
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
File: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft (raw, json)
Hash identifier: ITT8sEwg5Sz/iJXfOvy8cg7uFJWdxFhOMTOA0BYWzMY=
Subject key identifier: 34:1D:6C:83:4F:E8:88:26:57:F7:AA:C1:47:E6:11:E4:66:43:DB:9F
Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Certificate serial: 05A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
Manifest number: 04FA
Signing time: Sat 13 Jun 2026 00:14:26 +0000
Manifest this update: Sat 13 Jun 2026 00:14:25 +0000
Manifest next update: Sat 20 Jun 2026 00:14:25 +0000
Files and hashes: 1: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl (hash: E3CjLuz/T8GwKqwqyRV1LyL/aBU7ax0jj8S2lWVrJcc=)
2: 6ADAC8EE49DF11F19FFA59D5AE833773.roa (hash: Nj3mxAwy1SbNod9tF7k791WTI9ejpqbsgsRWdIlygZ0=)
3: 36DD8A88B68A11F09D04E950C4F9AE02.roa (hash: GWrEAedNxq26S9u3npD3fV7eXN2tOVtJvTAoCK+jrPA=)
4: 37D5EC8CB68A11F09D04E950C4F9AE02.roa (hash: 6aVnE8xoctQeLsx9ZDOTJHTWJS72yU7v5odJKGzLwnc=)
5: 8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa (hash: eFW9dgfgDhQ46WggGF+7xnQXK6hHzPnIupphxiZfKs0=)
6: 69A02F92B69011F0AFB90732C4F9AE02.roa (hash: 2GDXW34y0UeqYApW2yftSPb+tT2ESSz3aUeD8fKFqqs=)
7: 3050FB0E9F7511F085D9D70FC4F9AE02.roa (hash: VV9KXmgRKf+FOm7HICubh1e+YuZrynDmGju0xNgq3eg=)
8: 5E009276B69011F0B54BD22FC4F9AE02.roa (hash: w0/Y20ZivT/a5tcFD2rl9Yy1BY1/AxocW5RgryvCT0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:14:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1449 (0x5a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Validity
Not Before: Jun 13 00:14:25 2026 GMT
Not After : Jun 20 00:14:25 2026 GMT
Subject: CN=6a2ca0e1-11da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7d:ea:03:0a:0c:ea:b1:29:3e:26:51:20:7c:
e6:88:3a:58:66:28:fd:d8:2a:ee:c4:84:46:4b:d8:
b5:0d:43:27:35:6f:a0:8e:c0:bf:fb:89:c2:01:e7:
5b:ef:e4:a0:46:bb:b4:17:b0:7a:6e:99:8d:e9:d3:
43:28:fd:54:2c:9d:ff:92:69:16:6e:56:0c:db:0e:
5c:07:19:ab:dc:88:96:d8:e2:68:be:c6:ff:7c:08:
89:73:67:e9:f0:d9:35:41:aa:48:7b:ab:b3:5b:37:
88:b7:ac:8d:0c:9a:af:28:7b:92:d8:58:bf:d8:3a:
76:6d:c7:80:67:e1:c5:84:e3:d3:3f:8b:8f:d9:e1:
df:a8:ff:57:46:d0:99:37:b3:48:b6:39:96:fd:c9:
98:2c:e3:96:1a:9e:b5:64:d1:54:9d:96:b0:0b:c9:
31:27:f4:53:65:af:df:d5:45:76:62:77:8d:57:b2:
0a:fb:73:bb:5d:b9:02:46:35:d6:69:b2:df:ec:80:
fa:35:6f:79:18:fc:b8:28:0b:d6:05:69:8a:39:3f:
23:42:34:20:9d:3a:9b:d3:d0:91:2d:23:55:87:79:
de:be:03:44:47:9c:cb:05:73:92:22:14:95:ec:8d:
27:59:37:d2:64:aa:39:6c:27:57:a8:72:42:21:0c:
c5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1D:6C:83:4F:E8:88:26:57:F7:AA:C1:47:E6:11:E4:66:43:DB:9F
X509v3 Authority Key Identifier:
keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:6f:3c:17:a4:32:d0:8f:7e:27:99:bf:9c:a2:81:db:bf:91:
d6:ed:42:43:0f:10:e7:b1:34:03:df:0b:04:d1:5e:fe:39:34:
25:46:54:73:bf:92:06:e6:20:dc:0e:b8:24:9c:99:e1:bf:6d:
79:bf:88:b0:8f:84:21:18:39:fa:34:49:e6:a2:9d:20:32:fe:
83:73:5b:31:b8:56:ed:b7:62:59:e5:c3:4e:ec:05:1d:6f:09:
0b:4d:f6:c1:4b:e4:dd:98:e5:70:c8:ba:12:89:74:ca:c8:5a:
9b:46:51:b9:78:63:87:4e:1e:35:47:9c:b6:a6:d2:4d:22:92:
34:8a:db:c7:ca:91:fb:10:a4:38:18:92:84:46:70:f7:62:c0:
8c:9c:09:b1:9a:d2:cd:38:50:39:08:2c:00:dd:39:85:36:30:
4f:c6:2c:ae:8d:a0:91:68:9a:56:71:19:bd:59:34:2f:06:74:
b4:9e:89:1a:30:9e:1d:1b:2a:76:fb:b6:50:a7:c5:13:51:70:
45:e4:ff:e8:8a:c1:bd:fe:bf:15:7d:e0:49:de:97:34:1e:b5:
7a:aa:b4:4b:57:5b:59:44:29:05:df:b9:6c:d7:85:8e:b6:98:
67:70:a6:70:59:42:d8:4d:0a:6b:32:81:04:f2:52:1d:b7:00:
c7:92:9c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:57:29 2026 by rpki-client