
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
File: CZJdtntKud9gBue9K8HY7cjMfhk.mft (raw, json)
Hash identifier: nbFMY6j3+tzB9lk6HOHy+DkF+YV79UmpsndclRKFbns=
Subject key identifier: FE:7A:B5:8A:7A:AC:05:27:C9:87:80:AB:8B:0E:AA:9C:30:EC:77:CC
Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
Certificate issuer: /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Certificate serial: 0C01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
Manifest number: 0BDC
Signing time: Fri 12 Jun 2026 18:58:10 +0000
Manifest this update: Fri 12 Jun 2026 18:58:09 +0000
Manifest next update: Fri 19 Jun 2026 18:58:09 +0000
Files and hashes: 1: CZJdtntKud9gBue9K8HY7cjMfhk.crl (hash: 4ih9SKhbxMLqMsB1ayE3AB2GPrZqmDI2rO6fCHwj9R0=)
2: 4580DDDEEA0A11F09D7A92E76F6F56BC.roa (hash: dP56HqiOS0iPtAVucNZ2wR/KoNuwl+rRD4b0wwXFjDs=)
3: AEACE2F45FED11F1B089404D7B47A888.roa (hash: 8qt7Nk+q7mX3XH4uLY+f1lds3c65NXoG7uS8l6CZVxE=)
4: C43C22501DEF11F1B60466D9163D8C67.roa (hash: xsIr4KFI9a9YHG0N66oMLWH8AurLcb1F9zQyd9fncF4=)
5: CB926A64E58711F0B2CA0EBF446F56BC.roa (hash: 8Zv5MMAKEdi89aa0T4smQVaAo99bnl+ZMZOEdaQmF7Y=)
6: 6932258C2F1C11EDA3E29B09C4F9AE02.roa (hash: 53LWwpRVZrDTw/6Ogh5Ek7qxm98TR8hKYo+nI3Iokbw=)
7: 450DDD84EA0A11F09D7A92E76F6F56BC.roa (hash: kJnM7EoAenCH3PCIlTPoGD0IpncArPRKG0ulKlcXT+o=)
8: 44942606EA0A11F09D7A92E76F6F56BC.roa (hash: EeLJby/8EluYAUfNa1xVSHc8kon4tRGoZL1/tkyFn7k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:58:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3073 (0xc01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Validity
Not Before: Jun 12 18:58:09 2026 GMT
Not After : Jun 19 18:58:09 2026 GMT
Subject: CN=6a2c56c2-986e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:92:f1:dd:b7:63:67:0b:3e:49:fc:64:a4:a2:
20:aa:c4:69:2c:d4:9d:9e:7a:30:98:ab:b3:a5:28:
1c:95:9d:87:d7:cf:2a:46:5f:0e:e3:38:7d:1c:ae:
86:35:cf:e4:d6:49:54:6b:3f:91:4c:1c:37:fb:93:
0f:3b:a5:19:11:35:77:46:00:46:75:89:7c:8b:e9:
38:4a:ed:75:da:46:fd:86:31:97:fd:80:b4:0f:cb:
bc:95:7c:e4:cc:35:52:57:61:0b:ea:39:fe:9d:c0:
78:29:1e:13:23:29:1c:99:70:c4:65:e8:f3:f8:0c:
fd:2d:ba:bc:f6:7c:61:1c:46:0e:f3:b6:67:3f:88:
39:f7:21:df:22:bc:c1:ba:27:d2:49:d5:24:05:84:
b6:48:b8:90:49:d2:c7:f6:55:40:23:5b:f6:b8:e5:
e4:1b:de:bb:7a:19:c7:61:30:3c:6c:e3:e0:8d:92:
ab:05:d6:2e:c4:d3:20:3c:1f:f4:a7:d7:2d:81:c0:
3d:da:5e:a6:28:d0:73:40:36:a2:30:cf:a3:f8:87:
b4:9e:6c:3a:de:fc:4f:f7:86:9e:ba:87:bc:37:d5:
ca:e5:e0:17:bd:38:9a:5a:16:c2:a9:d5:eb:6a:6c:
22:42:fb:e9:0f:14:d3:8b:3e:12:fd:0c:31:90:75:
13:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7A:B5:8A:7A:AC:05:27:C9:87:80:AB:8B:0E:AA:9C:30:EC:77:CC
X509v3 Authority Key Identifier:
keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:27:ea:28:e2:78:59:7b:5a:5e:c9:b5:dc:c7:75:91:10:61:
d4:61:07:90:b3:a2:6c:40:14:35:7a:89:d5:60:71:ff:08:b3:
dc:2c:4b:1d:48:ac:5f:47:d0:59:a8:c0:17:5e:35:88:a1:f2:
37:9c:0e:64:6e:f7:ff:88:3a:ce:a9:99:ed:d7:b4:a9:8c:0d:
e5:5b:13:0b:46:c5:0c:72:0f:18:dd:91:04:7b:27:1c:cc:3a:
4e:cb:7e:4a:b6:82:78:3a:ff:85:54:ee:ee:78:83:ab:ce:4f:
a4:3d:40:b3:f7:5c:33:58:dd:93:db:de:c8:8c:c9:e1:8a:31:
1f:9d:29:23:1f:d0:c1:75:09:bc:74:63:b0:6a:fd:c2:c9:fd:
56:f8:ca:7f:fc:73:d7:0e:5e:85:a7:d6:cb:93:aa:a5:09:dc:
2c:58:8b:9d:68:58:21:09:5e:a2:e9:b5:f9:d7:b6:24:f1:ec:
d0:da:fa:df:5d:81:16:0a:1e:a3:3b:d1:04:30:90:f6:c6:f8:
79:b7:ec:03:dd:20:51:39:24:7c:5a:3d:77:1a:a8:5b:14:e6:
9f:f6:af:68:a2:01:5f:13:e7:34:cc:21:e0:b1:13:35:82:91:
e1:9d:ce:42:6d:fa:5f:5d:47:66:2a:4c:63:dd:c2:66:80:ce:
9c:eb:00:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:15:28 2026 by rpki-client