
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
File: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft (raw, json)
Hash identifier: ZzkOSZWwXdowsACwQqvT2IP0SCzdplIUKUrj0re8uDc=
Subject key identifier: D6:A9:C0:30:CD:B8:96:62:7A:CE:A0:D6:19:AC:DD:35:C4:BA:E7:44
Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Certificate serial: 057C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
Manifest number: 04D5
Signing time: Fri 17 Apr 2026 00:12:19 +0000
Manifest this update: Fri 17 Apr 2026 00:12:19 +0000
Manifest next update: Fri 24 Apr 2026 00:12:19 +0000
Files and hashes: 1: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl (hash: tob9BTphSDg4jvY/S7LV+YSXKAIvHY9ACn3RkRhE/uA=)
2: 3050FB0E9F7511F085D9D70FC4F9AE02.roa (hash: VV9KXmgRKf+FOm7HICubh1e+YuZrynDmGju0xNgq3eg=)
3: 8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa (hash: eFW9dgfgDhQ46WggGF+7xnQXK6hHzPnIupphxiZfKs0=)
4: 36DD8A88B68A11F09D04E950C4F9AE02.roa (hash: GWrEAedNxq26S9u3npD3fV7eXN2tOVtJvTAoCK+jrPA=)
5: 69A02F92B69011F0AFB90732C4F9AE02.roa (hash: 2GDXW34y0UeqYApW2yftSPb+tT2ESSz3aUeD8fKFqqs=)
6: 5E009276B69011F0B54BD22FC4F9AE02.roa (hash: w0/Y20ZivT/a5tcFD2rl9Yy1BY1/AxocW5RgryvCT0U=)
7: 37D5EC8CB68A11F09D04E950C4F9AE02.roa (hash: 6aVnE8xoctQeLsx9ZDOTJHTWJS72yU7v5odJKGzLwnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:12:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1404 (0x57c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Validity
Not Before: Apr 17 00:12:19 2026 GMT
Not After : Apr 24 00:12:19 2026 GMT
Subject: CN=69e17ae3-a6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:67:ff:cc:21:24:eb:37:db:3f:6f:13:8b:61:
e3:bc:8a:57:bb:b9:9a:67:ed:53:08:6d:2b:a8:e2:
aa:c4:85:1b:ce:16:58:74:d1:5d:15:0d:29:16:1a:
8b:91:91:00:60:fa:90:6a:3a:b1:cb:e2:09:d9:56:
69:0b:50:97:d3:27:c8:73:52:08:ad:75:fd:bd:4c:
9b:db:bf:dd:df:59:46:9c:b9:59:79:23:3a:fd:b9:
9d:e8:9e:ab:fe:ec:04:ff:c3:ea:75:77:e0:20:87:
1e:2b:27:69:8f:d6:38:c1:5b:cf:62:b2:98:15:5c:
52:a0:1c:01:ce:dc:28:e7:c9:23:47:e7:6f:06:32:
93:20:ee:28:5a:68:81:4c:5a:0c:2d:40:64:5d:f3:
f6:92:1c:a9:dc:da:6c:fe:6c:6b:bd:16:05:04:9a:
ed:11:63:b4:3e:dd:ac:5e:5a:4e:c8:c8:a1:f5:38:
a2:5d:60:a0:29:ae:a6:7d:98:bf:3d:18:8f:e9:e2:
06:f2:8b:3b:8c:d2:b1:ba:d7:5a:d9:c4:12:fd:67:
63:22:49:ab:9b:51:74:e2:0a:77:5d:bd:72:39:b9:
f7:c0:d2:cc:b3:77:78:ed:55:42:a8:4c:39:a0:31:
18:84:7b:51:66:9f:88:bf:b5:d3:0b:c4:85:a8:4c:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A9:C0:30:CD:B8:96:62:7A:CE:A0:D6:19:AC:DD:35:C4:BA:E7:44
X509v3 Authority Key Identifier:
keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:77:b5:33:ef:83:09:1d:e5:b0:5e:d3:eb:c1:2b:d8:9d:78:
1e:82:f8:02:29:84:b4:a2:4d:6b:a5:5f:b5:d0:57:82:47:35:
48:67:10:17:8d:a1:b1:a9:37:bc:f5:4d:58:5b:6d:ee:3a:d6:
26:3b:61:21:f7:10:9a:a0:8e:de:11:71:c5:71:e0:07:b5:da:
3a:bf:08:2c:f2:53:20:5b:99:3c:d3:0c:62:64:b9:f7:05:54:
9f:25:58:35:9e:cd:92:da:48:a1:b7:02:6e:a7:61:e1:c5:d0:
be:8d:3c:91:35:6d:f0:f0:6f:80:e2:11:39:9f:31:00:af:c6:
ea:3a:77:7e:77:55:5e:6e:10:f8:d9:e5:97:af:5c:28:9d:4e:
d9:71:fc:c6:a0:4c:80:1d:01:0c:dd:27:6b:31:6d:7e:b9:63:
cc:45:3f:98:76:23:df:23:fb:d6:e3:39:ab:c3:6d:4a:c6:47:
90:65:52:fc:44:86:56:d0:06:48:61:19:67:f4:bc:5a:de:cd:
46:f1:8d:91:62:58:d2:98:13:64:49:5f:f5:47:64:ed:a7:d8:
cc:96:1a:7b:f0:18:87:7a:6e:2d:f1:6a:b5:e6:ad:f1:4e:8b:
9f:be:e9:13:a4:7d:50:02:c0:d0:cb:c7:4a:6e:a7:b2:92:98:
bd:53:5b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:21 2026 by rpki-client