40:6c:c2:fc:17:cc:f7:7b:
76:3d:cd:48:9e:79:bc:fa:79:ae:da:18:3b:cc:67:
08:44:0f:68:b1:6e:c7:f8:c0:eb:72:0c:c0:f6:2c:
6b:2f:87:59:ff:e9:0f:c2:64:18:35:be:f8:e8:44:
06:b2:d7:0e:07:6b:0b:dc:ae:39:76:eb:18:5f:6d:
49:7d:d7:d7:70:62:3d:de:89:89:c9:1a:00:2b:8c:
83:de:3f:6f:41:b2:b0:97:4d:56:dc:7a:59:7c:ab:
ed:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C8:8E:33:4F:3C:81:E8:1F:9E:1A:A3:0D:A6:F4:6C:9E:FD:EB:D0
X509v3 Authority Key Identifier:
keyid:CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0a:30:cb:7a:5b:c4:ee:ed:eb:88:c6:9d:e7:b3:cd:c4:10:
f6:42:19:2f:ad:a0:ae:c0:f7:db:ae:cd:32:58:9a:0a:79:c4:
0a:99:3e:aa:fa:0c:88:52:aa:f0:94:a1:db:b7:ce:d4:c5:31:
2f:cc:8a:eb:85:1e:e5:b6:46:ef:01:09:0a:93:75:f7:75:a6:
53:89:1f:1d:67:e0:0c:63:c8:11:48:fa:db:73:f3:33:e3:66:
ca:cb:13:99:1e:20:2f:df:43:27:3c:44:44:5b:12:50:5d:0b:
a9:ff:d8:14:89:95:7e:07:df:ca:c2:24:a0:35:0a:85:26:64:
30:b0:64:9c:a4:07:f5:b6:ae:a0:89:c4:16:35:41:4f:b2:00:
02:22:6c:cb:33:42:f3:78:15:0b:3c:ee:c3:41:cf:f3:86:78:
ac:5c:be:39:f6:28:23:67:96:91:34:91:b6:91:b5:1f:cc:6f:
49:34:5e:2b:06:57:af:99:a0:6f:bc:59:a9:9d:8a:6c:5f:34:
8c:1b:df:21:fc:8c:82:15:dd:92:16:5f:eb:69:b3:2a:30:55:
f0:37:25:f8:e1:14:7f:71:5f:6a:33:c5:ff:08:60:be:9c:9e:
8d:61:55:72:b8:6b:9a:72:ae:fb:41:6b:b4:61:c2:29:eb:aa:
3f:dc:9d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:54:46 2026 by rpki-client