
$ rpki-client -vvf rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
File: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft (raw, json)
Hash identifier: 0EMuveeQm9VmCTbu85DJEzpqdUdGBxUfZZPc4NoQmks=
Subject key identifier: EC:CD:B4:CC:8B:50:83:A5:7B:95:A8:DC:DB:82:3E:B5:35:62:39:77
Authority key identifier: CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01
Certificate issuer: /CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801
Certificate serial: 02E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
Manifest number: 02DD
Signing time: Sat 13 Jun 2026 01:19:47 +0000
Manifest this update: Sat 13 Jun 2026 01:19:47 +0000
Manifest next update: Sat 20 Jun 2026 01:19:47 +0000
Files and hashes: 1: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl (hash: 67jctRhqMW5l71+NqPV88xqi8v26C5BtF1U9NVjiYvw=)
2: 71CE3962337511EDAE4C4121C4F9AE02.roa (hash: qH4NxxqpOA2c5T+RIxBIM6trIh5aFuyiHzxc/Np3eOs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl
rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:19:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 740 (0x2e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912672E, serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801
Validity
Not Before: Jun 13 01:19:47 2026 GMT
Not After : Jun 20 01:19:47 2026 GMT
Subject: CN=6a2cb033-ee29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:59:41:6b:d3:61:70:65:d8:a8:72:56:89:02:
40:21:23:3c:15:ea:b0:e9:9b:a9:e4:76:ae:12:21:
1b:70:5e:af:71:db:97:1d:f5:0c:87:79:c5:cd:bd:
bf:85:94:50:56:5d:f8:41:1d:c4:6d:eb:77:09:a6:
27:0c:27:19:f7:9b:58:80:0b:8d:20:b4:6a:a6:70:
f7:ff:2a:79:e5:f7:72:51:39:94:7c:3c:a2:5c:7d:
ae:4a:c5:f8:35:a0:a4:5d:02:c9:8d:1c:09:a0:71:
57:86:de:e2:c8:26:92:6f:11:a2:fe:39:9a:07:cf:
be:1c:de:20:d5:92:02:6f:67:75:34:50:35:7a:63:
38:bc:c0:c9:24:48:51:70:f1:d4:b1:ef:e1:29:29:
11:b3:46:fc:87:91:fc:6c:8f:df:f0:93:f4:bc:c8:
c2:98:a5:63:c3:a7:36:18:fb:7d:52:c8:a4:e6:49:
4c:31:d7:a5:77:b7:e8:5d:bc:23:0d:77:c2:ef:c9:
42:b8:e7:57:5f:21:65:5b:96:76:35:4b:62:d3:2a:
aa:fb:1d:6d:c6:3c:58:cd:a2:ba:52:11:51:c0:a7:
83:df:f2:82:c8:10:78:19:e8:e9:b1:5a:e2:14:9e:
eb:9d:bf:c9:4e:fa:85:01:b3:81:28:ee:32:f5:f0:
52:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CD:B4:CC:8B:50:83:A5:7B:95:A8:DC:DB:82:3E:B5:35:62:39:77
X509v3 Authority Key Identifier:
keyid:CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:28:09:6d:5b:e1:33:68:97:b7:bb:fb:44:7c:d1:83:92:03:
2c:94:35:a3:f7:29:57:97:03:29:20:42:69:39:79:b1:18:fe:
b6:3e:53:f9:65:3a:20:5a:ee:96:c0:c9:ec:33:05:a9:41:b2:
86:11:07:38:22:9d:43:4b:e5:67:94:bd:d9:44:d0:bd:0e:7b:
ea:48:8e:14:01:c7:d2:51:ae:48:a4:c3:24:8a:9a:00:18:c4:
73:59:e8:2d:42:80:d4:1c:dc:d2:67:f1:5f:f7:f7:02:55:8c:
26:87:40:88:f4:8c:26:98:67:9f:79:3d:a2:81:21:d8:3c:c8:
ce:01:0e:fe:58:ee:8d:87:6a:d2:8b:32:28:5c:7e:db:f6:47:
44:71:c6:98:18:cf:46:e9:b0:74:33:1d:84:70:db:3f:4c:6b:
a7:d9:6b:a3:12:7b:5e:07:b9:8c:31:c7:bd:4c:93:46:66:8b:
90:46:cb:c1:1d:08:64:52:fb:9f:e5:50:2c:f5:aa:de:40:ea:
88:78:59:69:0d:ab:89:d9:ad:2d:e8:7c:a1:00:7b:7f:e8:a9:
32:5d:f9:22:3f:08:5b:e0:9d:d4:86:e9:25:df:d3:c4:b2:86:
1c:8c:30:fb:5d:ff:f7:1b:ef:13:fa:af:d7:42:f0:63:5f:bd:
79:ca:28:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:50:46 2026 by rpki-client