
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
File: Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft (raw, json)
Hash identifier: JQYJaBbZl2V3yHkPGm/Mh2MawmqeGY7GsNne1on9Vng=
Subject key identifier: D9:CD:A8:08:BC:0B:E6:EC:CC:D9:90:2F:5F:45:A6:88:12:18:17:35
Authority key identifier: 67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4
Certificate issuer: /CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
Certificate serial: 0595
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
Manifest number: 0571
Signing time: Tue 12 May 2026 23:32:48 +0000
Manifest this update: Tue 12 May 2026 23:32:47 +0000
Manifest next update: Tue 19 May 2026 23:32:47 +0000
Files and hashes: 1: Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl (hash: R4UyeubkoBpnwCFluwKnITCxUu5X/8O8w4pV5jkhmrQ=)
2: 2C1F43848B5C11EFBFDAC30DC4F9AE02.roa (hash: QNIHjHWUNqsiL/hSt5OfIvTQlLC3HuVRGoPLRDJ/ZTc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl
rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:32:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1429 (0x595)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A7F, serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
Validity
Not Before: May 12 23:32:47 2026 GMT
Not After : May 19 23:32:47 2026 GMT
Subject: CN=6a03b8a0-8a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:ac:c1:79:a8:4c:b9:41:2e:87:9c:a2:62:
6f:00:07:f1:41:f9:42:94:66:e7:5b:f1:b6:b6:cb:
3d:dd:bd:64:2d:42:6e:67:02:59:34:fe:27:eb:1f:
4f:81:66:8f:5c:7c:09:0d:d7:af:b2:eb:93:1a:0e:
f4:08:03:c5:f3:33:92:55:2e:bb:98:0c:6c:fb:95:
df:98:7c:59:02:8d:8e:8e:60:e3:e2:00:a5:d2:da:
bf:98:1b:57:37:8b:60:c1:78:56:65:0f:fa:d3:25:
db:b7:1b:46:0a:84:21:d0:2c:5d:ce:d0:e7:fa:89:
4e:46:40:2a:4f:bc:4f:5c:77:94:5e:37:09:49:cb:
47:cf:f8:24:ee:54:cf:93:4c:b6:54:9a:50:de:24:
3e:65:66:59:48:15:38:9d:f2:6a:9b:a6:ac:bb:e5:
36:d8:d9:52:11:28:ea:f6:a1:a9:d0:20:84:d2:dc:
95:32:74:22:db:f1:65:46:19:1f:78:47:7c:88:46:
9e:8b:67:79:bf:92:39:31:cb:e2:da:e5:98:09:16:
60:2b:65:fc:37:48:21:ac:8f:18:cf:f9:cb:1a:36:
7f:21:83:ac:03:15:31:f2:68:c9:ba:c0:11:82:81:
fa:ac:38:82:de:5b:cd:ec:0e:93:a2:f6:48:ad:15:
b3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CD:A8:08:BC:0B:E6:EC:CC:D9:90:2F:5F:45:A6:88:12:18:17:35
X509v3 Authority Key Identifier:
keyid:67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:60:6a:3d:cf:75:7b:63:5c:da:9d:4a:29:19:60:f9:29:fe:
18:a2:a3:83:f0:9b:fe:99:b7:68:48:b3:64:5f:9a:5a:8e:a6:
d2:38:18:20:80:40:a1:25:2f:53:af:83:f0:20:88:a9:9d:2c:
3e:1d:d5:d4:85:48:d2:4b:ab:d1:80:8d:26:a1:fd:d0:d4:a3:
fd:64:d1:01:a0:7b:f5:78:7a:9d:47:76:45:b4:bc:c8:70:78:
c7:a7:10:e2:08:39:fb:72:37:79:96:52:47:a6:82:88:f6:3d:
0e:e1:47:23:70:dd:f1:fc:cc:ba:43:ed:46:03:21:bd:e9:7a:
e8:a5:3e:9d:64:b2:49:a5:6e:42:16:83:f7:08:f5:a9:fd:4a:
10:3f:92:90:08:9b:67:76:3c:cf:a2:42:7a:92:2d:0a:37:6e:
39:36:ae:ba:36:79:70:76:4e:b5:0e:ec:a3:75:96:6a:df:81:
af:5f:ff:c8:aa:db:e5:f3:7a:cc:8a:cd:8a:b8:31:53:42:f0:
ec:ea:2a:ee:62:22:ab:47:c7:0f:7b:5f:95:d7:5c:8c:cf:10:
7b:f6:23:11:b1:2c:38:59:97:35:d6:4c:70:0e:c8:15:e6:57:
06:a1:f7:34:23:d0:e6:31:b1:dc:e6:8b:a8:70:fb:30:7a:19:
b7:bc:5a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:41:37 2026 by rpki-client