
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
File: ZEfjYbGkSWugEo32lWV0SOleK5U.mft (raw, json)
Hash identifier: gRFwD87JMqAQFX0bnt9xjdQWIylX7QsTeHU3axl9Jvs=
Subject key identifier: 75:60:8E:24:C6:05:AA:40:F3:67:FD:EB:0A:0F:FD:B8:5D:A1:42:13
Authority key identifier: 64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95
Certificate issuer: /CN=A917F879/serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95
Certificate serial: 0A7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
Manifest number: 0A6F
Signing time: Tue 12 May 2026 19:39:25 +0000
Manifest this update: Tue 12 May 2026 19:39:24 +0000
Manifest next update: Tue 19 May 2026 19:39:24 +0000
Files and hashes: 1: ZEfjYbGkSWugEo32lWV0SOleK5U.crl (hash: JVP0a5B+jE4EyueFmLKWd1ge+P/amG5jT97FS1ZKJK8=)
2: 894FFF40556111EDB7E45424C4F9AE02.roa (hash: bQj5mxklQD19F906ONQY4Ae0sdx03lDa6OD6mt+hkGU=)
3: 8A6AA178556111EDB7E45424C4F9AE02.roa (hash: EASpkdXObrJ8H1sWrr81zx66bGecEu9OLYPesUTFCoA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl
rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:39:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2687 (0xa7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F879, serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95
Validity
Not Before: May 12 19:39:24 2026 GMT
Not After : May 19 19:39:24 2026 GMT
Subject: CN=6a0381ed-a1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4c:8b:00:d4:13:4c:77:83:e3:61:43:3c:f2:
e5:63:52:f9:41:bf:a2:a0:06:a9:18:ec:22:d8:1e:
fd:3f:01:51:f3:0f:ad:22:c0:98:f0:1d:c0:59:18:
09:9f:29:8f:35:5d:0c:09:a1:cd:5c:05:b0:ab:f0:
e2:40:86:08:21:33:57:3a:fb:0b:5c:04:0d:d9:a0:
6f:e7:d9:c0:09:ef:8d:8a:aa:19:2f:7b:94:6d:7a:
55:18:0b:a0:21:81:3d:d1:ce:d3:cb:f0:d3:42:3c:
95:6b:87:f6:0a:11:e3:67:3e:42:f0:2a:2b:49:3c:
a4:4b:80:67:26:a8:cf:9c:ba:c3:59:f6:d3:c2:0c:
48:82:36:95:f4:e3:59:c6:56:fd:48:e4:e0:96:e8:
e7:19:0a:09:fb:5f:30:0e:77:83:1e:8f:68:e9:6f:
cc:2b:41:77:ab:f2:bd:d9:c5:0f:c0:99:ce:a5:89:
07:ad:a6:9e:1c:d9:a6:41:c8:49:b6:b8:31:d3:07:
2c:e5:b9:47:3f:23:1b:f1:00:c8:16:fb:3d:aa:ae:
36:dd:32:a4:84:98:46:76:e8:4f:83:16:5d:ec:48:
60:0c:9b:71:f9:91:a1:b3:fc:0e:74:5d:33:3e:89:
a5:b4:d1:36:86:15:07:39:d3:d5:42:14:a3:41:ca:
47:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:60:8E:24:C6:05:AA:40:F3:67:FD:EB:0A:0F:FD:B8:5D:A1:42:13
X509v3 Authority Key Identifier:
keyid:64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:4f:03:12:48:fe:33:42:c1:76:e8:1c:bc:eb:bb:42:5e:db:
ab:9f:3f:af:65:56:a4:22:0d:bf:70:8c:c5:95:47:53:f7:86:
b4:cc:5a:3c:c0:3f:b9:ec:1b:41:ff:bc:2e:f7:92:34:ec:c2:
36:b9:b0:4b:d2:da:88:29:94:47:e4:7d:e4:70:97:64:18:98:
ee:aa:bd:71:4c:c2:e2:e4:f3:42:48:11:af:b0:a7:1a:14:7f:
61:14:07:7f:d5:15:24:58:82:a2:ad:da:9e:d3:4d:cb:ed:29:
78:13:a1:40:ae:41:0e:7f:ad:42:9c:fa:a1:30:20:dc:a4:07:
b3:28:64:7e:ec:0c:86:8e:75:9c:f8:de:a0:ec:79:35:93:83:
d7:39:cf:d7:c6:7b:c0:f2:0c:dc:5a:fe:78:18:ee:7e:c1:38:
80:0b:69:fd:22:d1:bd:3d:38:91:6e:57:6c:5b:12:de:e0:6a:
db:d2:0f:7f:9f:4c:31:b2:97:16:4e:78:4c:52:06:17:6d:a9:
e9:66:1a:1f:43:88:aa:ee:7c:7f:bb:46:ea:8d:fd:33:cf:f0:
be:86:77:8f:a0:fa:be:bd:68:17:5f:77:de:a9:d6:60:f9:3d:
2c:e5:4c:f0:71:c7:5b:68:c5:cd:9b:40:bd:f1:2b:89:4c:a3:
1e:bd:a3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:09:23 2026 by rpki-client