
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
File: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft (raw, json)
Hash identifier: j9x3tHsikEThgopTmoi3Y3kKm0uvLFMDsMhGRSI4/ek=
Subject key identifier: B7:D7:AB:1D:FD:A8:C2:97:A9:F3:A7:E6:82:74:26:88:14:CE:67:02
Authority key identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A
Certificate issuer: /CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A
Certificate serial: 0610
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
Manifest number: 0600
Signing time: Tue 12 May 2026 22:58:19 +0000
Manifest this update: Tue 12 May 2026 22:58:19 +0000
Manifest next update: Tue 19 May 2026 22:58:19 +0000
Files and hashes: 1: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl (hash: LJpKFDrPz7fPL9mhXEgfSSSUoCsQk1Q6Xkwk00mMAaQ=)
2: 64720824EF6611EB9A7EFE0EC4F9AE02.roa (hash: LL0n4MdM8xP/nWYSFwrtL/Mk/fArB+tqMpKJaeazPNc=)
3: 63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa (hash: DwFRC5Q8naeDAzyAtmNxc5ykjCbZ/7NV7SU48cPZy64=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl
rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:58:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1552 (0x610)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E0B2, serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A
Validity
Not Before: May 12 22:58:19 2026 GMT
Not After : May 19 22:58:19 2026 GMT
Subject: CN=6a03b08b-32cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:44:06:a0:95:58:4c:46:f7:9a:85:a1:f3:9b:
c5:a4:38:39:00:b2:1a:65:09:70:72:37:33:17:a7:
b6:21:bb:30:f5:e1:28:5d:31:2e:71:a0:65:57:42:
9d:2e:37:08:c8:67:1a:c2:34:7b:07:4c:64:58:b0:
25:0a:23:11:83:84:62:7b:ad:b5:35:e3:9c:9d:b0:
64:3e:f7:8c:e4:b1:5f:b1:8c:a6:c8:9e:c3:f5:61:
df:52:bf:ce:ab:10:27:5f:60:e8:be:24:1d:c4:a6:
47:73:f0:33:24:1a:44:8a:69:f1:ab:c7:3c:8c:70:
ef:51:d3:78:78:1d:2d:ae:f1:5f:f5:76:f3:28:be:
dd:c0:21:4b:c9:c6:f0:55:c2:1d:1d:f6:8c:42:42:
bb:95:e5:d5:2e:64:cd:46:33:c2:36:da:cd:bb:a3:
df:c9:72:87:2c:23:78:e1:ca:c1:0f:0a:c3:02:e5:
03:39:31:4a:af:6d:e1:71:59:26:ad:2f:2a:66:5c:
8b:6c:92:08:04:31:d3:67:b0:5c:51:05:5d:b7:06:
09:e6:ce:03:73:29:09:c7:a3:69:fc:53:b7:f0:ce:
eb:fd:64:7a:74:6e:42:31:9f:2c:bc:51:58:64:94:
44:37:eb:38:97:a0:9e:d1:84:41:5b:07:e6:f0:1b:
ba:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D7:AB:1D:FD:A8:C2:97:A9:F3:A7:E6:82:74:26:88:14:CE:67:02
X509v3 Authority Key Identifier:
keyid:0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:cc:0f:5d:86:9f:7d:7d:71:2b:22:56:61:8c:19:10:f8:07:
ce:a8:86:88:e1:a6:2e:49:a1:a0:a4:81:46:90:28:9f:72:22:
99:24:71:11:f2:b8:04:85:24:76:a5:c0:f0:56:6a:dd:87:a7:
33:64:f5:ca:08:a5:1f:f4:8f:6a:65:3f:4c:7d:46:8d:a5:e4:
16:95:56:ef:f2:02:ed:d1:92:14:aa:81:2d:0a:4b:65:d9:2c:
e8:66:20:78:d1:69:c3:1b:93:40:02:ee:6a:34:54:7f:e8:06:
2e:9e:1b:bf:e1:43:aa:6b:d1:31:59:c0:52:c8:63:79:9f:bf:
6c:5e:22:b4:9e:3c:bb:59:ca:42:01:c2:27:e4:e4:75:b3:61:
ba:c0:90:dd:70:d9:81:f7:97:40:5c:cc:45:c4:b7:cd:37:14:
4f:e8:89:42:3a:21:8a:74:5a:c8:9c:43:94:2f:c8:57:a9:41:
c3:75:07:fc:bd:6d:4c:c9:c1:47:01:11:ce:42:06:08:96:21:
97:9b:a7:b0:bb:df:ed:4c:93:1b:eb:de:bc:1f:0a:3e:5f:99:
71:3e:6e:36:e3:64:a8:6f:9c:93:db:a8:3d:34:e0:aa:82:60:
8a:3a:9a:4d:94:d4:e6:9d:6c:08:fb:a2:08:15:b6:e0:81:29:
21:0b:2f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:35:52 2026 by rpki-client