
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft
File: zURUsk4_99x1y76Rm92nnEe5Xqc.mft (raw, json)
Hash identifier: JrXiIiCvZ957iWg7CTRd+B2H51NV+6T8n4P5dzsToPM=
Subject key identifier: 37:03:58:AC:99:E6:97:4C:4F:4C:E2:01:60:EF:E0:51:87:D4:03:5E
Authority key identifier: CD:44:54:B2:4E:3F:F7:DC:75:CB:BE:91:9B:DD:A7:9C:47:B9:5E:A7
Certificate issuer: /CN=A9172999/serialNumber=CD4454B24E3FF7DC75CBBE919BDDA79C47B95EA7
Certificate serial: 2A
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft
Manifest number: 28
Signing time: Thu 23 Jul 2026 01:46:27 +0000
Manifest this update: Thu 23 Jul 2026 01:46:27 +0000
Manifest next update: Thu 30 Jul 2026 01:46:27 +0000
Files and hashes: 1: zURUsk4_99x1y76Rm92nnEe5Xqc.crl (hash: ENPYI4zkkOOGCuNnHFFpgvKtynb6z1ikdE/OsJfB8wg=)
2: A53F1E96647311F1BC2A35D47947A888.roa (hash: aWkLi47uIb9GIJOKXHkRTH7Cyo2StRxOnkwZBq2MqlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.crl
rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:46:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172999, serialNumber=CD4454B24E3FF7DC75CBBE919BDDA79C47B95EA7
Validity
Not Before: Jul 23 01:46:27 2026 GMT
Not After : Jul 30 01:46:27 2026 GMT
Subject: CN=6a617273-04a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:58:3b:db:09:f3:eb:7a:00:7e:51:15:58:02:
64:52:dc:91:ec:b7:d6:31:c6:fb:b2:6a:d6:fb:93:
2f:ab:cf:ac:08:6f:c3:ec:3a:d9:1e:7f:ac:c4:86:
db:b2:c4:5e:63:b9:58:09:1c:8f:0a:ee:92:5b:7a:
5f:d6:bb:77:c3:17:d9:26:9c:c2:0c:8e:47:3c:4b:
10:d1:8a:29:dd:c3:0d:4e:76:bb:a2:01:cd:98:09:
ad:32:66:b8:a7:07:c5:fa:23:b0:c3:a8:60:f2:7c:
db:7e:f0:98:41:17:48:ff:5c:81:7e:f4:10:79:7c:
f7:0a:e2:f7:de:1b:ec:2b:ab:36:40:bc:0a:54:f7:
72:19:9c:fd:31:15:cb:77:be:1a:61:2f:0d:b1:8b:
3f:9e:d0:2d:18:6d:99:cb:e0:92:61:b4:19:eb:42:
91:a7:90:c1:6f:7e:0e:17:2a:cb:02:66:71:0f:19:
0a:42:91:ba:99:b6:2f:bb:f2:c7:69:6f:ac:c3:ab:
61:80:53:f8:e3:b1:08:d0:98:83:cb:e0:a4:bd:76:
f1:5c:d2:47:b1:19:40:48:0e:39:5b:1a:a5:66:2c:
49:08:ca:a1:31:72:6b:32:d2:96:a0:c3:d4:7c:2e:
8c:01:eb:52:88:11:fc:85:97:bb:25:8a:09:ff:2e:
6d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:03:58:AC:99:E6:97:4C:4F:4C:E2:01:60:EF:E0:51:87:D4:03:5E
X509v3 Authority Key Identifier:
keyid:CD:44:54:B2:4E:3F:F7:DC:75:CB:BE:91:9B:DD:A7:9C:47:B9:5E:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:85:55:ae:bd:e1:4c:63:19:5d:01:1e:06:44:48:c3:6a:eb:
75:3e:37:68:bf:99:2a:0f:94:0e:51:86:54:05:4d:ba:b9:07:
6c:6c:ca:8e:63:85:f4:2e:ab:89:f9:2b:a7:84:54:93:f2:7d:
c7:9c:57:17:ae:5e:fe:e1:e9:6f:73:6c:78:32:79:1a:d7:d1:
46:57:4a:81:a6:7f:ae:0b:df:13:cf:68:48:32:ec:8f:9e:46:
a3:b1:d4:08:3f:03:44:fb:70:f5:cb:d3:b5:c9:b0:98:a6:f9:
54:43:6e:70:cb:83:ee:d5:b5:3c:de:15:15:ad:fc:53:a5:73:
12:65:32:8d:db:7e:5c:9c:b0:7e:cb:24:4d:cb:2c:d9:11:8b:
c5:5f:6e:8f:e9:d5:5a:15:12:bd:d9:f1:ee:f1:26:0c:d3:96:
50:17:86:bc:95:1c:a9:ae:2e:d3:9f:a2:a2:18:d6:25:e8:1a:
84:6e:1d:8f:19:f5:98:6d:ae:0b:c1:fb:b5:14:2c:18:15:97:
e6:2d:a4:4e:a3:3b:56:0e:fd:7b:d5:ba:63:db:93:96:c0:06:
3b:c7:de:87:f2:11:68:c2:93:c2:8f:b7:2e:cd:55:99:79:b2:
46:35:4a:82:da:5c:53:08:63:52:c7:cb:44:cb:1e:fc:ff:51:
6a:1c:bd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:33:45 2026 by rpki-client