
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
File: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft (raw, json)
Hash identifier: mi2gJJl4cQpshzQ4s52qpLDQIOlxzDRZjGoBJMObIbQ=
Subject key identifier: AA:11:EC:FF:DB:F5:2E:A3:0D:3C:45:C2:0E:73:8B:49:30:8E:E3:48
Authority key identifier: 67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F
Certificate issuer: /CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
Certificate serial: 0D35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
Manifest number: 0D26
Signing time: Tue 28 Jul 2026 18:18:20 +0000
Manifest this update: Tue 28 Jul 2026 18:18:20 +0000
Manifest next update: Tue 04 Aug 2026 18:18:20 +0000
Files and hashes: 1: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl (hash: yIiDv2NXW+fTc2r9wrOFblnr7WSevKgBXeZOfes904g=)
2: 5BF38D62058E11EA96051368C4F9AE02.roa (hash: mfe6dh8HV+B3Izq2cj3w4opPN3aJ9/HVDtDRjSUh3Hs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl
rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:18:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3381 (0xd35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A6CB, serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
Validity
Not Before: Jul 28 18:18:20 2026 GMT
Not After : Aug 4 18:18:20 2026 GMT
Subject: CN=6a68f26c-dfe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:76:9f:23:36:f4:fc:20:f9:41:93:0e:89:
9b:d2:a8:e7:e2:84:33:d8:4e:c8:8f:7a:c7:26:73:
46:21:4d:09:49:90:21:82:4e:84:20:2c:a0:ef:72:
35:20:7e:19:a3:96:8a:6c:4f:96:81:72:f1:17:e2:
48:ad:19:13:16:2b:89:0e:ea:ab:c0:0c:e7:5f:dc:
03:98:31:d5:1a:86:b3:27:f8:08:a8:92:c4:14:39:
e5:49:70:c2:2b:c3:9e:b3:55:cc:e3:84:4f:e3:c5:
85:96:f7:5c:23:c3:64:fa:47:fe:92:0d:a1:c9:04:
fe:28:aa:f1:8c:75:d0:c0:8c:2c:1e:59:8c:36:e5:
79:36:6b:82:b5:1c:44:03:b2:97:1b:fb:94:e1:a2:
5e:16:89:07:b1:de:81:66:f4:f3:60:f8:59:df:ed:
c5:75:f1:65:a4:c4:46:4f:8c:37:06:51:2b:d3:a2:
32:88:f8:40:37:c0:ed:6d:d8:b8:1c:65:1f:4f:34:
a1:70:6c:fc:ac:db:78:a8:7f:e6:b9:e6:ee:81:d7:
4c:0e:ab:42:1c:47:49:5a:27:b2:a2:ee:60:5c:bd:
b6:ce:be:12:4e:01:b8:9d:99:37:4a:0b:e6:9d:fb:
14:42:d1:9e:09:69:e4:09:cf:cb:58:64:06:1e:a1:
d6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:11:EC:FF:DB:F5:2E:A3:0D:3C:45:C2:0E:73:8B:49:30:8E:E3:48
X509v3 Authority Key Identifier:
keyid:67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:82:95:2e:fa:31:55:70:e0:bd:53:0d:8e:92:02:fc:6f:d8:
dd:53:0b:47:e8:0b:4f:67:69:98:a9:0e:38:4a:1d:2e:ac:4c:
86:d0:de:13:e3:d4:af:15:2c:cf:ce:80:71:6e:b7:ec:de:30:
60:85:bf:59:3f:b0:d5:ba:c2:44:68:34:97:26:f1:78:ba:0e:
56:15:a7:5d:35:41:1b:c8:27:f4:72:c9:c9:cd:ae:3b:be:7e:
7a:3e:94:f5:df:51:7b:38:7f:89:bd:03:45:f6:87:89:c3:bc:
aa:00:a6:d8:63:38:ea:25:5e:ef:7a:b7:ec:d8:e3:d5:cb:56:
ea:9b:33:18:e4:6b:c9:f2:b4:c1:60:86:d9:0e:6b:e2:18:f8:
aa:d9:a0:e8:ec:3a:ce:d9:80:82:b1:9b:55:64:9e:67:18:98:
2c:8f:d0:10:5a:25:3e:04:b7:e4:b2:0a:f3:99:43:ff:a2:2f:
60:23:df:f6:d0:4c:e5:be:d7:64:83:6b:c6:c1:3c:d3:2b:cb:
df:3d:2d:90:94:de:2b:b5:4a:df:12:89:32:5c:64:40:39:b3:
b9:4e:fb:eb:ad:26:e1:21:a1:87:1a:eb:af:69:18:f9:ac:63:
6f:73:80:6b:40:a6:70:1c:a0:ac:ec:27:67:23:8d:f4:4b:1d:
fe:6a:10:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkE2Q0IxMTAvBgNVBAUTKDY3OUNEQjI1NUI1Qjc3NTgwOTEwNUU5MEUwMDIzNDQ5
RjcxQzZCNkYwHhcNMjYwNzI4MTgxODIwWhcNMjYwODA0MTgxODIwWjAYMRYwFAYD
VQQDEw02YTY4ZjI2Yy1kZmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxQp2nyM29Pwg+UGTDomb0qjn4oQz2E7Ij3rHJnNGIU0JSZAhgk6EICyg73I1
IH4Zo5aKbE+WgXLxF+JIrRkTFiuJDuqrwAznX9wDmDHVGoazJ/gIqJLEFDnlSXDC
K8Oes1XM44RP48WFlvdcI8Nk+kf+kg2hyQT+KKrxjHXQwIwsHlmMNuV5NmuCtRxE
A7KXG/uU4aJeFokHsd6BZvTzYPhZ3+3FdfFlpMRGT4w3BlEr06IyiPhAN8Dtbdi4
HGUfTzShcGz8rNt4qH/muebugddMDqtCHEdJWieyou5gXL22zr4STgG4nZk3Sgvm
nfsUQtGeCWnkCc/LWGQGHqHWgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKoR7P/b
9S6jDTxFwg5zi0kwjuNIMB8GA1UdIwQYMBaAFGec2yVbW3dYCRBekOACNEn3HGtv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTZDQi85NkE2MEJCNjA0
RkMxMUVBQjNEOTk0MTVDNEY5QUUwMi9aNXpiSlZ0YmQxZ0pFRjZRNEFJMFNmY2Nh
MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1o1emJKVnRiZDFnSkVGNlE0QUkwU2ZjY2EyOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QTZDQi85NkE2MEJCNjA0RkMxMUVBQjNEOTk0MTVDNEY5QUUwMi9aNXpiSlZ0YmQx
Z0pFRjZRNEFJMFNmY2NhMjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANoKVLvoxVXDgvVMNjpIC/G/Y3VMLR+gLT2dpmKkOOEodLqxMhtDeE+PUrxUs
z86AcW637N4wYIW/WT+w1brCRGg0lybxeLoOVhWnXTVBG8gn9HLJyc2uO75+ej6U
9d9Rezh/ib0DRfaHicO8qgCm2GM46iVe73q37Njj1ctW6pszGORryfK0wWCG2Q5r
4hj4qtmg6Ow6ztmAgrGbVWSeZxiYLI/QEFolPgS35LIK85lD/6IvYCPf9tBM5b7X
ZINrxsE80yvL3z0tkJTeK7VK3xKJMlxkQDmzuU77660m4SGhhxrrr2kY+axjb3OA
a0CmcBygrOwnZyON9Esd/moQOQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:17 2026 by rpki-client