
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft
File: z3nGX0tVAQ-yXObEW4yRnbCToy0.mft (raw, json)
Hash identifier: Y56SwT78V4hrt0AIn1uUUFqL7QUaIzRq+Ujd8qoK6Sc=
Subject key identifier: 73:D1:DF:9E:DB:71:D8:00:7E:23:CF:B9:E8:1C:AD:8B:17:18:31:27
Authority key identifier: CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D
Certificate issuer: /CN=A912E87E/serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D
Certificate serial: 013B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft
Manifest number: 012E
Signing time: Sat 13 Jun 2026 05:38:23 +0000
Manifest this update: Sat 13 Jun 2026 05:38:22 +0000
Manifest next update: Sat 20 Jun 2026 05:38:22 +0000
Files and hashes: 1: z3nGX0tVAQ-yXObEW4yRnbCToy0.crl (hash: eMm7ZvGdkGnmvWhVckCJ5m49Q89tExicS/hYwWmq4MU=)
2: A48892E4DE4A11EFACE66748C4F9AE02.roa (hash: 6I64utdnK0TaFg9y+W+RqybL90K1jeQS5liIOPne5so=)
3: F2DF64BAD28511F0A20E5C80C4F9AE02.roa (hash: XjB5jPSTt3eJTKS4dRa9T7cx4SalbQsD8ABjmrgjNZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl
rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:38:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E87E, serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D
Validity
Not Before: Jun 13 05:38:22 2026 GMT
Not After : Jun 20 05:38:22 2026 GMT
Subject: CN=6a2cecce-8f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f7:c5:d4:9b:fb:9a:5f:3c:ed:9a:96:42:7d:
a2:e5:45:bb:d6:53:43:a9:b3:1a:83:c7:0e:a9:42:
dc:30:4e:35:db:ed:e5:1e:d6:b0:b7:1d:a4:82:41:
3d:a3:fe:60:ee:c9:59:7e:61:f2:0a:5a:a6:17:61:
1e:e8:7a:be:d1:63:7f:a2:9f:61:7f:0d:30:f2:5b:
4e:65:09:7b:1d:3b:fb:ce:32:85:55:5b:63:a8:d5:
b1:06:c3:d3:c9:a9:74:35:d6:ad:ae:ce:bb:5e:af:
f4:fd:20:24:ba:7e:60:24:8a:2f:59:4c:47:b2:6f:
2d:9d:76:6e:9c:85:c3:01:4f:82:2e:21:38:e3:3b:
12:eb:5c:29:92:0d:d0:b8:1b:0e:a3:9e:7f:3d:28:
57:cb:5e:20:8d:f8:6c:bc:54:60:4b:5c:d5:6c:55:
ef:0e:00:41:89:43:4e:06:c3:a4:e2:2b:17:48:7a:
cb:27:97:5c:43:a1:ab:fb:ab:23:f6:f1:54:8b:7f:
30:7d:97:d0:dc:98:82:1a:4c:5d:52:77:80:89:c3:
87:55:c9:55:e5:43:c2:65:a1:cb:a2:1f:7f:b0:41:
05:4a:db:3e:2e:9c:61:31:89:f7:14:4a:2f:94:34:
31:4c:6a:01:aa:28:14:ce:01:5d:c4:6d:f1:56:e4:
d5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D1:DF:9E:DB:71:D8:00:7E:23:CF:B9:E8:1C:AD:8B:17:18:31:27
X509v3 Authority Key Identifier:
keyid:CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c8:6b:aa:a0:17:e0:60:15:af:02:50:b5:b1:3e:4e:82:d1:
49:c2:96:b0:b6:36:c0:c6:de:50:56:ca:c2:33:8a:43:2b:de:
36:06:33:54:c3:f5:2e:d5:9d:4d:47:78:97:ac:40:c5:52:6b:
55:f0:0a:a8:5c:4e:cc:00:f2:19:76:a1:3d:bd:74:ac:23:0f:
77:4a:36:dc:a7:bb:0c:70:27:44:c0:82:31:1d:8f:82:14:b2:
5d:cf:b6:3f:66:5c:f1:b2:34:97:53:fc:be:a5:6c:1d:f0:18:
49:65:43:50:d8:2c:84:57:a3:f6:cc:95:9e:f6:7c:0b:f8:6c:
eb:3a:aa:9d:c9:84:ed:78:1f:b2:66:59:26:15:8b:c2:65:c3:
fa:4c:b2:19:b7:0b:da:e3:ac:02:24:0a:ab:62:ef:9b:7c:f4:
48:d3:21:7b:b2:2f:a8:52:a9:f1:f0:16:a0:77:52:9b:a0:cf:
95:7e:3f:2a:c2:3c:98:81:7b:5c:60:58:d4:68:eb:f1:69:20:
d3:bb:63:31:d8:3c:b2:72:ed:70:d8:30:9c:d9:5d:5e:0d:24:
1f:fd:1c:f8:bf:4f:51:29:6c:ff:f7:92:c8:14:05:19:53:31:
91:0d:85:b2:82:11:f2:77:77:60:66:4f:13:b1:42:da:61:bd:
c0:04:71:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:54:49 2026 by rpki-client