
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C770/3104367610DE11F181719257083D8C67/-z8Zsyb_nMe75aygUzQYb14xAQs.mft
File: -z8Zsyb_nMe75aygUzQYb14xAQs.mft (raw, json)
Hash identifier: KuGa2Cg0cF/hILZx4gb6kq3kNmTAOIrXzmgnMNPrqnU=
Subject key identifier: 90:DD:B9:A6:30:65:68:D1:33:18:F0:C7:F4:DE:37:FC:14:A9:55:81
Authority key identifier: FB:3F:19:B3:26:FF:9C:C7:BB:E5:AC:A0:53:34:18:6F:5E:31:01:0B
Certificate issuer: /CN=A912C770/serialNumber=FB3F19B326FF9CC7BBE5ACA05334186F5E31010B
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-z8Zsyb_nMe75aygUzQYb14xAQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C770/3104367610DE11F181719257083D8C67/-z8Zsyb_nMe75aygUzQYb14xAQs.mft
Manifest number: 3C
Signing time: Sat 13 Jun 2026 08:37:26 +0000
Manifest this update: Sat 13 Jun 2026 08:37:25 +0000
Manifest next update: Sat 20 Jun 2026 08:37:25 +0000
Files and hashes: 1: -z8Zsyb_nMe75aygUzQYb14xAQs.crl (hash: RokElF+MGkzjwPT/XUy/nFJST7hoXCqWQ7lwnwdiJTg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C770/3104367610DE11F181719257083D8C67/-z8Zsyb_nMe75aygUzQYb14xAQs.crl
rsync://rpki.apnic.net/member_repository/A912C770/3104367610DE11F181719257083D8C67/-z8Zsyb_nMe75aygUzQYb14xAQs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-z8Zsyb_nMe75aygUzQYb14xAQs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:37:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C770, serialNumber=FB3F19B326FF9CC7BBE5ACA05334186F5E31010B
Validity
Not Before: Jun 13 08:37:25 2026 GMT
Not After : Jun 20 08:37:25 2026 GMT
Subject: CN=6a2d16c6-5754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:e1:05:47:29:f9:56:31:18:2a:47:49:b5:
cd:20:44:de:bf:19:17:9c:1c:18:34:05:01:4c:e5:
60:b9:40:7b:52:79:30:05:13:68:32:be:75:ca:68:
74:a0:e7:a4:5a:66:83:e7:ed:d7:66:00:35:59:8c:
f0:40:88:a4:60:88:2a:2a:24:90:5f:d7:e3:b4:64:
5b:c0:e8:c2:0a:d2:7d:d0:6a:82:fd:ff:14:45:17:
b5:8c:9f:87:14:b1:d1:34:b9:06:01:2c:97:48:f2:
db:68:50:f9:82:9f:c3:28:8c:ae:7d:78:f8:c9:2e:
79:69:0f:a5:68:7d:8e:31:8a:88:cc:f1:24:1a:12:
fc:00:a3:75:24:92:1e:4b:af:8c:c5:8d:09:bf:3f:
7e:95:dc:35:e7:a6:95:be:90:97:84:40:d1:18:53:
e8:7a:f5:e0:f4:93:2c:f6:78:9d:ba:5d:c5:b2:f9:
10:68:71:2e:27:a5:98:86:44:30:86:08:98:91:17:
6e:24:20:c0:8b:69:8a:ee:a1:a0:a1:55:a9:11:a5:
8c:c6:3a:3f:0c:2c:98:67:1d:67:59:db:59:37:59:
4c:70:d2:91:e2:06:d3:20:d4:a1:98:b2:b0:ee:50:
cc:f9:0d:3d:7c:8f:cc:35:dd:4b:0d:7b:f6:91:f6:
40:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DD:B9:A6:30:65:68:D1:33:18:F0:C7:F4:DE:37:FC:14:A9:55:81
X509v3 Authority Key Identifier:
keyid:FB:3F:19:B3:26:FF:9C:C7:BB:E5:AC:A0:53:34:18:6F:5E:31:01:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C770/3104367610DE11F181719257083D8C67/-z8Zsyb_nMe75aygUzQYb14xAQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-z8Zsyb_nMe75aygUzQYb14xAQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C770/3104367610DE11F181719257083D8C67/-z8Zsyb_nMe75aygUzQYb14xAQs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:c0:01:46:d8:cc:da:72:f7:ab:f0:77:64:2d:5b:19:a6:8b:
b5:1a:97:0d:3c:33:29:c7:6a:78:2f:2b:52:8b:e2:40:66:6b:
21:9b:49:0a:b2:4e:b2:27:41:8a:35:df:c8:4c:08:56:40:8d:
1f:bf:67:86:fb:66:5b:46:5a:9b:cd:2c:12:0f:15:6c:5f:9d:
c5:93:f8:12:74:df:36:66:8e:c0:57:c1:bc:b6:55:c3:ab:36:
37:6a:f9:ed:0b:02:88:0f:87:e8:ad:ae:8b:5a:9e:4a:01:e9:
46:af:49:2b:38:f5:83:ea:65:87:09:8d:a7:25:f6:3e:99:55:
58:2d:4f:ea:32:cd:76:b4:8a:fb:11:9a:bc:b0:42:30:b9:d1:
76:88:fe:ff:8f:6d:cf:a1:45:7b:32:56:82:cc:16:ce:22:ed:
c4:73:ad:72:53:6f:c0:fb:af:10:17:ef:e2:f1:cf:cb:ee:cc:
a7:65:54:01:80:e1:3a:ba:24:0d:d4:ff:96:3d:9d:e1:b5:e9:
b5:23:4f:60:a3:ac:07:c1:fb:6f:f7:49:ae:bd:88:72:b8:86:
82:41:77:a7:ae:69:af:6d:de:82:65:cf:73:e5:96:aa:65:1d:
ff:88:19:b1:ba:0e:3a:36:ba:f3:78:25:28:d0:c6:cc:9a:8b:
07:1b:f2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:15:19 2026 by rpki-client