
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
File: ZEfjYbGkSWugEo32lWV0SOleK5U.mft (raw, json)
Hash identifier: Ejm84Cxg7DIKA1+w4zarVqBLaUMWD9PKoFQY0xwsBBg=
Subject key identifier: 30:87:99:F8:92:94:C0:0F:84:D5:8F:28:B8:FC:7D:75:29:5F:26:03
Authority key identifier: 64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95
Certificate issuer: /CN=A917F879/serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95
Certificate serial: 0AA4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
Manifest number: 0A94
Signing time: Fri 24 Jul 2026 19:58:06 +0000
Manifest this update: Fri 24 Jul 2026 19:58:05 +0000
Manifest next update: Fri 31 Jul 2026 19:58:05 +0000
Files and hashes: 1: ZEfjYbGkSWugEo32lWV0SOleK5U.crl (hash: +k4In4Kg7xvO3tmEioH53/vyfZUonHIHMoh+WbnzSOo=)
2: 8A6AA178556111EDB7E45424C4F9AE02.roa (hash: EASpkdXObrJ8H1sWrr81zx66bGecEu9OLYPesUTFCoA=)
3: 894FFF40556111EDB7E45424C4F9AE02.roa (hash: bQj5mxklQD19F906ONQY4Ae0sdx03lDa6OD6mt+hkGU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl
rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 18:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2724 (0xaa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F879, serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95
Validity
Not Before: Jul 24 19:58:05 2026 GMT
Not After : Jul 31 19:58:05 2026 GMT
Subject: CN=6a63c3ce-f16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ca:bc:3e:4d:87:d7:42:c2:d0:0f:7e:f3:62:
42:21:d8:bb:f0:fd:3d:8f:0c:7c:f1:c8:44:0b:a6:
bd:a9:39:8d:ee:ad:95:a1:e7:b9:92:a0:28:11:e8:
00:0c:04:cb:48:ab:d1:99:75:33:b8:d1:a3:84:ba:
33:55:34:5f:03:c2:46:0c:0e:82:73:ab:6c:11:c3:
96:5b:b3:42:a8:72:f7:05:8c:c6:f9:8c:5c:13:6c:
e7:e5:24:33:b2:11:6c:3d:22:03:43:14:b1:9b:1a:
83:9b:51:aa:cf:8a:3d:94:f5:fd:4d:e8:0b:fa:53:
4e:bd:6e:68:21:c9:c5:71:4d:12:ed:15:df:68:4d:
58:44:11:8f:92:00:86:46:59:da:0f:f6:c3:4e:c2:
d6:ea:65:57:bc:23:a4:65:75:10:e9:df:5f:bc:b1:
a2:87:f1:28:a2:b4:8c:f1:16:bc:48:63:80:a1:90:
b7:b4:6b:98:65:2d:33:b6:c4:b3:d6:8b:20:87:7d:
4c:c4:6d:8b:21:a3:29:78:03:5d:20:24:47:96:ff:
63:5f:0a:c5:1f:f2:d5:58:aa:56:e1:93:9e:0c:12:
8e:74:09:b8:6f:b5:7b:e4:9a:0b:92:62:c4:17:83:
58:30:f5:d3:4d:e1:95:7f:27:04:d7:15:51:3b:7c:
f2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:87:99:F8:92:94:C0:0F:84:D5:8F:28:B8:FC:7D:75:29:5F:26:03
X509v3 Authority Key Identifier:
keyid:64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ea:05:ca:41:5f:b0:5f:97:a9:ad:54:da:57:3f:e8:d5:07:
56:10:ec:f8:0a:b5:6a:9f:7e:b5:96:9c:68:e6:f1:0b:9a:03:
0f:6e:4e:28:28:49:42:6a:57:71:f9:c0:6e:6f:e1:98:74:00:
4a:05:68:ef:0f:cd:14:bd:9c:f5:c6:2f:c9:53:7a:c8:34:05:
62:36:4c:07:16:5c:0e:50:6c:0c:12:8d:28:e8:61:bb:72:b7:
b7:88:eb:9a:cb:d7:6b:11:c5:d6:fe:ca:de:b3:d2:42:7c:0c:
45:d1:f8:cc:a7:69:19:ba:8e:2e:35:9f:70:c9:5f:ce:3f:f7:
24:fb:e4:88:ad:e6:15:50:fa:16:25:c0:dc:b6:34:9f:aa:3e:
b0:19:2d:c5:4d:ac:77:62:ea:dc:d9:7d:90:42:fb:b9:fd:ff:
aa:c4:89:11:be:29:0b:f0:ca:35:77:1d:34:2a:28:46:91:35:
79:0e:82:79:82:95:d8:c1:c8:b9:81:b3:00:63:31:06:03:f6:
91:56:ba:9b:2c:f3:3e:b0:b8:c7:35:8e:5e:6c:03:12:e7:72:
64:5f:ca:fc:d2:09:3e:e1:45:30:12:5f:5f:cf:a5:07:9f:06:
10:08:52:4b:46:e6:20:0f:16:08:bd:bb:8b:20:b9:cf:4d:64:
a0:9f:d4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:01 2026 by rpki-client