
$ rpki-client -vvf rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
File: czPiYYsz1lD-GNg_eCVFwj1PWp4.mft (raw, json)
Hash identifier: aHowBdogKkCIw1r00RRUo/VxSM5BC0Gaxxk4bXhtE6M=
Subject key identifier: 5A:D8:EA:33:C5:4A:0C:8D:72:6E:B0:84:2C:98:08:57:6A:E9:C3:C3
Authority key identifier: 73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E
Certificate issuer: /CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E
Certificate serial: 0D35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
Manifest number: 0D2A
Signing time: Fri 24 Jul 2026 18:24:56 +0000
Manifest this update: Fri 24 Jul 2026 18:24:55 +0000
Manifest next update: Fri 31 Jul 2026 18:24:55 +0000
Files and hashes: 1: czPiYYsz1lD-GNg_eCVFwj1PWp4.crl (hash: V9De3CqbPm4l8A9Pvf7I01CtPnPWh54EsxarWB3nxDI=)
2: 0C1D4BF8038F11EA82150D4AC4F9AE02.roa (hash: P1ioyOhHYSe5vrV+nsOcBMRyefJ8DwpbFXIw1wGtzrQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl
rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 18:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3381 (0xd35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918098B, serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E
Validity
Not Before: Jul 24 18:24:55 2026 GMT
Not After : Jul 31 18:24:55 2026 GMT
Subject: CN=6a63adf8-f42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:47:59:a3:70:54:5b:a5:0c:76:dc:f2:40:e5:
b2:57:c2:98:97:5f:70:b9:ae:95:dc:67:70:52:b4:
dd:48:71:68:9c:a7:4d:c6:ab:45:36:bf:39:e2:ab:
75:59:4f:5d:66:30:c3:de:39:27:73:a0:ce:96:14:
4b:3e:5d:46:19:14:e6:0c:b8:19:1e:e7:d5:41:3e:
35:61:2a:9c:d3:63:99:08:e8:57:2c:79:38:ba:f0:
95:2c:81:08:d6:f1:54:ce:c3:ce:14:0d:94:41:e4:
93:62:ec:3c:df:62:e8:9f:5f:27:79:24:02:a6:bd:
5a:d6:a5:b7:1c:c0:c2:9a:27:e9:5f:fa:77:1c:49:
5b:00:db:b4:d7:d8:83:eb:0f:bd:20:bb:97:61:6f:
9d:0c:e6:51:d4:43:91:fc:3a:b9:e6:d4:e2:92:dd:
c7:fb:bf:85:42:57:cd:de:ba:14:ab:fe:5f:42:84:
df:dd:95:83:48:72:08:95:75:0c:64:77:65:fa:53:
33:98:c4:72:38:51:59:b2:3f:68:5c:c2:7d:c8:74:
e1:7a:2d:92:a7:4a:bb:0c:00:97:db:e3:4b:3e:50:
b4:fb:04:d6:a3:92:3d:7a:b0:78:cc:56:98:0c:2b:
d6:9a:4e:42:ad:8e:2c:a4:8c:26:48:2c:c7:9a:c1:
34:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D8:EA:33:C5:4A:0C:8D:72:6E:B0:84:2C:98:08:57:6A:E9:C3:C3
X509v3 Authority Key Identifier:
keyid:73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:93:3c:e4:56:1c:ac:fe:5b:d6:95:23:f2:24:be:38:e4:b5:
d2:cc:12:96:ff:3e:fe:16:6c:f0:e8:9e:a8:d6:f2:71:67:7f:
ed:2b:2b:cc:7d:a1:1c:91:fd:a4:7b:24:51:6f:e1:af:ce:d4:
09:d4:95:7d:fd:a1:dd:7a:11:fa:d1:0f:27:01:49:09:30:db:
a7:33:63:5a:0e:94:9d:0a:13:03:88:e7:ec:d5:10:30:1e:95:
e8:79:28:09:f5:a3:70:46:f8:8e:fc:c7:d4:b8:71:13:da:af:
89:fc:7b:93:69:eb:17:80:62:36:e5:11:c6:87:45:6d:a3:60:
12:41:26:33:49:3c:76:b5:53:76:92:b4:ed:25:f1:9c:7e:a9:
d9:68:44:89:3f:f1:b2:f7:35:0c:7c:07:13:f8:fd:aa:55:f4:
35:32:7c:c0:0e:38:30:b0:17:a6:b1:5c:f9:01:8d:25:eb:fb:
78:a3:c7:ed:bd:8a:7e:fa:62:e3:db:ee:80:47:61:34:57:ee:
b1:9c:18:10:8c:91:5c:4f:dc:1f:34:96:73:fe:d1:e6:fa:64:
d0:38:5d:a7:01:05:cd:c5:f8:6e:26:4f:fa:b8:8d:59:0f:92:
57:80:a8:d0:79:89:09:bd:d3:66:08:9b:e8:9c:53:43:20:8f:
f4:c6:2a:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA5OEIxMTAvBgNVBAUTKDczMzNFMjYxOEIzM0Q2NTBGRTE4RDgzRjc4MjU0NUMy
M0Q0RjVBOUUwHhcNMjYwNzI0MTgyNDU1WhcNMjYwNzMxMTgyNDU1WjAYMRYwFAYD
VQQDEw02YTYzYWRmOC1mNDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn0dZo3BUW6UMdtzyQOWyV8KYl19wua6V3GdwUrTdSHFonKdNxqtFNr854qt1
WU9dZjDD3jknc6DOlhRLPl1GGRTmDLgZHufVQT41YSqc02OZCOhXLHk4uvCVLIEI
1vFUzsPOFA2UQeSTYuw832Lon18neSQCpr1a1qW3HMDCmifpX/p3HElbANu019iD
6w+9ILuXYW+dDOZR1EOR/Dq55tTikt3H+7+FQlfN3roUq/5fQoTf3ZWDSHIIlXUM
ZHdl+lMzmMRyOFFZsj9oXMJ9yHThei2Sp0q7DACX2+NLPlC0+wTWo5I9erB4zFaY
DCvWmk5CrY4spIwmSCzHmsE0UwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFrY6jPF
SgyNcm6whCyYCFdq6cPDMB8GA1UdIwQYMBaAFHMz4mGLM9ZQ/hjYP3glRcI9T1qe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDk4Qi9BQ0RENDI1NDAz
OEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFsRC1HTmdfZUNWRndqMVBX
cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2N6UGlZWXN6MWxELUdOZ19lQ1ZGd2oxUFdwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDk4Qi9BQ0RENDI1NDAzOEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFs
RC1HTmdfZUNWRndqMVBXcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbZM85FYcrP5b1pUj8iS+OOS10swSlv8+/hZs8OieqNbycWd/7SsrzH2hHJH9
pHskUW/hr87UCdSVff2h3XoR+tEPJwFJCTDbpzNjWg6UnQoTA4jn7NUQMB6V6Hko
CfWjcEb4jvzH1LhxE9qvifx7k2nrF4BiNuURxodFbaNgEkEmM0k8drVTdpK07SXx
nH6p2WhEiT/xsvc1DHwHE/j9qlX0NTJ8wA44MLAXprFc+QGNJev7eKPH7b2Kfvpi
49vugEdhNFfusZwYEIyRXE/cHzSWc/7R5vpk0DhdpwEFzcX4biZP+riNWQ+SV4Co
0HmJCb3TZgib6JxTQyCP9MYqkQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:14:55 2026 by rpki-client