
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
File: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft (raw, json)
Hash identifier: ggTM0C/z2SgDouIO7vy5EX8iFKo7KfbVAXCueLBWSXk=
Subject key identifier: 45:C6:64:4C:BA:88:9E:D6:09:CB:33:51:01:DF:16:9A:D1:C2:31:58
Authority key identifier: 67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F
Certificate issuer: /CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
Certificate serial: 0CE0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
Manifest number: 0CD5
Signing time: Sat 28 Feb 2026 18:24:05 +0000
Manifest this update: Sat 28 Feb 2026 18:24:04 +0000
Manifest next update: Sat 07 Mar 2026 18:24:04 +0000
Files and hashes: 1: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl (hash: LNk483+rBi9I8Ni6VDez3p6Dx6z7aAhzSfGdaF4TgvA=)
2: 5BF38D62058E11EA96051368C4F9AE02.roa (hash: DKAvDLUT5bnOSiug52PiVjjxuC7Hqw+mBPK6i01vUBo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl
rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3296 (0xce0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A6CB, serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
Validity
Not Before: Feb 28 18:24:04 2026 GMT
Not After : Mar 7 18:24:04 2026 GMT
Subject: CN=69a332c4-60d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e7:c3:b8:c3:c4:6d:84:ff:86:85:7d:f5:00:
02:8e:c6:cc:78:2d:5d:67:08:b4:14:3d:f8:7e:3f:
7d:b2:89:52:c7:5d:d0:17:3d:8a:17:c6:dd:c3:a3:
2b:12:0e:2d:a2:31:c4:b8:5c:34:aa:27:a1:e1:10:
9e:3b:94:c0:b4:61:8d:b9:70:ce:56:f1:4c:c6:cf:
7c:0a:94:8e:e2:74:a3:68:d4:2b:8f:54:40:0a:c6:
85:5e:7f:a7:f7:cc:a5:76:50:48:10:66:9d:6f:2d:
7d:cb:3a:e6:ea:8d:66:c7:eb:6e:df:af:e2:02:b9:
27:22:58:56:e4:a4:5e:94:97:dc:9d:33:8c:d7:43:
2d:37:c6:6d:1f:fc:b0:5e:62:2f:6f:2f:ac:e3:f7:
67:a4:fe:1b:37:14:da:3f:e1:47:bc:66:5d:6d:12:
70:2b:da:d8:77:71:7b:7e:37:b2:a2:9a:c6:00:29:
66:04:03:28:ad:3f:3f:4d:f8:52:07:96:16:3b:a1:
04:42:42:e6:44:6f:24:d2:68:c3:1f:e9:55:f1:f7:
48:02:fd:2c:bc:4f:8c:ab:3a:f7:49:8d:f2:18:4d:
12:cf:19:12:2a:10:71:f9:e9:44:aa:54:85:6e:88:
27:0b:a5:96:b4:b8:12:f6:e5:47:60:cf:4f:6e:b4:
a4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C6:64:4C:BA:88:9E:D6:09:CB:33:51:01:DF:16:9A:D1:C2:31:58
X509v3 Authority Key Identifier:
keyid:67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:8a:df:8d:f2:47:46:59:d9:ac:a6:ba:54:fc:88:1c:0d:92:
ca:4f:9c:48:5f:dc:a7:a9:1c:8a:50:63:7c:4a:ee:3e:51:66:
9a:c6:08:58:96:62:7d:66:bc:a1:59:6a:20:58:f1:80:e5:f2:
43:61:e1:97:5d:c4:70:b8:af:e7:7a:e5:83:32:d0:05:65:d4:
42:16:1d:ee:f4:72:93:dd:8b:0d:6c:db:88:1b:55:e6:d0:a6:
7a:78:9c:c0:91:6c:91:56:7d:ab:ee:48:ed:ba:22:5e:eb:da:
3a:39:18:ae:02:8e:55:2e:90:f1:a1:d2:56:7b:de:98:b9:35:
aa:ed:98:fb:47:df:3e:48:c4:1c:d9:46:bd:65:ba:2a:76:28:
53:ad:98:f3:2a:55:b5:ba:8a:a6:62:51:c0:fd:9f:71:6e:5d:
a9:bd:45:92:19:d5:10:d2:26:de:3e:2f:2b:8c:90:0b:1c:cc:
ea:3f:5f:9f:b7:ca:6e:a7:ab:51:1e:b3:af:34:a6:0a:5d:1d:
96:d7:93:df:96:3b:64:db:24:75:02:42:2d:91:57:2c:e7:eb:
16:0c:37:68:d6:b0:ba:dc:e6:fd:ff:55:13:e3:47:7b:91:39:
4a:40:a7:4f:41:47:57:a2:ed:9e:f1:79:2d:1c:6e:b4:0d:d6:
1b:75:57:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:40:05 2026 by rpki-client