
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft
File: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft (raw, json)
Hash identifier: noOJlBp0LuSgJ7OeULqxOzAYMzLS8y6eZrqhDLCxTh8=
Subject key identifier: 3A:7A:99:51:1D:F2:2E:33:F2:93:E7:E0:8F:32:F9:D1:82:73:49:7C
Authority key identifier: CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4
Certificate issuer: /CN=A912BE4E/serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4
Certificate serial: 067A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft
Manifest number: 0679
Signing time: Sun 26 Jul 2026 23:23:16 +0000
Manifest this update: Sun 26 Jul 2026 23:23:16 +0000
Manifest next update: Sun 02 Aug 2026 23:23:16 +0000
Files and hashes: 1: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl (hash: 9VwXGRXUienKbRVjtdCLKwIrrBFQlWh4evVZMOOdFug=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl
rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:23:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1658 (0x67a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BE4E, serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4
Validity
Not Before: Jul 26 23:23:16 2026 GMT
Not After : Aug 2 23:23:16 2026 GMT
Subject: CN=6a6696e4-9102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:21:e9:70:8e:66:58:67:5e:8a:bb:5a:32:7a:
96:74:6c:59:52:52:22:ab:ce:53:f5:3d:ee:09:5d:
97:50:a6:04:3a:9b:8c:02:30:f9:14:57:d9:c8:2a:
62:48:0a:e7:71:86:05:87:2c:4c:92:8d:e5:f6:29:
5e:ff:99:67:42:91:f7:25:46:dc:21:7a:f0:64:b8:
af:2a:21:bd:2a:3c:cd:58:97:52:45:da:2a:ca:87:
3f:0b:f0:e3:8c:8f:cb:e5:52:09:7e:f8:30:09:2b:
81:72:55:57:79:22:c3:90:ad:ef:88:86:cf:88:fe:
08:64:3e:37:47:90:36:29:ff:d1:b1:6c:d7:1e:de:
37:27:74:e6:69:d0:2c:19:0a:af:ba:3b:ed:8a:5c:
4e:79:bc:23:65:ad:a6:60:76:fd:42:fb:b8:2c:2d:
1c:ce:84:59:40:99:15:3e:e5:84:c4:36:46:13:65:
f9:86:0a:cf:a8:c6:88:11:6c:b5:04:44:49:71:3b:
6c:8d:62:6b:a9:d2:f2:4f:3a:82:e2:39:1d:d8:12:
cf:7b:bc:31:bf:a9:d5:95:64:43:3c:8d:05:f1:4f:
2b:3d:29:cb:bc:f5:fd:49:7a:e5:9d:8f:ab:bc:ee:
16:f2:87:d9:c3:45:d0:1e:d5:0d:69:a6:20:50:51:
9b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7A:99:51:1D:F2:2E:33:F2:93:E7:E0:8F:32:F9:D1:82:73:49:7C
X509v3 Authority Key Identifier:
keyid:CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:6b:a9:dd:ab:8d:c2:e3:d9:bf:e7:cd:a8:7f:43:a5:44:62:
16:53:2e:cc:d2:16:00:ba:8b:70:4d:21:82:c4:2e:b3:52:31:
fa:f5:ae:73:ac:08:72:4e:7f:24:e9:7e:a5:72:4f:f5:93:f1:
e8:b6:9b:44:d7:7c:10:db:e0:85:2a:74:2c:53:08:6d:19:61:
a9:a1:45:f3:39:50:24:18:75:e7:28:f2:f2:b7:47:cf:ff:9b:
2f:05:e1:f1:f4:23:4e:f4:4d:61:e8:79:36:6f:b0:15:ac:be:
5e:cf:3a:32:2d:29:56:da:6c:73:5d:b5:30:9b:d9:3e:e6:da:
74:81:5b:5a:1a:91:44:e0:99:8a:47:7e:10:c2:59:58:9e:c6:
1a:eb:40:96:c8:49:d7:45:6c:da:51:fc:19:03:07:a5:52:89:
25:98:66:75:83:a0:b5:a1:36:b9:01:f5:de:9b:be:3e:8c:b4:
88:58:70:4b:5a:81:24:d2:86:f0:41:7d:a0:f5:e3:51:79:01:
7c:13:98:85:b4:63:22:99:b2:fb:0b:a9:7f:ac:ac:c8:5e:02:
a0:22:13:a4:18:1a:13:18:86:88:5d:96:d7:0a:a0:4d:5a:ce:
b5:90:6e:08:3b:91:0a:54:57:7b:eb:a3:29:0c:06:57:7b:b4:
bf:8e:e1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:00 2026 by rpki-client