
$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft
File: zWXmdAuufrM71eU4ye5t6LM1RDE.mft (raw, json)
Hash identifier: 6+g1/ix4fHALeDG76Sr3toDuIrT3Kc2RWnACyXlV/ZY=
Subject key identifier: 61:48:8D:CD:13:63:92:6F:E6:64:81:AA:99:A0:22:BE:6D:6B:45:4B
Authority key identifier: CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31
Certificate issuer: /CN=A916FA49/serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431
Certificate serial: 0207
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft
Manifest number: 01FE
Signing time: Wed 22 Jul 2026 16:51:48 +0000
Manifest this update: Wed 22 Jul 2026 16:51:47 +0000
Manifest next update: Wed 29 Jul 2026 16:51:47 +0000
Files and hashes: 1: zWXmdAuufrM71eU4ye5t6LM1RDE.crl (hash: b7gEhog2UfhFL04RhbwL0D5CslETvLNnFYTY62SQ4cY=)
2: 74F996F62F2511EF8D78DC62C4F9AE02.roa (hash: sPimiMMVQ8HhWMH3h4YYvgrI9mvp3guGNNGoHKdWxG8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl
rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:51:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519 (0x207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FA49, serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431
Validity
Not Before: Jul 22 16:51:47 2026 GMT
Not After : Jul 29 16:51:47 2026 GMT
Subject: CN=6a60f524-81c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0f:cc:63:7a:4d:28:f9:38:5f:72:48:91:13:
d0:88:99:69:10:2a:68:ca:43:3a:f0:b4:69:e4:bc:
99:0d:3d:ba:ce:38:f9:20:2c:e4:3d:88:84:2e:b6:
86:8f:84:be:f2:6c:8a:9c:8c:40:d7:09:f8:8d:84:
09:14:44:c5:ca:8e:af:10:1d:ff:70:58:82:1c:8a:
2e:45:6d:92:af:7a:91:11:f2:f0:ab:94:3b:3c:9e:
ed:ae:b7:4a:f6:75:d7:b7:f7:91:0f:93:9c:b7:72:
31:28:2d:ac:ae:8c:63:f8:fb:6f:67:8e:d3:02:d2:
80:46:d3:c3:78:62:9f:24:2d:e4:9b:63:19:60:bc:
2e:a1:bd:ba:f4:5f:a6:5d:36:51:c9:30:35:b5:49:
12:de:55:79:d1:6d:85:26:67:50:49:43:fd:2b:b8:
b9:e8:0b:31:95:2b:9e:40:23:5c:8f:7f:b1:63:e9:
06:8d:0f:d2:e8:2c:58:ac:c4:b6:bf:c0:d1:28:62:
a8:92:67:eb:63:1a:f5:b9:c1:c6:77:f3:9c:df:67:
ae:ef:02:bd:55:df:b1:c3:9e:96:85:37:79:50:c2:
29:83:e7:22:9c:5b:c6:50:b3:9a:12:00:2c:42:0e:
cc:48:89:86:38:76:5c:18:d0:18:95:83:2d:42:7c:
21:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:48:8D:CD:13:63:92:6F:E6:64:81:AA:99:A0:22:BE:6D:6B:45:4B
X509v3 Authority Key Identifier:
keyid:CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:3d:da:2d:e8:ce:a9:bb:b9:81:1d:0e:ca:6b:82:db:29:cd:
aa:b9:8e:7f:24:70:d0:34:a6:c3:37:bf:86:14:13:60:e8:cd:
89:bf:5b:8e:ad:c2:51:bf:62:e7:ca:fb:b0:84:e9:ac:67:45:
81:bc:af:66:90:cd:64:c3:59:47:6b:20:74:e9:2a:f4:02:a6:
f5:ef:13:fb:49:02:78:ce:d7:ad:2c:25:b5:02:f8:78:9f:2e:
24:a9:52:fb:3f:e6:81:9e:86:7b:0a:2e:c7:8e:64:9f:71:92:
61:49:d1:24:1a:76:5d:89:22:0d:66:ce:f4:5e:8c:8f:59:20:
f0:9a:4c:54:1d:0b:55:19:39:7c:97:6f:85:ef:5e:2c:ef:ae:
e5:f2:54:2a:e5:60:b4:6f:4a:aa:44:74:b7:3b:f4:f5:53:cd:
18:32:bc:0e:58:b3:b4:1b:32:92:f8:de:1a:77:cf:00:cf:2d:
06:57:10:d8:2c:91:7d:db:a8:c4:f3:de:29:7c:a1:4e:2b:41:
44:98:8e:ac:f9:ff:10:ac:50:5a:97:7b:68:91:88:c9:75:57:
41:c6:1e:be:8b:74:00:f4:d8:f5:a7:bd:4f:1c:5e:da:55:87:
c9:13:54:a0:11:03:4d:24:4f:1e:ea:63:c3:bb:bc:35:5e:3e:
2d:46:75:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:28:43 2026 by rpki-client