
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
File: _zNBly3YofaHHt6Gmjod2SUorrY.mft (raw, json)
Hash identifier: M/N+mWV1K5oWY0ToMiVd+S2wkempAlEJVTmiHxWjRLQ=
Subject key identifier: 5E:38:56:B8:B2:91:3F:00:FA:D1:61:77:2D:D3:1C:1C:E2:2D:EE:D3
Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
Certificate issuer: /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
Certificate serial: 0E51
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
Manifest number: 0DA9
Signing time: Wed 22 Jul 2026 16:54:36 +0000
Manifest this update: Wed 22 Jul 2026 16:54:36 +0000
Manifest next update: Wed 29 Jul 2026 16:54:36 +0000
Files and hashes: 1: _zNBly3YofaHHt6Gmjod2SUorrY.crl (hash: BE1IVq+xtLqe9zT7gWgI80RqtAiUnyhqFLdxYIMfFFk=)
2: F4A77A06CED911ED9BC69385C4F9AE02.roa (hash: /3UCOZyy7IRWOhuU35PtgiVAbTlyg5NR99z+gedGo9I=)
3: CCFA7454F04611F087BCEF76546F56BC.roa (hash: HCXtiXKgHVhMpaTnQurvVC//OqVn5AKyKkMTKhQsmjM=)
4: 69FDEAC6645511EFB98C143DC4F9AE02.roa (hash: 8GqLPEK+8+LiDMs6TXQYM/u72383yuqkd4BLQepKcQg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl
rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:54:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3665 (0xe51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
Validity
Not Before: Jul 22 16:54:36 2026 GMT
Not After : Jul 29 16:54:36 2026 GMT
Subject: CN=6a60f5cc-9232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:57:ed:f1:9a:ee:bf:2e:3d:83:cf:f9:a6:cd:
71:02:03:fa:c3:aa:62:e7:72:fc:0d:c0:2c:de:78:
89:7c:6c:76:2d:c9:c3:f2:bf:95:48:19:7c:36:bd:
7e:39:18:45:9f:43:b8:f4:c8:82:e1:7a:36:eb:04:
01:61:15:08:36:74:d5:9d:c6:63:cc:69:e2:56:91:
5d:10:b4:32:42:df:96:ed:d4:34:bb:3a:ac:b0:96:
fd:da:04:08:ca:4a:a0:11:47:57:84:57:4b:cf:10:
43:27:44:69:07:6c:1e:76:41:0a:f5:87:dc:60:77:
03:1c:0c:69:56:d9:ae:02:ff:e6:9b:94:06:85:12:
7f:93:d6:9d:4f:60:a9:49:3d:aa:ec:c0:f2:12:77:
9e:a5:f7:90:03:c6:13:be:e5:f4:04:d2:c0:cf:6e:
35:2d:19:93:44:d9:5f:08:a8:23:a1:69:b2:85:8a:
83:32:6a:61:5c:05:45:28:1d:3a:95:c0:b9:8a:26:
a1:15:e8:b8:b1:76:99:0e:3f:a5:71:4a:55:e2:28:
19:cb:89:4d:89:a2:f0:e8:83:46:1c:43:c6:24:52:
99:b6:f1:7f:c5:0a:52:00:27:df:0b:ea:75:87:b2:
fe:b2:4e:de:0d:7d:21:22:b0:42:69:c9:e3:57:4b:
d5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:38:56:B8:B2:91:3F:00:FA:D1:61:77:2D:D3:1C:1C:E2:2D:EE:D3
X509v3 Authority Key Identifier:
keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:c8:b3:a1:ec:c9:8f:31:69:e5:55:7b:7a:1b:c2:0b:2d:59:
65:d2:6a:50:d6:79:06:3a:7a:1f:40:ed:47:9b:e4:fe:8f:d9:
09:75:ef:8b:1f:83:60:30:aa:a8:0b:9a:fe:10:32:3c:05:9d:
ee:2b:b9:2a:7d:54:05:3b:29:5a:d3:e2:0e:ef:51:e4:36:0f:
e3:14:d1:2f:e2:de:cc:0d:9d:d3:ea:42:2f:0a:d4:47:9d:50:
e2:0f:a0:7a:bf:6f:fd:fe:88:83:0a:03:0d:56:31:56:39:53:
63:43:83:0e:43:df:f3:b6:d7:87:dd:60:f8:67:8b:83:b4:9a:
34:15:03:a1:6e:9d:fd:88:3c:a9:96:26:48:93:29:17:69:1d:
92:98:3c:89:1e:b6:ee:b8:47:1b:3a:c9:92:31:76:e0:30:96:
56:df:ba:0f:f0:d7:e2:92:fc:fe:d6:02:fb:63:e6:fb:fe:4a:
71:05:22:e3:5f:9e:d8:e6:c5:90:1f:aa:ba:e3:0d:0c:42:f5:
d8:18:66:7b:1f:01:10:5d:4a:2f:a7:75:ff:34:64:6d:bb:33:
db:19:8b:6e:7f:fe:bb:a2:85:9a:a1:b7:44:5a:1e:9d:95:8c:
72:52:b1:8e:19:de:8b:4c:be:b4:87:3d:15:60:73:04:81:8d:
e9:b4:70:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:20:54 2026 by rpki-client