
$ rpki-client -vvf rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
File: czPiYYsz1lD-GNg_eCVFwj1PWp4.mft (raw, json)
Hash identifier: ja5BDEck4GauJcmUPOWri9WwBQytMnu11RpvCkmQ2ZA=
Subject key identifier: 42:63:BE:32:4D:22:BB:17:D3:5B:45:21:2A:85:89:31:E3:46:DA:32
Authority key identifier: 73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E
Certificate issuer: /CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E
Certificate serial: 0D10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
Manifest number: 0D05
Signing time: Tue 12 May 2026 18:13:04 +0000
Manifest this update: Tue 12 May 2026 18:13:04 +0000
Manifest next update: Tue 19 May 2026 18:13:04 +0000
Files and hashes: 1: czPiYYsz1lD-GNg_eCVFwj1PWp4.crl (hash: 09NOMcBlBrmLaIb8XUZGUC/SQe3foFqs9o8H1cZozBE=)
2: 0C1D4BF8038F11EA82150D4AC4F9AE02.roa (hash: P1ioyOhHYSe5vrV+nsOcBMRyefJ8DwpbFXIw1wGtzrQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl
rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:13:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3344 (0xd10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918098B, serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E
Validity
Not Before: May 12 18:13:04 2026 GMT
Not After : May 19 18:13:04 2026 GMT
Subject: CN=6a036db0-0cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fe:28:ce:fd:ac:c6:0e:d5:cb:d4:65:f9:56:
5c:92:f1:b6:e9:1b:b1:5a:73:9d:f0:f4:cc:3d:06:
6e:58:9f:4b:b2:21:01:05:63:6b:09:5e:ec:7c:2e:
a5:ff:9e:6f:17:3e:63:27:a5:49:a2:92:ce:dd:1c:
85:b3:56:f8:bb:88:fb:4a:e8:ff:a9:b0:d9:68:be:
ee:cf:22:fa:59:d0:7c:3e:76:02:ec:74:f9:03:55:
9e:11:40:44:5c:0e:ef:c8:d3:f7:5c:62:a8:ac:bb:
0b:e4:00:e5:28:55:19:99:7b:cc:e2:5f:09:d1:5a:
a0:eb:fd:e6:57:d1:00:7a:ae:d8:74:24:95:43:14:
88:78:58:0e:ac:46:61:48:17:85:b2:b8:91:b8:9b:
4b:3c:fc:a2:3c:a2:f0:97:ef:bf:71:e6:ed:e6:70:
2b:a9:bf:b9:3e:43:0f:d9:53:98:bb:59:60:7e:55:
18:05:d6:c0:f5:f5:17:a4:1b:62:fc:21:4f:8a:a0:
23:e8:a0:1d:df:c3:7e:36:f3:5d:cb:c7:f4:02:fb:
5c:e6:e8:e9:b9:36:aa:88:cd:91:92:a5:3c:64:a4:
53:74:a2:b1:49:bf:b9:63:47:32:66:2d:17:ef:ce:
69:b7:d5:80:68:e0:da:4a:9f:83:79:93:21:bd:fd:
57:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:63:BE:32:4D:22:BB:17:D3:5B:45:21:2A:85:89:31:E3:46:DA:32
X509v3 Authority Key Identifier:
keyid:73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:75:58:5d:ff:69:a8:05:af:d7:09:43:5c:61:cc:2b:51:c4:
09:fe:58:f5:2a:59:82:87:d9:e9:ff:07:93:12:41:95:5c:40:
a3:c2:57:be:9a:91:a5:de:42:b1:bf:62:b0:3f:86:2d:6f:ac:
e8:37:00:38:bc:79:98:19:67:c4:9c:8b:9a:78:e7:ae:b1:af:
c5:7d:71:72:51:df:b1:a4:9a:61:92:77:11:06:fe:e3:d1:23:
7f:d7:67:1f:b6:12:91:b5:c1:8e:74:e0:c7:2c:4f:92:43:8f:
3d:2d:73:6a:fb:0d:a5:c2:68:f0:31:7c:d9:b8:00:23:3f:41:
0a:01:aa:f2:6a:a2:9f:0d:bd:e4:37:18:fc:8c:26:26:f7:09:
e8:22:93:c2:b1:9c:d6:50:d2:11:79:71:b9:16:7d:29:02:ec:
62:3d:38:81:b6:36:24:51:4c:ac:58:2f:60:4c:2a:ac:ea:52:
c2:ae:8d:f9:a4:1e:fa:7a:2f:67:db:3e:8c:ba:00:bc:84:df:
8a:54:fd:75:ad:4e:7d:47:8c:8b:39:1d:b8:b0:fa:e6:54:26:
83:a6:17:85:9b:c4:23:77:30:07:61:b9:cd:94:8e:bb:97:ca:
99:83:5d:84:dc:7e:b9:f1:aa:9b:29:b5:65:e8:99:5a:5b:aa:
42:51:ee:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:37:28 2026 by rpki-client