
$ rpki-client -vvf rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
File: MZfydASVOdoqReLMBqpcyHTmJ28.mft (raw, json)
Hash identifier: KmwHUcur/EJfM1Jc5iFgk57vp+vw+lkBRM3g0aWPxZg=
Subject key identifier: 0F:B7:C4:D4:E6:81:CC:97:56:2B:6C:CA:E3:C6:43:7A:36:0C:5F:9D
Authority key identifier: 31:97:F2:74:04:95:39:DA:2A:45:E2:CC:06:AA:5C:C8:74:E6:27:6F
Certificate issuer: /CN=A919BF94/serialNumber=3197F274049539DA2A45E2CC06AA5CC874E6276F
Certificate serial: 16
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZfydASVOdoqReLMBqpcyHTmJ28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
Manifest number: 16
Signing time: Thu 23 Jul 2026 11:04:09 +0000
Manifest this update: Thu 23 Jul 2026 11:04:08 +0000
Manifest next update: Thu 30 Jul 2026 11:04:08 +0000
Files and hashes: 1: MZfydASVOdoqReLMBqpcyHTmJ28.crl (hash: Av+A2A1mxeujNa4AeCsgKmslpzwwg1vxYpIGdmUtSHI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.crl
rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZfydASVOdoqReLMBqpcyHTmJ28.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:04:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BF94, serialNumber=3197F274049539DA2A45E2CC06AA5CC874E6276F
Validity
Not Before: Jul 23 11:04:08 2026 GMT
Not After : Jul 30 11:04:08 2026 GMT
Subject: CN=6a61f529-c468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:02:9c:1e:41:3c:0b:51:c9:3e:4f:f0:98:
b6:e4:c8:e9:81:de:23:ad:99:fd:66:c8:28:dd:fe:
19:14:c9:7d:eb:d6:7c:65:18:99:7c:ed:42:81:36:
17:f8:88:65:18:e8:f2:f2:6d:cb:80:ae:2c:40:35:
85:a5:f3:52:57:ae:f1:47:dc:d4:16:cf:5d:73:ee:
1d:1a:11:8b:2f:d1:c4:3a:98:22:03:f8:61:a6:88:
fa:4c:6a:8a:2a:d5:da:d9:11:54:69:d1:24:62:40:
a1:1d:5e:ea:fa:1a:d4:cc:ce:16:e5:35:4f:70:88:
e7:54:bb:97:5b:bc:47:7a:e2:61:f9:ce:d8:17:bd:
b1:06:fd:25:9c:e7:8f:fb:19:18:26:51:a3:c9:92:
7a:36:3b:23:f0:e9:e1:fd:33:fe:20:5c:51:44:d7:
1a:39:a0:99:60:68:45:db:ea:22:c7:66:d7:0d:b8:
85:5a:41:9d:61:28:d6:bb:2f:c9:4d:b3:2f:da:8b:
70:ff:03:83:42:3e:cb:0d:70:8e:18:20:ea:ab:fb:
ad:cb:f3:42:82:b3:65:67:16:08:32:07:9d:1f:c0:
b5:9e:72:a1:de:08:ad:63:14:06:8d:56:9b:c6:d0:
ba:ca:9b:38:7e:42:30:5b:91:df:09:a4:6f:7a:ee:
eb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B7:C4:D4:E6:81:CC:97:56:2B:6C:CA:E3:C6:43:7A:36:0C:5F:9D
X509v3 Authority Key Identifier:
keyid:31:97:F2:74:04:95:39:DA:2A:45:E2:CC:06:AA:5C:C8:74:E6:27:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZfydASVOdoqReLMBqpcyHTmJ28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:81:87:e5:5d:4a:4c:5f:64:8c:cc:d6:bc:d0:59:f9:08:6d:
f6:eb:38:73:a1:6d:33:57:01:2b:25:2e:65:54:02:88:e3:66:
1f:a9:a1:9b:0a:89:de:74:46:8e:3c:58:7c:2c:73:3e:ff:7c:
2d:f7:ab:cc:28:62:aa:ab:3a:15:53:31:b5:20:27:38:dc:a7:
b7:21:ca:d0:51:c9:a7:ab:f1:b9:66:b7:34:9f:3b:d7:4b:61:
32:5c:9e:ab:61:3b:6f:7d:72:df:1b:9e:07:36:5f:be:34:0c:
39:3f:ff:0c:ce:d0:1d:e1:f3:34:05:90:9f:f7:53:85:1a:4c:
b1:7c:7a:6a:aa:89:42:72:d7:d1:46:5a:e6:6b:2f:e8:bd:8d:
d7:2a:36:45:53:0f:0c:a5:4c:12:43:b0:06:09:c7:1e:52:4a:
20:98:ba:86:ec:46:cb:68:ff:b1:75:02:5c:09:ba:5a:17:f7:
be:28:41:8d:68:fc:57:5a:b3:f7:20:cb:b4:59:3e:4c:90:e9:
89:6f:dc:58:02:a8:e6:81:e8:d5:83:c1:7c:50:52:b2:69:34:
60:0c:21:52:c9:0e:fd:2e:93:df:65:7b:f1:29:66:37:ee:a4:
24:6b:3a:f9:fe:fb:d5:ce:79:04:b5:66:f5:99:79:16:d8:9a:
6c:e6:ba:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:55 2026 by rpki-client