
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.mft
File: ZVgfndzt1kYkkalmT_KWJlal-FQ.mft (raw, json)
Hash identifier: 5BV9tUGSSqfLycs7zx2DVPQXhfW9EVJ9IFm88GjDwIo=
Subject key identifier: 8F:C2:61:11:4A:F4:C1:D3:A0:9C:AF:87:C6:9C:FE:0B:37:B9:D7:37
Authority key identifier: 65:58:1F:9D:DC:ED:D6:46:24:91:A9:66:4F:F2:96:26:56:A5:F8:54
Certificate issuer: /CN=A913EECE/serialNumber=65581F9DDCEDD6462491A9664FF2962656A5F854
Certificate serial: 2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVgfndzt1kYkkalmT_KWJlal-FQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.mft
Manifest number: 2B
Signing time: Mon 27 Jul 2026 11:07:55 +0000
Manifest this update: Mon 27 Jul 2026 11:07:54 +0000
Manifest next update: Mon 03 Aug 2026 11:07:54 +0000
Files and hashes: 1: ZVgfndzt1kYkkalmT_KWJlal-FQ.crl (hash: /2aqYqHvudVL+aX0OCEC1Xqxn+lbBfCabEC7SVmGlWs=)
2: 4D03668449E711F1BCBB7A79B5833773.roa (hash: LGCooesPA4j4gXzOKKJURalYXy31FTNPJfPPUMRN1nE=)
3: y_gp4LNOTzJ7X2SOJLw8ypIAsDo.asa (hash: S9Bc8mXLb9sh0aNUGQrKudMwGjEjDbETo3LwaIAst0c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.crl
rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVgfndzt1kYkkalmT_KWJlal-FQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EECE, serialNumber=65581F9DDCEDD6462491A9664FF2962656A5F854
Validity
Not Before: Jul 27 11:07:54 2026 GMT
Not After : Aug 3 11:07:54 2026 GMT
Subject: CN=6a673c0a-437e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:a1:36:8c:9c:33:49:dc:b0:04:7e:e0:1c:
ff:9f:c4:9a:61:7a:d5:f2:c5:8c:92:01:f4:ff:eb:
b0:d3:20:92:b8:5b:86:02:55:2d:52:cb:58:b9:e2:
17:f3:26:57:17:68:a1:2d:6a:be:0b:bb:73:a3:b0:
9e:35:3f:2a:7e:52:83:2b:e4:cf:d0:90:6e:10:dd:
b0:c0:b4:8b:fe:3b:5f:c9:f2:f8:42:ca:9c:60:6c:
c9:d2:df:1b:fc:2d:73:e6:70:a8:d0:9d:25:1c:80:
6a:bd:9b:a3:6e:02:87:39:11:24:2f:14:88:a0:b5:
be:dc:d8:37:59:2d:42:30:ef:de:62:36:c5:5e:c7:
c5:8d:7f:03:75:c2:18:ac:46:62:a1:4b:a0:6c:11:
8f:71:6e:1a:dd:30:df:e1:4d:a7:7b:50:8e:b4:1f:
d9:74:43:da:e6:44:46:31:ad:4a:d2:c3:85:af:be:
92:eb:e1:78:38:77:fd:82:f8:06:7f:04:f2:10:3b:
48:98:44:45:bb:a2:a2:8d:8a:b9:eb:79:3b:dc:58:
75:69:f2:7d:1a:1e:e2:79:4f:73:e1:56:f1:59:e1:
5d:82:83:f2:c7:73:66:b1:fd:b0:3d:0d:e4:2e:6d:
26:b3:7e:fb:a0:66:85:5f:73:47:75:54:7d:bf:45:
08:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C2:61:11:4A:F4:C1:D3:A0:9C:AF:87:C6:9C:FE:0B:37:B9:D7:37
X509v3 Authority Key Identifier:
keyid:65:58:1F:9D:DC:ED:D6:46:24:91:A9:66:4F:F2:96:26:56:A5:F8:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVgfndzt1kYkkalmT_KWJlal-FQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:41:71:fa:7b:6a:83:c6:2a:24:22:26:70:ab:ef:f3:da:b0:
88:94:35:33:d2:16:01:c1:21:2e:d9:88:51:12:9b:9d:89:1f:
53:d0:05:98:fd:76:a8:e7:ee:b1:c6:2f:49:1f:34:cb:03:28:
6d:45:8f:aa:ef:0b:df:10:b3:fe:84:06:ca:e3:d8:43:00:c7:
04:79:55:a1:7d:7a:af:ee:3e:97:15:be:bc:9a:e4:6b:5f:27:
bf:60:ed:cf:e0:27:5b:a9:99:a4:a2:5c:4f:2d:d1:c9:b9:8e:
21:44:5c:61:00:8f:01:e2:71:0d:ae:e5:67:16:97:31:cf:b3:
3b:9d:8f:90:f5:62:8a:06:23:78:82:06:75:a4:ea:f3:47:ee:
44:47:e6:ca:ea:f7:b5:93:c9:7f:d3:c7:5f:25:43:f4:4b:eb:
56:57:96:5c:d7:a6:19:0e:07:7e:6f:7c:ba:3d:de:3d:a3:64:
02:13:c4:68:53:05:f8:1f:c3:25:aa:60:8f:7d:49:24:30:16:
e4:07:02:88:4a:e6:82:60:d6:ef:78:81:aa:11:69:01:40:98:
ae:79:c7:77:6e:1a:27:08:08:12:40:37:ea:65:a3:cc:85:bc:
39:bb:97:02:30:d4:31:de:c7:69:d0:ac:7d:bf:1d:55:e7:18:
f6:4d:51:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:52:27 2026 by rpki-client