
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
File: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft (raw, json)
Hash identifier: twtv28u8q+p0tiltsDKz9HljaiXsFuHrbeGKgIK3aik=
Subject key identifier: E4:5D:82:A4:1D:A2:35:10:5C:0F:C9:6C:21:78:46:2F:31:22:22:4C
Authority key identifier: 67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F
Certificate issuer: /CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
Certificate serial: 0CFE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
Manifest number: 0CF0
Signing time: Thu 16 Apr 2026 18:08:29 +0000
Manifest this update: Thu 16 Apr 2026 18:08:28 +0000
Manifest next update: Thu 23 Apr 2026 18:08:28 +0000
Files and hashes: 1: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl (hash: u6J9TTSzdzWAU0b/3wyJxwMSe7J3DMPAbGNRrltIXrA=)
2: 5BF38D62058E11EA96051368C4F9AE02.roa (hash: Q8Oy4wo2YJgEZIjyNWkq80rcuQvvGozUBEBODPVmJ6A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl
rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:08:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3326 (0xcfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A6CB, serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
Validity
Not Before: Apr 16 18:08:28 2026 GMT
Not After : Apr 23 18:08:28 2026 GMT
Subject: CN=69e1259d-2178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d9:1d:5f:74:97:cf:3f:a8:a0:ba:85:b3:3b:
7e:da:5b:d6:01:d0:93:d5:ee:4c:8a:dd:8c:0b:ff:
d1:8a:25:48:c4:f7:66:a3:a3:0b:b3:b6:2c:bf:30:
ae:a1:24:3a:df:81:c9:3a:17:63:94:80:42:69:ae:
7a:66:16:ac:2d:63:82:7f:e5:df:aa:67:b5:be:64:
98:50:0a:e8:3f:0e:99:0a:0f:1d:78:89:3d:eb:9e:
8b:dc:b0:b9:b6:7d:e6:c7:d1:4b:ae:99:27:75:23:
14:80:fe:81:9c:5a:fd:4a:e2:88:9f:01:f1:3d:fb:
ef:7c:59:fe:a1:96:3e:49:aa:9d:94:0b:4b:89:06:
b8:28:9a:4c:b6:78:c1:49:33:d8:4e:55:a6:60:b5:
be:e3:91:33:6b:e8:f3:12:76:c5:8c:38:41:bf:a0:
5a:31:41:81:b4:89:ed:bb:70:7f:a7:cc:42:08:c0:
48:7e:43:c3:d1:00:4c:6b:26:c9:48:59:5b:78:f9:
77:69:23:74:0a:c6:cd:56:ba:dd:d9:1c:82:c1:23:
1d:cb:54:89:13:dd:50:11:55:b8:9f:bf:95:ea:59:
4e:fe:b5:a8:e1:da:f3:0e:0a:96:cb:b4:a4:ad:7a:
35:06:9b:2f:6e:ca:5e:93:81:f7:fa:b4:f5:ef:86:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5D:82:A4:1D:A2:35:10:5C:0F:C9:6C:21:78:46:2F:31:22:22:4C
X509v3 Authority Key Identifier:
keyid:67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:e7:20:62:c4:91:a2:65:07:ec:64:9a:69:10:55:97:e7:77:
63:ec:c6:86:0a:97:8b:3f:28:54:ce:48:da:32:6c:35:4e:09:
a9:06:df:10:6f:50:98:b3:55:29:b1:38:e8:f4:8b:30:ec:9f:
91:c8:27:18:35:53:87:e1:19:f1:0d:17:0c:54:88:f0:dd:85:
18:64:f0:39:25:2e:4e:06:4b:1d:cd:0e:b3:c6:e6:de:51:32:
71:ad:38:23:a3:42:2d:c8:65:fe:cf:38:1a:88:17:37:8e:85:
bd:82:56:ad:29:67:56:5e:22:2d:d0:8e:56:d6:12:3e:70:15:
2b:cd:64:5d:1e:4c:95:69:4c:97:78:45:57:80:e1:68:ac:80:
34:c4:2b:9e:76:fd:45:7a:eb:03:92:5d:df:70:c2:cc:24:d0:
d3:15:98:50:a9:cc:66:2b:e3:22:19:d0:09:7f:60:4f:7a:2d:
37:5a:de:1f:ba:76:0f:6c:8a:d9:74:e7:ec:26:c1:23:a6:9c:
89:8e:2f:41:6f:0d:3e:aa:74:3c:14:b7:bf:a1:af:54:81:e1:
a1:44:48:8f:c7:5c:dd:c8:a1:25:46:3f:73:6d:37:d1:4d:5c:
eb:6d:ff:5f:80:e8:19:2f:b6:b8:78:f7:0c:a1:90:3c:6b:ab:
16:4f:78:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:36:06 2026 by rpki-client