
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft
File: Z849nCahS83_mzOU0zVXZoIYoVY.mft (raw, json)
Hash identifier: 0tF6iDBVodN71z59kP4hEqzD6vAFhgTly7QgCJMVz/0=
Subject key identifier: AE:95:A7:45:BF:6C:F5:1D:33:C4:C7:80:E9:50:11:61:2D:CB:27:8A
Authority key identifier: 67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56
Certificate issuer: /CN=A911A557/serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft
Manifest number: 0117
Signing time: Wed 29 Jul 2026 07:18:57 +0000
Manifest this update: Wed 29 Jul 2026 07:18:56 +0000
Manifest next update: Wed 05 Aug 2026 07:18:56 +0000
Files and hashes: 1: Z849nCahS83_mzOU0zVXZoIYoVY.crl (hash: bREJS80ga6EH1LFrHzcrM+VRbpEmiGymI19qG+5CiH8=)
2: C1D2BAAAE87711EFBE7C537EC4F9AE02.roa (hash: mBhPexFJCjhETjgQ1BBwLO6vkuwTxq2sdBYZtB3P694=)
3: 4550C0B2E86D11EF9AF14D6FC4F9AE02.roa (hash: rWwijXJAVvwDQWA01RBFKoOEEpLL7p1+vQhY5pyzCLI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl
rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 07:18:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A557, serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156
Validity
Not Before: Jul 29 07:18:56 2026 GMT
Not After : Aug 5 07:18:56 2026 GMT
Subject: CN=6a69a961-1f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:01:df:c9:3e:05:6a:cd:a1:f5:96:3d:86:e0:
9d:98:35:92:ff:35:35:f8:78:9c:4d:7f:49:8d:f5:
6d:9f:30:81:56:3b:c1:36:37:6a:05:c1:66:b5:b0:
67:92:5f:b5:7c:f4:25:b0:f6:df:8c:06:53:9d:7a:
ff:1d:7e:b1:df:94:08:1d:6c:4b:e8:ac:b9:a5:3a:
92:21:6b:6d:5f:6a:6a:a2:d8:0d:e3:ec:60:9e:e2:
c4:37:b7:2f:7f:67:d7:03:67:00:b6:03:73:49:04:
e4:63:8c:ba:29:b1:7f:e6:d4:4b:bd:76:56:95:7c:
7d:eb:d0:fa:f0:dc:7f:53:2f:a0:1f:c1:78:13:a3:
89:8a:2b:6d:48:94:f7:d7:42:7d:8c:13:c5:eb:d9:
b3:34:29:4d:93:4f:9e:60:3a:62:a9:ab:81:64:84:
54:a6:a2:b8:d3:e0:88:6b:c1:25:c7:f7:3f:8d:12:
2f:36:24:b1:6a:d1:9d:ea:32:72:06:c0:83:8c:84:
70:16:85:03:c8:0f:38:c5:d2:52:3a:e7:cc:93:21:
90:a9:d6:38:40:07:a6:51:af:53:ab:e6:52:ce:3b:
d6:61:5d:25:3f:26:32:41:77:de:75:17:1a:50:c4:
d5:36:32:86:24:ee:28:29:96:b3:6f:58:f7:9d:61:
56:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:95:A7:45:BF:6C:F5:1D:33:C4:C7:80:E9:50:11:61:2D:CB:27:8A
X509v3 Authority Key Identifier:
keyid:67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:34:3c:39:71:34:5d:e1:f0:87:79:af:9d:52:75:41:d2:87:
c6:4e:2f:d5:75:fd:d8:64:77:6f:8f:c9:28:7b:77:d6:b9:98:
72:12:bf:3b:cb:c2:e7:fc:06:f7:26:1c:9d:00:de:d6:e4:b3:
6a:22:4f:f0:c3:36:50:00:aa:9e:87:44:2e:07:99:d8:da:69:
74:20:08:ab:ac:12:59:76:6a:9e:b9:e5:82:ff:88:d9:f5:60:
03:89:54:37:2e:a6:f4:ae:f6:f6:85:dc:ff:a7:4d:91:42:c7:
65:6c:4a:95:e8:b4:37:39:6e:9f:ee:e0:96:28:cd:2a:c3:98:
48:96:64:ba:4e:7e:1d:b9:f4:ab:1a:7f:af:5a:46:31:1b:23:
52:45:54:61:9e:3d:3f:a0:9c:bc:8c:c0:2c:27:7c:3f:6f:38:
58:17:c3:bb:78:9f:3a:6f:93:a5:70:f3:a4:c6:60:34:70:72:
0e:c7:ad:bf:8e:c6:84:25:d5:ea:ed:38:99:e6:63:d2:ca:22:
ef:a3:3c:ae:c7:7d:21:54:fc:ea:d6:57:56:5f:71:c0:9a:5e:
dd:39:6c:76:ba:f9:aa:46:5f:4a:a0:a4:20:75:e9:96:7d:8d:
0b:4c:1e:d2:45:d6:a6:0a:4d:5b:39:12:36:61:a4:46:3e:9c:
f1:85:81:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:38:25 2026 by rpki-client