
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft
File: zcBVaYflG5M72WLX70WXHLqnosM.mft (raw, json)
Hash identifier: 24yjmHpBtbtpOr7kwng5fp0G80043NdFwBIV1984LN8=
Subject key identifier: 4D:A8:5D:DE:23:A3:4F:3C:47:23:FC:AD:31:DF:C9:6F:17:69:9F:1A
Authority key identifier: CD:C0:55:69:87:E5:1B:93:3B:D9:62:D7:EF:45:97:1C:BA:A7:A2:C3
Certificate issuer: /CN=A917D31E/serialNumber=CDC0556987E51B933BD962D7EF45971CBAA7A2C3
Certificate serial: 6C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft
Manifest number: 69
Signing time: Wed 13 May 2026 08:04:20 +0000
Manifest this update: Wed 13 May 2026 08:04:20 +0000
Manifest next update: Wed 20 May 2026 08:04:20 +0000
Files and hashes: 1: zcBVaYflG5M72WLX70WXHLqnosM.crl (hash: z2oOcKDPySa6R6g/kVihW4G7FJsj6/D+lwFJ/HK/oCg=)
2: 53D97C4AB6E011F0AE8E6B74C4F9AE02.roa (hash: TiQZcsUf6hmm4Z9q41HFXcSU+c6S5y0lWjoRYfK9XxA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.crl
rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D31E, serialNumber=CDC0556987E51B933BD962D7EF45971CBAA7A2C3
Validity
Not Before: May 13 08:04:20 2026 GMT
Not After : May 20 08:04:20 2026 GMT
Subject: CN=6a043084-978a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6e:3c:85:bd:4c:b1:ff:ef:02:2e:18:f3:1b:
e6:ee:31:59:e4:b4:4c:69:17:21:b9:3c:7c:29:41:
6e:8a:ec:e6:e5:46:5e:70:11:fb:15:f3:c4:1d:fc:
03:98:26:d7:3e:39:8f:e5:97:cf:6c:ce:e5:45:e8:
a6:8d:26:ed:6c:da:db:6d:5d:97:6c:9c:0b:41:17:
91:67:9f:b5:13:07:13:00:4c:89:e1:8e:e3:0e:06:
34:85:e6:64:f2:6c:69:0d:86:d2:02:83:7d:85:56:
34:da:ce:c9:28:8a:e7:4b:f4:7e:6f:ad:4b:41:f7:
b5:d3:d0:1d:53:9f:3f:e4:0d:da:5c:92:cf:fc:58:
89:33:cb:77:fb:9d:b1:18:10:56:4f:17:ca:0f:84:
a2:19:d5:18:76:1b:6e:c5:69:60:c1:c7:47:34:4e:
02:b0:dd:b1:1a:3c:49:df:8a:71:65:54:25:b3:67:
99:22:84:10:57:91:28:f3:c6:a0:5f:c8:96:0f:6b:
99:67:76:c6:b6:c1:4a:91:3b:2a:45:7b:be:b7:8e:
06:45:4a:46:3f:ef:06:19:08:4d:06:54:bf:cf:5e:
2a:64:10:96:a7:fd:28:14:f9:77:35:2e:38:be:2f:
df:d3:5f:af:9e:a1:5d:43:1c:7d:fd:d5:a0:0d:50:
94:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A8:5D:DE:23:A3:4F:3C:47:23:FC:AD:31:DF:C9:6F:17:69:9F:1A
X509v3 Authority Key Identifier:
keyid:CD:C0:55:69:87:E5:1B:93:3B:D9:62:D7:EF:45:97:1C:BA:A7:A2:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:00:4d:e7:99:a9:4c:c3:e8:25:f2:4d:4b:e5:c7:21:e4:ff:
a1:1c:91:6b:11:22:5d:c1:0d:b7:2d:c7:76:08:95:6a:f4:d6:
0d:32:bc:08:07:0e:5b:92:83:d1:05:ef:c6:56:18:63:91:29:
6b:d4:2e:b2:76:18:22:ac:1c:24:85:3b:70:c5:3d:4e:ae:f9:
87:d9:85:f7:db:5b:f6:84:fd:75:de:31:89:eb:1f:08:91:01:
2f:b9:d0:42:c3:f2:ec:39:08:83:d1:1c:d4:ee:1d:c4:03:77:
82:62:38:c6:63:a9:e7:43:e8:e7:ca:c7:4d:7f:ea:30:40:76:
77:dc:48:1b:3c:c7:94:b6:99:cb:e6:a8:03:e9:a4:95:c7:e6:
81:76:cb:63:d6:f9:e0:92:f1:67:13:e8:24:65:ab:0d:a4:70:
19:27:77:36:b1:00:6d:65:69:fb:51:75:29:91:d9:cb:27:44:
69:2e:26:71:e6:53:98:66:7d:8d:71:88:9a:ae:a4:18:58:cc:
ed:b3:2e:45:2b:9b:d2:dc:43:3b:b2:dd:54:9a:c0:12:e5:e7:
e5:40:3c:ee:45:a1:3b:44:5c:08:89:3b:00:e6:ae:d5:88:96:
bf:78:ea:33:5e:cb:35:87:cd:20:3a:a9:ae:ca:a7:be:9a:3b:
6f:63:94:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:57:18 2026 by rpki-client