
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
File: r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft (raw, json)
Hash identifier: o7HIBhvajmSSp94JrhwDqKRClE6ScyziJXBm7qNlmZI=
Subject key identifier: 21:77:A6:E7:6C:3B:81:5B:8E:AB:47:2D:EA:E9:69:F5:96:36:43:28
Authority key identifier: AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6
Certificate issuer: /CN=A912F1CA/serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
Certificate serial: 92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
Manifest number: 87
Signing time: Sat 13 Jun 2026 07:44:44 +0000
Manifest this update: Sat 13 Jun 2026 07:44:44 +0000
Manifest next update: Sat 20 Jun 2026 07:44:44 +0000
Files and hashes: 1: r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl (hash: l7j9buGkdbrAYLzupI71UzevZjNOLKYtAOgg0++/pfg=)
2: 2DC89280AB5E11F087B3A63DC4F9AE02.roa (hash: OWRTx8KpVw3aAexIAQhAzl19KW5AxihgsszlMUbzCIw=)
3: 3DA866FACE8E11F0B0195B54C4F9AE02.roa (hash: sHZWg+rU11rfUXJ4Q8l6qWY6glFT+3CM23A66tmDljo=)
4: 2E4F17E2AB5E11F087B3A63DC4F9AE02.roa (hash: Cn7vfzmjy06xdvrZ5nmmboVajIyo3gJm1O3bt7lM1ik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl
rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:44:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F1CA, serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
Validity
Not Before: Jun 13 07:44:44 2026 GMT
Not After : Jun 20 07:44:44 2026 GMT
Subject: CN=6a2d0a6c-1663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:8b:a9:be:d8:97:ad:c3:4c:ff:51:ea:2b:
70:96:98:34:5c:21:ca:8b:4d:bd:94:87:34:9e:c2:
0f:53:31:9c:a7:ce:a3:2f:89:56:1e:57:bd:df:ee:
0d:42:7b:ee:68:b9:a3:be:c7:cb:bb:75:66:34:0f:
23:8c:91:fa:9d:47:98:75:cd:cd:8d:22:ee:6d:f7:
03:3d:5b:0d:b3:4d:8e:23:a0:50:92:08:46:a8:dd:
55:ed:b9:ee:91:3d:17:66:3f:dc:d4:7c:fc:6f:4b:
16:64:53:e2:df:17:be:02:e9:e6:91:dc:63:b8:34:
13:f0:90:11:b6:d0:d8:22:35:81:92:f1:3d:bc:c1:
17:c3:17:8f:f3:49:11:9f:01:df:dd:fc:04:da:26:
9a:ef:e1:44:04:6e:70:e2:0a:72:50:a1:c8:d9:d4:
c0:8d:09:71:0b:b0:bd:10:67:1a:3d:c8:5c:12:21:
96:04:d9:19:7b:21:1d:5f:3f:a8:d2:4d:55:8a:77:
69:34:17:20:4a:68:76:eb:81:be:57:95:df:29:51:
8a:4d:96:a6:04:5b:74:06:c0:f3:6b:cf:25:19:10:
40:9d:04:91:43:f9:f2:b8:b3:8a:2f:0b:3c:ab:f0:
e6:4e:60:6b:4a:02:8a:8d:9d:79:bb:7c:de:89:f9:
92:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:77:A6:E7:6C:3B:81:5B:8E:AB:47:2D:EA:E9:69:F5:96:36:43:28
X509v3 Authority Key Identifier:
keyid:AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ec:74:c4:80:38:b8:31:be:62:14:7c:c6:66:9e:f2:da:7a:
1a:37:b2:85:f8:7d:85:82:84:5a:a4:0a:f9:a2:bd:79:30:b9:
1f:16:b9:09:9c:77:77:76:b3:0d:87:ef:fa:e0:f6:71:05:58:
a2:2b:90:5d:a1:5d:35:d7:00:93:3a:52:88:0b:17:fd:79:ed:
51:06:66:73:fd:57:a3:59:8f:17:f8:04:3a:d7:2c:a1:28:15:
7d:9e:1a:71:ae:f6:2f:4b:d3:e1:19:de:8a:a0:ae:bc:52:63:
8e:9e:65:1a:8b:c0:7c:ae:9d:7b:a0:40:7e:10:c3:66:c3:56:
9c:2e:88:a4:bc:db:7f:79:ec:b4:36:1e:21:e8:8a:0b:48:04:
d2:e1:b7:d0:bc:bf:03:5a:86:73:29:9c:fe:21:95:df:ab:6a:
be:68:2f:cd:46:10:59:50:53:b8:5a:da:5e:df:07:26:43:d0:
b5:94:bb:e4:ec:d3:c1:17:e4:92:3b:2b:94:80:04:c4:de:05:
a0:92:a6:16:b4:50:47:72:04:1e:bd:75:a8:c1:21:98:2a:e9:
45:0b:b4:09:7b:3a:26:80:1b:43:2c:9f:37:3b:db:b7:fa:39:
de:16:01:35:94:50:b7:9f:06:c4:79:9c:4c:ae:92:2d:6e:45:
bb:33:e9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:32:12 2026 by rpki-client