
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
File: CZJdtntKud9gBue9K8HY7cjMfhk.mft (raw, json)
Hash identifier: AvfidDDZMRgd0wZgr5iFOIA9mNjk0hOaYPvrduhjEc8=
Subject key identifier: F2:02:52:E4:F4:A6:D4:3E:AA:58:48:B5:44:3A:50:1F:84:EA:47:E8
Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
Certificate issuer: /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Certificate serial: 0C24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
Manifest number: 0BF6
Signing time: Sun 26 Jul 2026 19:18:40 +0000
Manifest this update: Sun 26 Jul 2026 19:18:39 +0000
Manifest next update: Sun 02 Aug 2026 19:18:39 +0000
Files and hashes: 1: CZJdtntKud9gBue9K8HY7cjMfhk.crl (hash: rPrt4u5GmbaDoNohhuwONYLcL+zV3oOgbC8eSa9/mKY=)
2: B23294C079DB11F191EADDAD63A30FBC.roa (hash: SFZvdt6UQ0ZxOBmTem6qPhZ0NzjnAbq88lfVuRLHYkM=)
3: CB926A64E58711F0B2CA0EBF446F56BC.roa (hash: 8Zv5MMAKEdi89aa0T4smQVaAo99bnl+ZMZOEdaQmF7Y=)
4: C43C22501DEF11F1B60466D9163D8C67.roa (hash: xsIr4KFI9a9YHG0N66oMLWH8AurLcb1F9zQyd9fncF4=)
5: 6932258C2F1C11EDA3E29B09C4F9AE02.roa (hash: 53LWwpRVZrDTw/6Ogh5Ek7qxm98TR8hKYo+nI3Iokbw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 19:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3108 (0xc24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Validity
Not Before: Jul 26 19:18:39 2026 GMT
Not After : Aug 2 19:18:39 2026 GMT
Subject: CN=6a665d90-1c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:71:b6:09:ea:a0:70:75:23:0d:cb:d3:4d:
9d:f8:67:59:f1:9d:6e:df:10:23:ab:6e:43:4e:2b:
e3:71:28:33:65:f5:03:13:eb:34:73:f0:ef:b4:18:
fc:43:15:2b:db:62:2c:63:a0:ca:ca:3f:61:fa:f0:
0d:d6:23:a2:8e:10:b6:f0:f4:18:6a:5e:99:68:3c:
ba:49:ef:33:56:22:24:aa:79:94:a1:4a:06:f3:78:
79:58:36:a0:d7:25:fd:9a:71:c8:84:59:83:75:ce:
6a:13:61:98:35:14:fd:5e:c3:65:75:51:58:54:e4:
2e:e1:59:8f:66:e5:6e:0b:a5:a9:1a:07:ca:4f:ef:
a1:21:e7:19:23:cd:b0:d1:cb:2e:c6:d3:b2:16:fb:
f9:3a:38:6c:c7:92:60:6a:af:02:df:44:ed:a3:79:
a0:bf:8e:ab:d4:c0:a3:b6:3f:fc:9d:cd:04:28:37:
e8:86:ba:74:1c:d4:3c:6b:32:75:40:2b:04:4e:86:
f0:17:f0:85:e0:a8:44:5d:e4:5b:33:fb:25:c9:d3:
53:73:09:25:7b:79:c1:66:33:1a:0e:d9:31:2f:7f:
a9:53:d7:c5:ae:27:c1:0f:e4:80:04:f6:35:00:9e:
e8:09:25:59:ec:c2:92:d1:e5:b8:f1:b9:31:59:60:
03:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:02:52:E4:F4:A6:D4:3E:AA:58:48:B5:44:3A:50:1F:84:EA:47:E8
X509v3 Authority Key Identifier:
keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:cf:d5:44:1c:7e:00:15:c2:af:d1:4c:27:8c:2e:ea:73:a7:
ed:fc:af:92:79:c5:72:0e:1e:5f:cc:79:ab:d7:fb:f6:14:df:
b7:9d:23:83:e3:4c:51:dc:fd:87:82:58:23:d7:d2:18:3e:5b:
02:33:dd:11:85:27:3b:5b:65:7e:6a:e1:bf:44:2e:58:83:22:
21:6a:0f:00:6d:1b:2a:c2:29:c3:1e:6e:02:ac:0c:32:1f:19:
97:44:41:1d:18:18:d1:68:1f:c5:90:bc:26:7b:16:42:1d:ad:
11:1c:fc:3a:8c:75:e3:00:d2:5b:14:da:a8:c1:15:e6:4d:d5:
18:13:b9:a7:27:52:23:bd:3e:b4:37:00:f7:1c:19:14:40:5c:
6b:2e:9b:4a:cf:b4:e1:c4:fc:bc:a4:f8:c7:d4:0c:69:3b:68:
00:7f:28:5a:0d:e2:c2:d4:04:38:6d:17:d0:d1:e5:47:e0:9c:
f8:30:e3:40:0a:e7:3e:d0:7b:76:a4:b9:ae:e4:83:91:61:ad:
54:1b:3a:85:e9:f8:f5:5d:54:86:23:2a:3e:a0:77:77:e7:80:
df:a4:fa:60:3d:ba:c9:50:c4:9b:5e:31:8b:5b:5d:15:86:32:
e1:ef:a8:70:97:70:c4:05:0b:85:8a:78:a9:e7:d4:37:f7:c5:
97:e8:7e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:17:00 2026 by rpki-client